Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7de0cd68-1b09-30d3-80b0-028555a1a74a.roa
File: 7de0cd68-1b09-30d3-80b0-028555a1a74a.roa (raw, json)
Hash identifier: p0tX+qy6FwmEa8WqyNTIPF0Uhiypbdo7Cap46FIMkC8=
Subject key identifier: 43:88:FA:DA:20:CE:7D:DA:A7:84:B5:3D:B4:14:87:6F:80:49:8A:B3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4AA243607A9BC233EAC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7de0cd68-1b09-30d3-80b0-028555a1a74a.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 7122
IP address blocks: 142.161.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:aa:24:36:07:a9:bc:23:3e:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=d8baaac3-1147-4537-9225-2b470530ec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:45:b8:cd:c4:3b:9f:57:42:4c:51:ad:35:c3:
58:9f:78:ce:23:7e:f9:b8:cb:d3:10:4a:13:d3:63:
6e:dd:4c:80:ea:72:35:9e:ff:aa:8e:e4:e3:c9:fa:
91:8a:50:34:89:73:ad:d4:0b:36:76:c2:8c:67:51:
9d:08:82:5d:ff:79:2f:aa:5e:3c:44:60:4b:18:83:
00:e7:bf:15:5f:99:2d:4b:6d:6a:7f:7f:ca:e6:7f:
1c:f6:5b:da:86:cf:fe:16:26:04:f6:8b:2a:3b:69:
cd:2b:74:d1:b9:d6:29:d5:4e:5f:cc:72:e9:51:b3:
34:8d:7e:2c:9c:79:d4:85:f1:34:93:18:29:fd:36:
d0:c1:9e:e6:0e:d3:f7:e7:7c:bc:fa:e9:27:97:71:
37:48:98:1a:3a:17:4e:7a:1e:df:b7:7e:df:21:b6:
d4:d8:f0:f7:38:11:88:40:d6:e0:7e:e4:c6:bb:19:
df:ba:e8:a3:b4:a4:0b:53:41:4c:4a:da:9d:ad:db:
27:aa:ef:60:77:72:b2:3a:b7:44:d0:c0:ae:d1:00:
52:3d:e5:48:3a:a0:59:88:5e:61:9d:1c:6a:3d:98:
2c:86:0e:92:d4:d9:81:bd:39:c0:de:b9:f9:1b:7f:
2e:08:a5:17:d7:9a:f8:dd:48:8e:76:46:64:0c:46:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:FA:DA:20:CE:7D:DA:A7:84:B5:3D:B4:14:87:6F:80:49:8A:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7de0cd68-1b09-30d3-80b0-028555a1a74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:4f:70:0e:d6:9a:c4:fb:7f:ac:83:54:fd:5a:91:1a:59:bc:
b5:a9:07:2e:2a:6d:29:6a:d7:e7:a3:65:07:3e:01:7b:3d:58:
64:08:d4:db:aa:b4:eb:68:5c:9b:f2:e1:04:06:82:41:b4:30:
2c:86:9a:7a:b3:b8:cd:4a:50:b1:4a:42:c4:b6:41:09:44:6f:
b3:c2:8c:e5:84:78:b1:82:e5:3a:ce:c1:6b:b4:83:78:bb:f0:
86:72:9b:cd:40:da:1a:b0:3e:34:d5:84:75:07:5f:d2:4e:e5:
37:c5:4c:49:9b:40:b8:6e:d4:ec:c7:85:7d:a7:1a:b6:ec:d2:
ad:3e:67:df:24:da:15:22:5e:60:30:d4:a5:59:5f:21:5b:f2:
ec:53:e5:34:b6:89:2d:eb:c0:0d:aa:1c:e0:92:24:ae:48:46:
5a:04:74:f2:8b:2c:d8:43:27:38:7f:55:75:9b:d4:d4:5d:83:
ff:98:32:2f:a7:79:91:8d:d3:1d:23:63:e4:9c:b7:be:3f:86:
56:7c:34:8d:45:03:ec:27:2b:38:23:ac:fe:78:06:25:25:16:
55:48:79:de:4c:6f:27:01:2b:b8:26:2f:4c:dd:c5:46:a3:1d:
87:18:c8:b5:10:b0:f1:e5:14:39:63:16:58:1d:b5:48:33:46:
86:ac:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org