Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e40b1a1-5496-305b-b83a-091ab74063a4.roa
File: 7e40b1a1-5496-305b-b83a-091ab74063a4.roa (raw, json)
Hash identifier: IuElhBijIfCqOxldiNj2cLnzFbnyaqj/mPqDgB3KXug=
Subject key identifier: 83:B8:CF:07:28:47:70:77:71:5B:97:0E:20:40:ED:71:FA:A1:1E:4D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4CCCEF635B010C2199B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e40b1a1-5496-305b-b83a-091ab74063a4.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.188.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:cc:ce:f6:35:b0:10:c2:19:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=7c4082cd-17cf-4cd7-85b3-96d1d9024264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:fe:94:ba:55:55:c2:a5:df:3b:5f:04:ef:
02:97:0a:8d:7d:ec:db:44:58:80:b6:3f:f4:3a:cc:
f9:52:f1:80:69:f4:c5:73:6c:6d:2d:3d:9e:be:56:
87:22:fb:78:88:d7:cb:7d:a0:f7:0a:18:30:89:02:
d2:82:46:02:31:c8:28:52:c9:5e:b8:f3:84:b4:02:
04:41:fe:cb:11:d0:24:bb:49:a5:fe:20:d5:eb:7e:
31:b7:b7:6a:7c:b9:f7:a2:09:e9:0c:a2:1e:61:c4:
47:27:2f:2f:29:f0:bb:2d:af:68:11:40:d9:6f:b7:
45:7a:2e:64:f8:7a:27:a3:c5:ed:cc:10:14:7f:96:
5d:ac:5c:37:a3:bb:8e:b5:56:56:a7:b3:cf:55:fd:
eb:37:48:8f:ef:93:48:01:bf:3a:19:ef:56:4f:1d:
61:56:83:57:83:ff:e9:58:73:76:c3:a6:1f:24:dc:
67:db:04:2f:66:56:cd:06:42:ec:12:a7:15:3a:5f:
08:7b:40:84:bf:d3:0b:89:e6:18:9f:c8:1b:db:b2:
8b:43:51:54:6b:ad:d8:7f:de:04:0e:85:73:8d:88:
bc:19:76:92:6b:89:9d:3b:0b:fd:ea:7b:f9:a7:d0:
82:b1:fe:0a:a8:7a:04:67:19:7b:05:46:7b:6a:bf:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B8:CF:07:28:47:70:77:71:5B:97:0E:20:40:ED:71:FA:A1:1E:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e40b1a1-5496-305b-b83a-091ab74063a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:0c:2f:69:37:4c:9d:29:85:7d:83:f5:76:5a:54:af:93:19:
63:cb:93:a4:0e:6a:8e:a6:54:7e:0e:ce:0b:7a:ac:47:bc:87:
50:fe:29:f5:41:c0:19:59:5a:2a:8d:bc:da:93:c9:4c:b5:cc:
58:63:ec:61:cf:6d:a5:ec:08:b2:94:fe:4d:4c:c6:85:a4:b8:
98:60:76:40:1c:95:27:b3:50:84:e1:ec:2c:79:27:45:69:1a:
86:2a:4c:5e:2d:d2:62:ca:b7:ca:ab:78:7e:b6:4b:4b:13:b5:
24:8c:d4:a5:9b:99:f1:f7:9f:41:ee:4a:3e:e6:61:75:00:03:
e5:38:b7:13:cd:15:28:30:5e:3d:bc:db:c6:02:7c:b4:be:5d:
39:cf:41:88:86:22:bf:58:24:5e:54:48:7d:d1:3f:38:b3:61:
f4:c5:e3:1d:c2:fd:e2:c1:f5:f0:25:78:4f:e5:10:97:ac:fe:
d3:16:43:aa:b4:6b:6b:62:8e:e2:33:78:fd:4e:dd:10:68:f8:
46:65:62:bc:a7:03:5f:c8:27:c5:6e:fe:ba:53:5d:9c:8f:d1:
73:c9:d2:43:59:d4:1f:20:03:f2:8a:5e:9a:2e:a2:dc:08:8d:
10:0e:b7:76:a8:26:19:4c:0e:0f:6e:c8:7b:f7:c0:ed:94:dc:
86:a9:56:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org