Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/89d17311-9faf-3f5f-9727-ca2d0c070a07.roa
File: 89d17311-9faf-3f5f-9727-ca2d0c070a07.roa (raw, json)
Hash identifier: SQNWMau5Xc8/v1ATDmObIH1rZipIgh5vlrFLxUgNhX0=
Subject key identifier: 99:68:41:FD:22:28:AE:27:DA:B7:F4:BB:8C:15:1C:3A:47:AA:CA:96
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFA9D6C8E94568308C7E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/89d17311-9faf-3f5f-9727-ca2d0c070a07.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.113.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:a9:d6:c8:e9:45:68:30:8c:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=bc9f7fc3-2ede-4667-9b16-6fd9891b07c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:68:20:ca:39:58:d8:02:f7:36:b1:6c:bc:
65:c2:df:c8:64:12:52:5a:3c:f5:2c:70:e9:5e:55:
0d:51:42:3b:d0:0f:64:85:de:ee:a1:03:a4:ea:aa:
d8:08:57:58:13:d8:f1:2e:4b:21:be:0a:13:43:a3:
04:34:62:ff:68:89:4b:6a:1c:83:cb:a8:fb:ed:fe:
a0:0c:94:bd:3d:1d:6e:e2:45:d0:41:70:1d:32:a3:
cb:6c:7f:97:fb:bb:e4:8d:80:32:82:d5:89:fb:70:
fd:a9:aa:2f:78:df:96:cb:95:20:4a:83:1c:a3:43:
9b:f0:06:3f:61:3d:89:d7:68:e5:1f:5e:27:3d:22:
73:00:2f:f9:d0:e9:73:c7:bf:d9:80:eb:22:0d:52:
6b:64:76:7a:15:79:02:94:e5:36:03:f6:9f:6e:64:
48:59:50:04:2c:b8:41:45:39:4e:3b:97:85:db:4b:
ac:50:00:14:ce:12:0a:e3:6f:d1:e6:7f:8b:38:c4:
4a:ce:b8:71:61:1b:ab:0e:d6:16:f6:76:4a:43:34:
e2:31:b4:54:28:a5:40:24:44:7a:9f:39:1c:e1:fd:
34:f2:af:0d:94:9c:97:50:31:c5:54:97:9d:e2:65:
d9:64:3c:d9:56:cc:6f:15:ce:55:da:d7:d4:d3:5c:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:41:FD:22:28:AE:27:DA:B7:F4:BB:8C:15:1C:3A:47:AA:CA:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/89d17311-9faf-3f5f-9727-ca2d0c070a07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.113.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c0:5a:9b:94:71:80:78:3d:16:6f:c9:39:84:af:01:cd:01:
10:4b:95:67:a8:55:65:a0:ea:e1:e1:86:62:fe:0d:05:c2:d9:
8f:7e:db:9b:90:ce:2e:ee:9c:cc:26:a7:bb:7c:49:02:ea:4c:
6a:f9:27:d4:2d:aa:85:d5:73:c5:ef:1b:1f:a7:02:0d:ea:1b:
fb:1e:f4:59:e7:47:a6:1c:5a:fe:c2:65:ba:95:15:35:dd:8b:
7d:e2:a2:ab:30:fe:34:a5:e6:95:1a:3a:dc:fb:bc:e6:96:5d:
1a:7e:38:36:b3:5e:11:24:23:27:41:dc:94:27:a8:c5:1f:95:
0b:9b:b0:78:5a:e5:8a:e5:79:14:17:f5:e0:18:32:81:51:e8:
5c:de:df:be:44:9d:63:ec:78:66:f4:77:cb:24:76:62:e4:f5:
54:1b:16:76:b9:5f:a9:97:81:ae:0d:21:15:1d:fd:3e:7b:71:
44:82:67:26:6c:52:d7:2a:6c:28:6a:2a:52:f6:9d:85:13:3e:
e8:9a:f6:b1:7e:7f:45:3e:7e:a5:30:db:c4:ad:a0:ee:28:d5:
74:69:c0:92:4a:b0:89:e8:82:dd:18:19:90:61:1b:69:3a:db:
0e:c8:f9:64:9c:21:09:c0:bb:50:73:f3:af:e2:75:fa:b1:cf:
ee:92:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org