Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/68916878-22e4-33b4-b56e-0edbc88c847b.roa
File: 68916878-22e4-33b4-b56e-0edbc88c847b.roa (raw, json)
Hash identifier: cAGT07513Ins3F9F9Ute1gptAYZNNsfyll3uES72ep8=
Subject key identifier: 7A:0B:73:2E:D2:0C:E4:55:BD:D2:33:4F:D2:98:EF:79:73:C2:9E:A5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314326D56CC5F468803B180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/68916878-22e4-33b4-b56e-0edbc88c847b.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 142.170.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:32:6d:56:cc:5f:46:88:03:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=54c1668f-76a6-4177-b998-4357458a0c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:19:b6:d0:02:0f:df:ec:7e:89:ab:25:96:
55:a6:57:29:6d:85:2d:01:d3:fd:9c:03:00:ac:03:
d4:31:02:35:84:c6:d3:93:b9:6f:c4:73:07:26:a4:
9a:d8:db:d3:32:2b:11:0b:da:87:70:25:bc:3e:97:
a2:29:b9:88:b4:5f:c6:5a:52:5f:38:d7:fc:41:34:
1c:1e:98:72:d3:2f:40:b1:55:22:27:e7:ea:d4:f7:
a5:65:f7:b8:dd:46:aa:ca:98:22:5d:ea:40:4f:a4:
01:c2:12:b1:be:cc:c2:08:51:ba:6a:c3:c7:88:90:
61:21:ba:82:8f:93:f6:be:94:18:5c:fa:62:c8:57:
fe:75:17:f9:19:08:20:af:8a:68:cd:02:7c:36:cc:
c9:b2:1c:04:db:4a:1b:e8:c2:db:8f:8c:f4:ac:1c:
91:2f:2b:d0:11:ae:d5:dd:f7:0b:4a:75:bc:cd:8a:
fc:ee:b5:44:e2:2a:55:fe:f2:13:4e:b5:9e:a9:28:
61:ea:8e:2a:94:c1:a4:c5:96:0d:84:07:62:1f:9a:
71:15:86:05:17:b0:f7:e8:8b:ee:ce:91:28:83:d4:
63:ce:bc:60:e7:dd:ef:fa:cf:30:b7:55:a9:d7:1f:
19:3b:7a:a1:37:66:74:69:67:6a:78:2c:46:29:f2:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0B:73:2E:D2:0C:E4:55:BD:D2:33:4F:D2:98:EF:79:73:C2:9E:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/68916878-22e4-33b4-b56e-0edbc88c847b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:76:04:4f:f2:4f:ff:01:df:7b:c5:95:ed:d6:d0:ff:e4:81:
67:44:74:3b:be:2e:68:66:00:b1:22:cc:22:fe:81:ec:c3:84:
27:e9:32:b1:07:25:ff:1f:81:3f:47:11:c3:1b:63:c0:cd:85:
20:b3:9a:9d:df:ac:d6:d3:65:00:28:28:7a:c5:ea:bf:6b:19:
da:d8:6d:41:23:87:12:ea:a7:e2:e3:42:70:42:2e:8e:fd:17:
45:c6:4f:01:d7:8a:17:35:60:2a:c4:ee:55:54:8f:cb:62:b0:
ae:fa:b6:80:63:1b:f0:34:d3:79:51:24:65:0b:e9:b4:a8:09:
ee:73:9b:68:de:6b:eb:0a:fe:4a:4a:b6:8f:7d:5d:c2:4e:77:
a0:c8:f7:b3:01:60:32:db:dd:ac:79:9a:32:4e:51:fd:3b:d2:
70:33:73:d4:ad:e0:57:08:db:67:bd:8a:a9:6c:23:b0:ed:31:
e8:39:cd:01:01:8a:b7:47:5f:b5:4f:95:c2:79:32:42:cd:4b:
4a:d1:66:61:88:3e:55:86:98:c1:b5:70:08:f9:b0:46:41:15:
95:70:80:91:c8:c1:a4:b3:9d:b0:e5:ef:ab:c9:d7:b5:3b:75:
6b:85:40:2c:b2:1b:51:f6:8e:09:62:5d:6f:4d:8b:ba:a2:9f:
8d:7e:1c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org