Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9042f8ed-4044-3bb0-bd36-fe018d60551b.roa
File: 9042f8ed-4044-3bb0-bd36-fe018d60551b.roa (raw, json)
Hash identifier: A7lusnI8LgOZ/yZemTo+R2Fn8PqlhQZgkLq2K4wkuts=
Subject key identifier: C6:8F:05:6B:BD:2C:90:4A:1D:22:64:76:A1:B4:98:C9:C4:DC:EC:74
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285843A82791B0206A084F88BE36E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9042f8ed-4044-3bb0-bd36-fe018d60551b.roa
Signing time: Mon 23 Oct 2023 12:00:00 +0000
ROA not before: Mon 23 Oct 2023 12:00:00 +0000
ROA not after: Tue 23 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.134.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a8:27:91:b0:20:6a:08:4f:88:be:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 23 12:00:00 2023 GMT
Not After : Jan 23 05:00:00 2024 GMT
Subject: CN=014269ad-b943-46d5-983e-9881cad5da10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:22:59:c6:c8:dd:59:7d:13:4d:84:07:a1:
25:30:8f:f9:01:55:5a:9e:4c:7f:cc:b5:63:74:78:
06:3a:77:bd:18:97:5d:92:7c:a7:39:73:be:e6:45:
a8:bd:f9:65:54:7c:2a:47:43:69:42:ab:34:a7:9e:
e1:e8:76:e3:bd:43:21:a5:cb:c0:f2:be:d7:6f:b5:
97:5b:41:84:bd:62:d5:75:a0:df:0c:16:02:55:cc:
86:14:53:c3:ae:65:8e:60:fa:c2:2e:65:4a:4c:35:
36:4e:1f:f7:2b:78:31:4d:27:ea:59:28:f2:46:0e:
98:6d:4a:cc:8a:7c:7b:5b:e0:4a:5b:d5:e5:b2:e6:
3c:ae:e8:ea:7e:65:1a:ff:09:4f:1b:d9:12:8a:92:
91:6e:3c:4f:d7:bb:c0:56:60:8f:24:ea:33:6e:65:
47:3c:35:de:92:8e:94:ef:96:eb:c5:9e:87:e7:c7:
eb:6b:90:9f:8f:7f:9e:17:20:ba:da:6f:44:10:9f:
0e:f0:e3:f4:1e:58:a4:6a:0e:12:a7:ac:38:a6:17:
f5:0b:1b:da:20:80:ac:e7:26:79:80:a8:b3:ce:b9:
43:ba:82:19:23:fc:a0:14:e9:56:64:80:5d:aa:4e:
f3:9a:7f:0f:aa:6b:cd:69:02:43:a7:e3:aa:a0:00:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8F:05:6B:BD:2C:90:4A:1D:22:64:76:A1:B4:98:C9:C4:DC:EC:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9042f8ed-4044-3bb0-bd36-fe018d60551b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:e1:28:93:dd:b6:05:c7:ae:1d:4f:8f:59:c4:5a:d2:93:47:
17:d7:fe:d0:c2:af:d6:95:d4:d7:fa:90:e9:f2:49:53:6f:8f:
85:99:85:74:8d:c8:60:ca:dc:3d:12:ac:89:20:f8:1d:44:df:
04:fd:c3:a9:94:ac:e0:29:2e:82:29:2b:a7:00:25:ed:25:1a:
28:bd:f0:26:8d:a4:8c:be:98:3b:fc:c4:24:23:62:a2:79:c2:
f7:79:c0:ca:3e:79:b2:0a:ed:6a:67:12:7c:c4:54:b0:3b:39:
6d:c2:93:7c:ee:76:72:a5:06:60:4c:df:b8:0b:ea:4c:f9:cc:
21:6d:7f:e9:f1:80:3b:59:cb:37:47:5f:64:46:15:81:ed:7f:
b8:07:7c:46:b8:60:ff:64:6d:ec:fd:c0:53:e6:18:0d:67:e3:
17:04:60:de:db:87:4e:d2:85:54:38:36:d7:30:38:76:77:37:
28:4b:4b:78:3a:f1:5d:84:fb:86:66:cb:e9:79:69:79:25:41:
1f:65:45:26:41:60:44:92:61:62:36:1c:9e:86:6e:7b:a6:87:
bb:13:ec:57:c6:6c:1a:41:fd:45:5e:b3:b2:47:c5:f6:d0:14:
ec:e8:f1:20:11:aa:da:b6:40:14:b1:68:cf:1f:15:a5:48:b0:
4d:75:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 05:58:02 2024 by rpki-client on console-fra.rpki-client.org