Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/52afe095-d146-314e-868f-e000811d6574.roa
File: 52afe095-d146-314e-868f-e000811d6574.roa (raw, json)
Hash identifier: 2q5OBe8a9+jjp/2LIE73hkAJyKotabhrTWz0Q+dRDXQ=
Subject key identifier: A9:1B:28:C9:B3:D0:4D:26:08:AE:71:42:86:FC:ED:67:E1:45:3F:13
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D291E0413F2CDD0DA54DD80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/52afe095-d146-314e-868f-e000811d6574.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 855
IP address blocks: 142.134.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:1e:04:13:f2:cd:d0:da:54:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=7316403c-c81b-49e3-96d6-b171b36e42fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:43:ab:da:2a:9b:99:20:d4:53:fd:78:2c:
ce:85:ff:e0:22:e8:44:83:f6:34:1f:d1:31:bd:78:
d3:b4:e5:b0:04:91:02:7b:59:10:ae:a4:a8:0c:29:
bc:fa:1f:74:db:bd:a1:75:07:77:b2:d4:70:9e:41:
19:cf:d1:5c:83:0b:54:d9:7e:7a:4c:66:83:6c:f8:
6a:57:f4:73:0a:70:bd:6d:fa:43:ff:f8:1b:cc:fe:
ff:18:df:31:45:47:f6:f7:46:1a:fc:e2:00:fb:eb:
db:21:3c:7b:c3:75:a7:18:fe:53:2c:0d:6e:cb:29:
c7:6a:59:12:03:66:a1:6c:75:89:c6:ee:0a:f8:59:
45:ad:d8:38:1d:0a:f0:8c:31:62:e3:86:38:08:46:
68:9b:ea:d5:15:d7:68:0a:15:73:7c:32:c0:fc:2b:
98:d3:df:5b:f6:25:d7:23:64:bc:29:53:a7:e7:28:
ee:c3:54:a2:9a:32:8f:ca:77:8b:68:a9:b6:1d:b3:
63:db:9e:a4:a9:cf:d1:aa:ad:c9:ef:2f:3a:3f:6a:
5b:73:3d:3d:a8:31:75:36:a8:62:e9:b6:0d:b1:98:
64:f4:a4:b5:81:f6:9f:75:69:a6:15:4a:76:9b:6f:
98:07:ad:ac:b6:5a:cf:c5:e5:f3:c8:e5:a6:45:5a:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:28:C9:B3:D0:4D:26:08:AE:71:42:86:FC:ED:67:E1:45:3F:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/52afe095-d146-314e-868f-e000811d6574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:52:40:ba:8e:41:52:9b:ea:f1:23:b5:22:17:21:4d:36:87:
95:1a:32:53:bc:05:f6:e4:44:8a:98:aa:f5:27:7f:b1:fe:45:
a7:b3:a9:ef:22:e1:d7:e8:2c:83:37:43:7c:10:55:00:08:14:
54:bf:58:5e:b9:e9:52:77:15:02:a6:e8:ba:5e:67:eb:76:28:
40:cf:05:06:42:2f:b2:a6:55:ec:b4:73:ec:de:38:4b:9f:34:
4d:66:50:52:b7:78:b9:a5:36:31:28:70:2b:96:62:3c:9c:71:
52:14:da:0c:fc:d1:a8:93:eb:a6:ed:e2:0f:a4:cd:b1:9e:0a:
62:cf:68:c4:7a:10:68:87:e0:3b:76:0f:0d:2d:98:b0:2a:b4:
c9:fb:04:ef:64:3d:c0:64:90:c8:37:62:a5:c7:d3:95:41:fd:
e2:69:43:d5:6b:b8:7f:1e:2a:11:f2:20:e4:1d:ca:ca:ca:32:
bc:2f:74:61:85:95:ac:90:61:c5:aa:0d:f7:00:0d:92:17:52:
52:54:dd:4c:ab:02:ec:1c:fd:18:ac:10:8c:04:ff:e4:28:b6:
c6:10:5e:51:4a:cc:9b:cc:5a:30:7a:5d:24:87:44:81:b5:23:
1c:77:aa:32:ac:f6:65:37:13:93:aa:d1:07:e5:96:43:b6:f2:
04:15:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:30 2025 by rpki-client