Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65cf4db3-e4ed-335f-8e4a-4e933cbdcdda.roa
File: 65cf4db3-e4ed-335f-8e4a-4e933cbdcdda.roa (raw, json)
Hash identifier: p1knEI7jCxe4KJDyvXR30ufKvSU7/sgMBKzTqNEKwtI=
Subject key identifier: D2:26:F7:60:EC:98:24:86:72:E4:7F:B5:EC:FC:FF:37:D7:9B:9C:8E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314380DAD71C2D2B4B29940
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65cf4db3-e4ed-335f-8e4a-4e933cbdcdda.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 142.177.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:38:0d:ad:71:c2:d2:b4:b2:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=2a2625af-0d02-464a-901a-a2ac37b77c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:2e:30:61:13:d0:3b:a4:02:32:ca:82:40:
92:12:c4:c3:97:f6:51:2c:30:fd:78:00:02:83:a7:
5e:1d:eb:6b:76:d6:21:e0:da:72:7c:55:09:66:71:
26:98:60:30:b1:c6:b7:28:82:fc:cf:f9:ac:59:7b:
b6:76:d4:30:a0:d7:f2:0f:e8:e1:43:21:40:17:62:
27:4d:fd:24:c7:b7:f0:f4:a0:73:1e:6a:81:b8:0a:
a3:a8:81:fc:a0:e0:55:6f:ee:19:04:c1:6d:e6:4d:
f3:ac:ba:97:3a:c2:c1:44:79:c7:dd:cc:98:c7:20:
b5:c1:eb:96:a4:44:2b:e0:14:1c:de:a8:16:67:3b:
66:fb:44:b5:39:30:3b:76:e0:be:b1:41:02:d5:5b:
f5:4d:90:30:75:c1:40:77:56:c0:a7:88:7a:6e:86:
8f:40:9b:06:7b:42:34:ab:b6:3c:7f:db:10:f6:07:
8e:29:b2:e8:b0:8b:31:24:d5:24:87:eb:47:88:3a:
03:89:73:9e:ad:75:e5:f1:1b:80:6e:a5:6d:fc:8c:
9d:65:b4:db:31:21:90:61:bf:f6:e3:21:96:db:42:
e7:52:ee:5f:dc:ee:89:ea:6e:82:ec:14:21:00:29:
cb:13:2a:54:ad:8f:ba:fe:8f:0a:64:c2:0f:40:aa:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:F7:60:EC:98:24:86:72:E4:7F:B5:EC:FC:FF:37:D7:9B:9C:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65cf4db3-e4ed-335f-8e4a-4e933cbdcdda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.177.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:60:e0:b9:bb:88:f5:70:06:a8:f5:b4:3d:e7:cc:0e:1d:59:
4c:be:5e:ea:5a:ff:9a:93:a1:f2:41:ff:5f:7d:3c:4d:f4:31:
ec:30:25:c2:c8:e0:3c:01:1d:64:e4:2f:ea:d3:64:66:2e:41:
82:69:b1:27:68:a0:68:4e:b1:98:76:6b:24:77:35:5f:cc:74:
7b:89:c6:a1:19:44:be:f4:fd:06:4e:76:0c:d5:f4:48:de:06:
1b:43:70:8f:24:b5:ce:10:33:47:ac:15:20:c9:53:81:6e:6f:
e9:25:f3:8e:89:85:f5:33:14:6a:ed:9e:fd:f1:e1:80:5d:92:
ac:c7:18:52:c7:14:ea:2b:e0:7c:5b:2b:c4:d4:55:eb:6d:ba:
e9:d8:9b:96:3f:61:49:53:ae:cd:60:e3:3c:17:5b:d5:79:d3:
d4:98:93:83:3a:1a:1a:86:9e:9e:3e:6e:1b:22:75:76:b3:a4:
bb:c5:b6:9c:a6:a2:a9:a8:b5:57:cc:62:76:3b:5c:f2:20:46:
72:59:57:7f:7a:96:ae:e0:2e:df:27:99:50:21:fb:f2:7a:54:
c7:3f:6a:b8:60:2c:d3:9b:b4:2c:00:2f:0e:60:04:22:22:a5:
a9:bf:de:ea:08:48:60:69:c8:11:ba:6c:b2:9d:a5:87:8b:73:
e8:f7:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org