Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b19ff2a-4ec6-3252-af64-95d0cc9be009.roa
File: 9b19ff2a-4ec6-3252-af64-95d0cc9be009.roa (raw, json)
Hash identifier: RYVAVxmoFBA5eJtsFPhb2w2z3e35YpWhatZ4N+o7Znc=
Subject key identifier: E9:C0:F2:7A:73:E9:F0:4D:5E:28:A4:89:3A:78:65:82:D0:3B:BA:16
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493141CCEFCC2FD4DE9B5FAE2
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b19ff2a-4ec6-3252-af64-95d0cc9be009.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 855
IP address blocks: 142.134.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:1c:ce:fc:c2:fd:4d:e9:b5:fa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=17afe093-9802-4b47-aa99-0e2ca88fa8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:5e:7b:8b:01:82:a3:93:19:72:0a:a0:49:
29:47:d8:19:ea:cd:cb:7f:30:d0:62:cd:9c:87:d9:
8a:56:7b:dc:7e:ec:de:db:2d:09:a0:a1:d0:13:76:
2c:34:4f:68:48:38:25:28:e0:24:37:a8:75:b5:ae:
67:f5:29:c2:97:6b:16:f6:26:8f:91:3a:75:27:f7:
f5:09:af:bf:90:2d:09:26:d5:d5:10:08:c6:cd:78:
6c:48:fa:22:ba:cd:ae:60:05:f6:b9:d5:7c:16:c3:
b7:bf:4b:a0:fe:be:e0:ae:0e:75:cf:f6:fd:bd:3b:
e9:f6:68:88:6a:62:5a:c4:c9:e5:e1:f7:f6:27:ff:
37:7d:b8:1a:44:f3:fd:d1:f2:8e:2e:d9:23:5c:93:
85:cb:be:76:70:14:16:5b:01:91:83:dc:43:3e:68:
7e:0c:e0:8b:4d:b3:ce:be:37:9d:27:78:f0:63:30:
c4:55:c1:ce:7f:0a:7e:87:13:d0:33:0d:b6:e0:17:
67:ad:0a:f4:cf:af:0f:c9:d6:5b:77:87:38:01:21:
38:20:76:c8:73:e2:ae:23:9a:d8:78:1c:69:32:90:
04:1e:d6:d9:da:79:db:ea:7c:f5:0f:19:1c:82:a3:
c2:e7:b9:38:ce:3e:ba:f9:87:f8:12:de:47:a6:14:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:F2:7A:73:E9:F0:4D:5E:28:A4:89:3A:78:65:82:D0:3B:BA:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b19ff2a-4ec6-3252-af64-95d0cc9be009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:dc:3e:6b:f3:b2:7a:cf:28:33:02:1c:8c:3f:31:ec:4c:30:
da:1f:0b:53:05:48:ce:79:f9:f5:ee:ec:9c:63:f9:75:7e:5f:
71:f7:57:85:aa:99:d8:a1:8f:21:d6:ea:17:5b:3c:f4:db:f9:
c4:2c:77:f7:0b:6e:4e:d1:81:12:b1:da:44:0a:f7:ff:7b:fe:
4d:72:2e:72:62:dd:5a:e1:10:ed:a5:ba:39:4e:16:72:28:29:
a8:8d:3c:ff:02:9e:4c:05:60:a6:f9:7e:cc:bf:0d:b4:c9:f9:
f3:ba:ba:46:d2:57:38:ec:44:86:b6:ee:18:b2:74:06:f7:c0:
3c:3a:41:b0:e7:65:d9:ce:cb:d1:50:3b:f2:81:f5:65:b7:28:
b4:d9:60:ee:66:b6:da:24:24:b3:a7:4f:3e:78:27:22:8e:74:
c1:3e:57:a8:56:f0:eb:75:aa:ba:e6:6a:35:25:90:68:ca:48:
bf:66:4a:15:12:a4:15:91:9e:cc:9b:8d:40:78:83:35:63:cb:
13:0a:3c:d5:65:fd:41:f3:5b:b4:34:01:57:c3:01:19:46:71:
9b:ad:16:8b:53:cc:ac:89:bc:72:12:81:b2:c2:01:64:04:8d:
0c:fe:5a:6b:d4:d6:70:19:de:46:8d:52:42:f5:83:35:34:e2:
1c:24:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org