Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae222f6c-b078-3dec-81ea-25f232677270.roa
File: ae222f6c-b078-3dec-81ea-25f232677270.roa (raw, json)
Hash identifier: n60kGK5KmB4nLlLt/fS9nVwPjJw2zZGqwZjJs2ol6ns=
Subject key identifier: 3B:4F:EB:E5:24:84:B2:4D:A2:B1:02:F0:7B:CE:C6:80:FB:D6:EF:5A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFB78437BB2247065C2200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae222f6c-b078-3dec-81ea-25f232677270.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.126.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:b7:84:37:bb:22:47:06:5c:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=10e9429a-bd2e-4afe-bf2e-7d55d6f481d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:b4:84:7b:5b:88:a4:05:86:06:2e:40:fd:
dc:6c:5e:c8:a1:af:0f:10:11:7c:56:2a:5e:89:0b:
fc:01:5b:19:f8:af:f1:61:0b:31:fd:d5:89:14:0d:
84:60:e1:51:96:bb:d2:33:52:8b:46:78:b8:0a:12:
0e:c0:2f:e5:92:5f:f9:87:f0:67:33:7c:3f:27:29:
af:8b:99:0b:64:e2:60:67:d1:42:ef:1f:52:36:9b:
6e:b3:6d:16:e6:80:94:af:e7:be:06:f0:4f:be:cf:
e6:10:5c:41:de:e3:ea:d2:f6:94:6e:38:9d:a4:97:
dd:c6:ed:00:3f:40:b0:76:48:8f:77:58:dd:cb:51:
85:35:7b:27:03:bd:45:3a:2e:85:7a:87:ab:26:fb:
74:59:5a:94:f1:ff:a4:39:c7:50:70:fd:c6:d4:80:
e1:27:31:c6:d1:24:48:3b:d2:e2:22:55:f6:61:92:
e8:fe:f3:db:80:f5:62:68:14:e9:74:a1:dc:4e:ff:
f0:3c:f9:e2:71:04:0a:03:6a:c5:94:a9:58:93:8c:
b0:5b:dd:8c:3d:96:63:75:b0:98:19:cf:76:c0:13:
b7:46:98:b7:3f:d5:b4:77:8f:ac:da:43:8d:62:e7:
7a:2a:b4:05:d8:49:d7:15:30:18:f5:fe:af:28:16:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:EB:E5:24:84:B2:4D:A2:B1:02:F0:7B:CE:C6:80:FB:D6:EF:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae222f6c-b078-3dec-81ea-25f232677270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.126.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:2a:d1:b5:f8:d2:89:cf:d5:80:c6:db:27:79:72:b2:ca:e7:
c1:9b:a5:98:af:5f:d7:f9:5c:4b:ed:ca:5d:95:3c:52:a1:16:
bd:fc:b0:07:e8:32:03:58:07:6e:d1:86:d6:6d:e4:ba:f6:37:
a6:a7:10:a7:71:8d:a1:fd:84:b5:93:58:1f:42:b9:90:a9:4e:
66:cf:da:9f:6c:1d:fa:a9:5a:68:46:98:f0:26:f7:a9:0a:59:
52:50:de:89:35:8e:bc:b0:39:88:f6:3e:b7:ca:97:3c:4c:b2:
02:41:4a:89:6c:1b:d8:14:0d:80:7f:05:bf:6e:b1:ef:56:97:
4c:31:3b:b2:5c:39:5c:6e:cf:43:ee:5f:8f:0b:92:46:46:fa:
57:d0:66:2a:d8:0a:ea:a7:4b:cb:c1:77:96:a4:6a:2a:24:c9:
56:f4:7b:6e:91:f9:ce:dc:6d:09:16:ce:35:fe:1e:c3:6b:cb:
99:70:17:1b:4a:84:f7:f1:f6:41:a3:23:68:f8:05:ce:0d:50:
0c:43:ab:7f:4a:66:47:b6:d2:cc:8e:c8:e5:ff:40:fc:d8:d3:
ef:15:d6:cd:53:8c:bf:e2:d8:2b:12:e4:ac:74:0b:87:f9:a4:
80:aa:51:d0:63:cd:eb:8a:5d:03:8a:11:8c:c7:7e:12:36:4b:
67:9e:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org