Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4e9d1912-e1f1-3a8e-9e01-bf70a3f7e631.roa
File: 4e9d1912-e1f1-3a8e-9e01-bf70a3f7e631.roa (raw, json)
Hash identifier: VG+8I8Xw0OMQsZuTsjqun+lphfulqlCMlSxiqgJ/gAQ=
Subject key identifier: 5D:67:5F:A8:37:56:B0:87:44:40:3F:BB:32:14:55:59:3F:FA:9E:8B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493143CAF4609B5453CC2BF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4e9d1912-e1f1-3a8e-9e01-bf70a3f7e631.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 142.182.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:3c:af:46:09:b5:45:3c:c2:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=e75b2147-cdc9-44aa-9be1-e4c4c87b5c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:6f:36:6d:af:42:a8:11:26:91:70:6e:54:
cc:b2:fe:b6:b8:c7:0e:1a:73:96:53:ea:85:52:cf:
dd:1d:89:6d:41:f6:40:a1:b7:79:6c:e1:57:84:85:
37:07:78:b8:d2:a4:66:09:a7:4b:69:89:87:2d:77:
2d:5a:15:62:d3:28:39:4b:a6:88:bb:2f:7c:70:6f:
ba:f5:08:29:83:d9:47:e6:2f:ee:b1:f9:6b:a5:fe:
44:c7:d9:45:5c:13:c4:19:cc:27:76:9e:64:c4:bb:
89:44:22:48:ca:b8:90:da:34:08:4c:09:64:22:09:
12:e5:0d:0f:92:2d:62:43:ce:9b:81:08:00:77:a8:
87:e0:61:ec:f8:01:e5:e7:10:17:8f:9b:01:a0:b6:
73:e3:f9:7d:c4:4e:4c:c5:35:e7:38:bc:eb:c2:b9:
3a:54:7d:f7:3f:71:cb:2d:87:8c:2f:4a:15:cd:55:
c8:99:b7:79:c5:be:14:b0:bb:0a:69:f9:a8:df:23:
fe:91:e6:f6:65:2d:05:8b:72:7a:49:1b:fe:8d:07:
de:21:ab:db:08:7a:d9:15:93:5d:eb:5b:0a:97:b1:
a6:0d:89:2b:37:99:0b:51:8a:3a:5b:37:35:be:14:
e2:db:9e:43:78:65:02:fd:dd:51:1e:0c:c8:2e:0f:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:5F:A8:37:56:B0:87:44:40:3F:BB:32:14:55:59:3F:FA:9E:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4e9d1912-e1f1-3a8e-9e01-bf70a3f7e631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.182.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:45:57:cc:49:2c:6d:27:4b:d3:02:3c:50:59:cb:7c:4b:ff:
27:a9:95:6d:b6:df:bf:90:a6:be:0b:4a:9a:01:d9:5a:f0:43:
55:d2:4e:72:f8:94:c1:97:9d:b3:8f:1a:09:2e:dd:e5:11:27:
f6:7e:c9:d1:c5:d6:c4:d9:99:13:23:e2:ea:b9:9d:7e:bb:7b:
73:f5:e9:16:f5:6b:c5:b3:3a:2f:1b:b8:36:f6:a6:06:a2:ad:
d1:e8:bc:b1:fb:57:ac:28:01:09:38:b6:8b:da:fe:9e:bc:1f:
b8:ca:25:61:58:d9:2c:3b:34:79:f1:43:1c:01:81:7c:c1:39:
b7:42:dd:29:7b:54:67:d3:06:3e:58:90:ed:80:75:e1:d5:38:
00:cc:1c:03:bb:94:e6:2e:47:41:12:48:32:ba:c8:13:82:31:
e4:74:6b:68:64:a7:c8:cb:3b:8e:76:f2:4d:5b:06:5f:a8:89:
d8:af:a9:84:ca:6d:52:c0:29:d8:46:03:d8:c9:49:98:c7:df:
a2:2c:a6:ff:f4:6a:05:04:50:97:58:73:48:f9:0e:e1:07:32:
1f:82:af:87:f4:56:3b:03:29:f9:5e:cd:c7:eb:62:52:9f:1e:
76:62:a5:19:3a:ce:27:fd:9f:6e:0f:11:46:ef:23:7d:8d:2e:
c8:5c:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org