Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c16773a-ae3a-39d8-95c5-df1e58eaaf2d.roa
File: 3c16773a-ae3a-39d8-95c5-df1e58eaaf2d.roa (raw, json)
Hash identifier: ZamNDLEr/d6JqJ29fBO0pqbDmsMJqRRw9cKQaQF5w4w=
Subject key identifier: AA:22:D6:9F:AC:1E:A4:1F:DA:E4:39:3A:50:43:CB:A8:C7:F3:D3:FB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D292C3BBFB44BF9B9C74A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c16773a-ae3a-39d8-95c5-df1e58eaaf2d.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 18814
IP address blocks: 142.176.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:2c:3b:bf:b4:4b:f9:b9:c7:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=6bc88364-b1c5-4a8a-bf25-9389a3cca290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:b6:d0:e2:a7:3a:93:38:dc:30:c6:4b:83:
9d:c2:f5:7a:9a:54:0e:30:78:cd:b4:fb:51:ea:a1:
f8:73:76:61:ce:da:ca:0a:6d:b6:0b:b7:26:cd:90:
20:a8:9d:c4:7f:83:9e:6e:f8:09:ac:a3:e1:da:dc:
fb:bc:a5:d6:75:08:d4:4d:71:6c:9e:6a:1e:26:89:
aa:29:49:b2:76:a1:de:41:dc:b6:27:b2:12:63:f2:
0b:41:06:46:98:7c:82:3d:cf:e9:80:ea:3a:67:b9:
7a:80:ef:36:5e:87:87:d0:a7:45:21:69:18:b2:79:
a9:65:ea:81:a4:ec:4b:fa:a1:cb:8c:49:fe:50:86:
03:a9:3d:55:66:30:26:bc:cd:fe:b1:26:f6:ad:a8:
fc:50:fd:3d:27:dc:8d:ca:1a:fe:e3:9d:ea:ef:9b:
e8:2a:93:09:28:0a:a1:a8:b7:f9:d5:d7:81:e9:70:
01:ef:71:cc:2b:86:be:2b:4d:e1:18:24:a1:2b:79:
74:60:7f:39:d1:e8:b2:a4:5a:c6:20:4d:02:94:d7:
4d:a6:bc:2f:af:e0:30:7b:15:e9:56:6b:27:02:11:
17:b0:b7:97:86:3a:35:cb:db:d4:9d:87:2e:4f:ab:
76:58:0f:34:e4:2d:e0:c4:e7:6e:c7:bc:1e:09:46:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:D6:9F:AC:1E:A4:1F:DA:E4:39:3A:50:43:CB:A8:C7:F3:D3:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c16773a-ae3a-39d8-95c5-df1e58eaaf2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.176.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:26:f9:55:ec:c8:a8:32:80:a6:59:8a:a2:8e:90:8f:4f:22:
23:8f:c3:bb:9e:ed:a0:44:7d:42:b7:fd:07:ff:71:62:f1:a7:
5a:4d:35:bb:b6:02:9c:6f:75:38:f3:46:97:16:4f:0f:40:9a:
c8:91:84:53:65:67:1c:3a:95:a9:78:ba:03:20:58:3e:6b:40:
95:7a:c1:6c:25:2d:51:02:b8:a8:90:5b:2a:63:92:65:c1:06:
b6:a2:78:4b:80:c0:96:e4:e0:7a:25:96:dc:4e:2b:81:15:fd:
dc:8b:12:e7:59:bd:15:2f:62:15:6d:81:6f:c6:f2:b3:67:26:
94:86:71:ab:fc:ab:54:89:c0:b9:40:69:d5:84:e1:60:09:98:
08:a8:53:17:a6:27:ff:7d:8a:be:dd:8a:76:a9:c2:da:91:41:
05:7c:9f:b1:a8:7d:8e:42:fc:ed:b0:84:38:04:e4:58:3a:b1:
06:5b:fa:15:84:61:9a:ab:1e:c0:92:87:dc:d9:64:9c:aa:5b:
6a:a8:4e:44:a1:3c:6b:e9:c5:7d:14:d6:25:a3:09:4a:ee:3c:
07:f8:23:1d:0f:2d:48:2d:1c:6b:7b:64:89:fa:a9:8d:17:78:
21:52:9b:c3:9b:f5:ca:d7:3a:8e:b6:02:17:12:49:ab:4c:a9:
87:d2:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:57 2025 by rpki-client