Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b31cf85-60d1-306a-997b-545293356234.roa
File: 5b31cf85-60d1-306a-997b-545293356234.roa (raw, json)
Hash identifier: gWriXAiVR02rpe+dxcZTPJh2GzgKCEjoO+TCWAopWtY=
Subject key identifier: EE:26:71:AF:A6:09:A3:DD:B4:17:55:11:BE:D7:53:47:FD:BF:86:11
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFB6A450B3BE39B97C9340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b31cf85-60d1-306a-997b-545293356234.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.122.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:b6:a4:50:b3:be:39:b9:7c:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=4a7351d7-64ea-480e-8ed3-840251314b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:2c:9e:b5:f7:1a:b4:f3:b3:78:c5:0d:76:
ec:6e:dc:a2:48:f4:a6:ff:4c:61:03:6b:bc:65:a3:
24:a3:f9:82:49:35:07:58:98:46:bb:b7:e1:f5:4c:
e2:7c:37:2a:b1:29:9a:e2:4d:e5:3c:66:f2:c2:48:
94:1e:23:20:4a:49:08:bf:8b:e7:71:5c:17:37:9a:
e2:ba:85:50:75:22:14:6c:c5:88:cd:0a:7e:ea:93:
5f:76:a3:54:1a:97:bb:4d:ae:82:8d:da:b5:72:de:
5e:64:b7:83:f7:99:4b:d4:d5:43:2f:26:69:a1:77:
f0:0b:40:8d:af:dc:15:2e:57:fa:29:e7:4f:9c:06:
fb:8a:e7:ab:38:39:db:d4:f8:d7:38:68:bb:50:ed:
c4:36:18:1c:f4:d4:ba:cb:2b:da:c3:9a:6b:6d:57:
e6:3b:b7:56:50:fb:e4:85:73:72:be:ff:3a:ae:f7:
45:3f:22:8f:ab:f1:69:07:bf:84:f1:48:37:54:b3:
52:09:65:5b:5b:a1:2b:8f:3b:54:78:a7:05:4f:43:
1f:83:c4:6b:d0:53:60:1b:3a:15:a7:36:b6:03:90:
e3:77:b1:d3:81:37:5b:ef:3d:22:73:3a:0c:d0:d9:
b5:d8:4d:19:17:fc:2b:77:eb:35:4d:23:f8:b6:5e:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:26:71:AF:A6:09:A3:DD:B4:17:55:11:BE:D7:53:47:FD:BF:86:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b31cf85-60d1-306a-997b-545293356234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:9e:69:a9:de:df:9d:c3:b4:83:ab:0b:fe:74:1a:88:6e:66:
0b:58:53:29:ae:92:da:7b:7e:1d:13:3c:ef:97:8d:7a:83:a5:
1a:d4:34:d1:73:3d:c7:2c:60:6d:8a:11:08:0e:40:56:96:f9:
8c:8f:fb:7a:93:59:fa:94:22:90:75:1e:64:fc:44:93:01:e6:
82:4b:5a:9f:00:1d:ba:77:f2:49:d4:a1:63:9a:b5:9b:9c:91:
b6:52:96:c6:14:10:3f:c2:0b:cf:06:37:35:a6:02:e7:5b:b8:
86:09:c0:d6:6e:ec:dd:32:02:1c:34:f1:03:81:54:08:76:16:
ce:5b:41:a4:77:d2:d8:d9:7d:1e:b4:94:50:ee:d8:10:d9:ed:
28:5a:ff:7f:cb:d8:d7:e9:0a:40:4e:6b:02:8f:98:2f:f3:2a:
7f:c9:8c:68:ac:ed:e7:c8:b1:ed:61:22:45:40:7e:82:ae:1c:
45:4c:50:d7:90:97:9a:d6:5b:1b:5e:6e:69:29:c8:74:30:36:
80:7e:47:4c:a3:db:0e:da:60:d7:c9:55:c0:47:16:7d:9b:06:
00:4a:cc:7b:63:31:79:c1:55:3a:47:13:c0:16:45:e3:22:a6:
c7:9e:e3:db:23:61:29:b7:7a:9a:cf:3c:0c:e8:24:2f:a5:ac:
a3:79:9d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org