Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/588ace02-37c2-35cf-9849-a93c6a3da14f.roa
File: 588ace02-37c2-35cf-9849-a93c6a3da14f.roa (raw, json)
Hash identifier: JfzJBgoVEb5WnFZzGv7TONIqpp8EGZdGoJmineOR5QM=
Subject key identifier: 23:F9:5F:0A:2A:39:14:64:81:CC:85:7C:1E:ED:A3:E0:97:31:94:68
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493142032EE085DDB1A2CD500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/588ace02-37c2-35cf-9849-a93c6a3da14f.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 855
IP address blocks: 142.134.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:20:32:ee:08:5d:db:1a:2c:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=9295d738-3088-488d-ad0d-1a8f258cd04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:ff:0b:15:bb:01:63:63:4d:ec:1c:2a:47:
e6:14:82:96:54:94:86:68:58:a1:db:78:cc:12:00:
b0:0f:1d:17:8f:91:a6:7f:42:98:05:1a:a5:fc:c5:
24:94:46:66:09:ad:bc:ad:6b:a9:6d:a0:5e:f2:70:
58:eb:4a:c2:72:ef:58:2a:ae:d0:38:a2:9c:b7:a2:
a3:9b:e2:7c:26:78:4b:8b:a5:6d:b7:f7:71:25:ed:
bc:2f:48:fc:12:48:ba:9b:41:6b:83:09:23:dc:65:
0f:ef:2b:23:f4:4b:1d:09:a3:a2:3c:49:75:f8:f6:
48:b3:41:e6:44:64:3f:55:58:8c:84:85:ba:52:bc:
0c:33:b9:0e:2f:8f:87:14:97:5c:25:42:cd:53:0b:
04:3f:16:9d:9b:a8:38:82:40:84:f6:6b:7c:ef:1d:
1a:f1:0d:f6:a2:58:d5:89:32:3c:2a:2b:e5:bb:c4:
6e:ee:4d:4e:0f:be:18:5c:b1:bb:70:98:d7:18:04:
98:67:4a:3b:91:93:a7:23:97:6f:b9:a1:d3:2d:1e:
80:c8:67:4f:15:8d:6c:4a:9e:31:fa:4d:37:2f:de:
c3:38:cf:59:b3:20:d1:e6:c4:91:74:4b:6a:dc:c5:
9d:8c:42:69:b0:de:f2:5a:6e:3a:99:c6:69:e6:ba:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:5F:0A:2A:39:14:64:81:CC:85:7C:1E:ED:A3:E0:97:31:94:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/588ace02-37c2-35cf-9849-a93c6a3da14f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:63:bd:c2:91:97:38:43:b7:00:e1:10:8e:71:ce:0a:db:13:
55:e9:be:e0:64:ec:57:56:84:30:fe:7d:da:86:64:08:ce:c3:
16:be:6c:b8:58:0a:04:dd:78:b7:e6:07:69:91:bd:da:60:b0:
07:28:38:d1:7b:f5:60:1f:86:75:11:da:18:fa:a8:b1:83:0c:
c3:2c:75:08:ad:8b:07:69:66:a4:a3:ab:d2:1c:07:74:ad:7c:
db:2d:86:1e:7b:22:c7:9e:35:ed:e7:69:8f:ef:e7:25:ed:91:
7f:78:51:2d:ad:2b:71:e1:c3:77:32:ad:8d:ec:37:a3:09:d0:
1b:46:69:45:31:20:ef:34:b3:b5:58:77:88:75:5f:76:35:f4:
03:d0:dc:7b:9c:74:49:60:bb:b7:69:fb:1e:f6:ff:0d:14:dd:
3f:bb:3d:c9:85:27:d4:ae:d2:ca:be:d8:77:8c:e1:2b:ce:db:
5a:47:d9:bc:27:99:e8:f7:bd:63:76:39:56:d2:59:74:8d:d3:
08:a0:0e:ed:b2:70:92:d8:c8:6e:f3:b9:15:0c:49:b3:26:72:
41:1b:16:74:31:ca:7d:d9:90:b9:6b:30:33:c8:88:37:35:18:
ce:e4:a0:00:08:6f:32:00:c5:18:1b:73:8c:ce:7c:32:08:ba:
4c:dd:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org