Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b2544632-f5a8-3933-82be-29b8ec008e78.roa
File: b2544632-f5a8-3933-82be-29b8ec008e78.roa (raw, json)
Hash identifier: 7TcTGo+ziTp5g8iLjp1n38PdMzPAiCymjHp1SckP55w=
Subject key identifier: F8:1C:D3:76:DD:BE:2F:41:88:75:D5:19:AE:B9:03:44:90:7B:0E:DE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4C1D5C095168EBAB5A2A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b2544632-f5a8-3933-82be-29b8ec008e78.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.181.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:c1:d5:c0:95:16:8e:ba:b5:a2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=4a78e8f6-0b64-486e-ac74-2d64508834b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:45:f2:a7:53:b9:e4:01:55:a7:98:d8:dc:
68:3e:72:6a:6a:fb:c7:42:df:d2:77:fe:67:6a:6b:
c1:2b:60:12:e3:ba:47:68:8a:6b:72:18:5c:c0:0f:
1a:15:66:f8:68:1d:0e:99:15:98:4a:51:53:dc:04:
40:9c:83:5d:51:9f:be:68:4c:21:18:f7:0f:84:8f:
e5:fd:6d:35:49:80:5b:d6:1b:c1:0f:63:fe:34:1e:
6e:12:27:96:33:cd:22:09:7e:10:83:4d:99:32:b2:
ee:89:8c:c9:17:8c:cf:05:22:fb:d2:68:36:41:98:
3a:17:7c:f3:45:5a:7f:a0:6c:c4:45:17:9b:77:11:
3d:21:90:90:d9:55:9a:87:21:ba:15:40:85:46:b8:
a4:13:4e:92:bf:0c:a9:5c:c7:18:aa:da:cf:a8:5e:
cc:14:b3:2e:fb:fd:48:11:45:ba:3c:3c:0d:a5:52:
0c:44:6d:a6:fb:e6:b8:87:18:7a:e7:ff:8c:c1:3a:
2b:89:09:41:ba:70:23:96:96:10:b0:f5:c1:3e:05:
99:02:5e:76:4c:78:37:22:16:14:4f:8b:a8:75:95:
cd:dc:e2:b9:10:6d:59:0f:b6:c1:74:48:31:1d:de:
92:46:b8:54:2e:04:ad:e7:f0:b7:2f:f2:de:60:bc:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1C:D3:76:DD:BE:2F:41:88:75:D5:19:AE:B9:03:44:90:7B:0E:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b2544632-f5a8-3933-82be-29b8ec008e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:49:36:81:82:43:0e:0a:17:3b:1a:d5:dc:b8:51:28:88:bf:
fc:ec:16:28:d1:d6:7b:04:50:7a:62:62:a6:b9:01:1f:94:20:
3e:ea:33:36:58:00:9c:42:06:65:52:60:81:53:3c:37:3b:d4:
db:b1:b8:5e:91:94:d4:bf:d3:07:a5:3d:31:62:61:d1:cd:5c:
99:6c:b2:9e:91:b6:73:c3:fa:f7:b1:1a:20:e7:c1:14:ea:79:
9e:c2:ff:0d:fa:dd:8a:07:4e:61:7c:d8:ed:d3:d1:d4:8a:57:
02:3a:0f:c4:9d:40:0f:59:58:b4:13:f5:99:d6:4f:f1:d1:2e:
65:ec:a7:8d:29:eb:7f:55:e2:71:3f:58:65:fa:36:67:ec:3e:
0f:c5:4a:27:57:65:a9:a0:fb:f6:cf:2b:bd:93:33:99:3b:6e:
fc:2a:52:7e:14:aa:6d:e9:1f:e8:fe:7e:51:45:fd:91:94:19:
b1:97:b2:c9:17:58:83:87:ab:17:91:94:f9:bc:52:6e:a9:08:
07:34:ee:7e:86:12:55:b3:40:fe:bd:75:66:bf:2b:ef:d8:fb:
56:da:46:1c:ab:22:e3:4d:c0:3e:4b:05:50:7e:ae:90:18:98:
50:a5:e3:d3:72:5c:ff:ef:d1:9f:73:81:b5:8a:3e:84:e1:7e:
b0:57:64:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org