Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5f8b877f-14ac-318d-9e57-f29a7b51c6e7.roa
File: 5f8b877f-14ac-318d-9e57-f29a7b51c6e7.roa (raw, json)
Hash identifier: 4XSWIz7tx3gJ77M/IiI+xbuR3uoQW2llSk3hRkRZSSg=
Subject key identifier: 7D:A1:7B:0C:E3:C7:7F:8A:54:2D:0D:15:24:42:39:04:7F:CD:67:D9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493142C997531A3D9BE939400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5f8b877f-14ac-318d-9e57-f29a7b51c6e7.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 855
IP address blocks: 142.162.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:2c:99:75:31:a3:d9:be:93:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=57aa8901-4f31-43d0-91eb-2e57c5add111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:fb:5b:8d:8a:22:ad:b4:8f:c9:4c:66:ba:
66:3f:06:3d:5f:ce:31:03:9a:85:61:77:dc:fb:05:
fd:44:0f:7a:1f:7b:8e:4a:8c:c5:6d:09:2c:35:24:
5a:73:e1:07:4a:45:89:aa:ea:6f:19:68:c9:6f:2a:
e2:6e:23:33:f8:b7:11:55:08:e5:25:9f:54:12:0d:
85:63:0c:d9:a1:9e:8c:62:2e:69:3a:d5:87:5f:43:
57:9a:8d:14:dc:22:25:de:39:23:f5:bd:2e:a6:79:
b9:d8:de:98:88:6a:34:d6:bf:a0:38:1c:80:98:24:
b1:7e:9d:c1:48:75:54:50:14:e8:21:f3:d0:15:d1:
34:c4:90:cf:34:df:cc:62:9b:54:b1:4a:98:a6:ed:
90:13:3e:d7:47:23:16:98:36:3b:94:2f:2b:c6:47:
84:ba:d1:27:2d:a9:0d:79:02:00:4e:0a:01:b1:43:
ac:96:a0:88:92:f3:be:a3:a6:12:39:e7:59:71:52:
9f:5d:60:d8:99:eb:e5:d0:e1:a3:4d:ec:ac:c7:e9:
fd:b1:e6:d8:15:87:1f:03:17:b3:09:40:ec:3d:cd:
ca:8d:bf:4b:05:eb:91:6e:1a:2e:f1:3f:d2:48:da:
e0:36:2e:48:c1:3a:15:7e:be:a9:61:8b:80:53:01:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:7B:0C:E3:C7:7F:8A:54:2D:0D:15:24:42:39:04:7F:CD:67:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5f8b877f-14ac-318d-9e57-f29a7b51c6e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:57:2f:37:f8:cc:47:c0:a5:10:1a:33:90:fa:5c:a8:3c:e5:
e3:f2:a1:88:6f:08:ed:3f:43:ee:ff:79:c5:dc:ec:42:a4:ad:
01:ba:f8:98:21:7d:91:d9:95:1c:51:f4:88:9f:83:45:6b:5f:
72:a6:f0:1f:5b:06:32:3c:cc:f8:06:dc:cd:8b:19:5b:fa:23:
cd:0d:f1:55:17:61:80:54:c8:1f:5d:42:a5:63:6e:f4:03:a0:
d8:dd:d7:88:2f:12:ad:fb:36:0b:2e:80:b1:c1:f3:ab:cd:84:
a3:05:40:7f:3e:ac:b7:4f:77:27:9c:10:43:42:8f:31:9f:9e:
da:93:6d:d6:3f:d9:4e:93:53:62:f0:ca:9e:f0:fb:44:d4:9a:
2c:a0:13:9d:0c:e8:f4:99:81:4f:81:56:ed:c2:3b:9d:44:8f:
c8:77:81:26:bf:73:60:59:b2:02:aa:70:66:b9:80:81:a0:f7:
e5:0c:98:23:6a:43:7e:bf:4e:41:2f:99:33:01:99:51:33:a9:
ba:01:7b:30:ec:b7:78:02:91:1a:55:ed:97:ad:60:7b:72:bd:
e1:0d:3a:97:7a:0c:e1:1b:f5:b0:25:45:64:0c:59:7a:27:e0:
90:e4:54:bb:12:ce:9b:e6:2d:b1:a8:30:43:47:3a:0d:06:0a:
67:64:af:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org