Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b65e6e1f-84b1-32bc-8597-d0be9c601ee6.roa
File: b65e6e1f-84b1-32bc-8597-d0be9c601ee6.roa (raw, json)
Hash identifier: jOMJ1NU1EJtY9RJs/86OQ2+oqoUGhgKhWbDZvSKhs4c=
Subject key identifier: 52:E5:B8:0D:84:3B:0E:8C:9A:45:69:A8:D4:D4:2F:6B:A0:D1:A2:11
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B58835205C4CE59AEACF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b65e6e1f-84b1-32bc-8597-d0be9c601ee6.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 7122
IP address blocks: 142.161.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:88:35:20:5c:4c:e5:9a:ea:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=23da68c3-21a2-4067-b812-80ed7757de8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:c6:d3:a7:0e:24:fc:85:0a:f4:d1:d1:39:
16:fd:48:e2:9b:a4:82:59:1a:f0:c9:12:e6:10:34:
72:26:e8:60:67:a9:a9:34:d7:a7:58:4e:90:6e:c7:
72:44:65:c5:2b:e3:80:14:70:e4:ec:cb:66:62:36:
62:9b:2f:93:fc:99:f1:f4:87:39:3a:4a:00:98:65:
b8:93:a3:7e:de:38:96:79:52:a5:07:34:93:40:62:
ec:97:6d:26:03:60:a3:e0:c2:06:fe:37:e4:2e:22:
3f:c9:d0:18:1e:c1:2e:50:b3:29:3a:f1:6a:b5:5a:
17:ce:d8:fe:fa:fa:6a:b1:3a:c7:33:bd:60:41:a6:
9c:12:41:a9:86:d0:e0:8e:c2:2c:8f:10:13:4e:9b:
32:d1:45:dc:49:45:ba:cd:97:6b:e0:00:03:64:32:
ac:5b:56:46:62:4d:b3:0d:0b:80:70:34:e3:43:02:
f4:bc:dd:56:ae:b0:ec:5a:b5:ab:c6:f9:78:38:52:
4e:64:e9:85:4c:36:b1:7a:e4:ad:9f:c9:5f:0c:2b:
14:3d:07:4d:09:09:c8:ac:0d:68:50:39:23:57:86:
49:31:09:c7:c2:ed:e3:0f:ff:50:4a:c6:ec:c4:99:
80:a9:80:e7:2e:c0:be:83:d2:c3:75:1a:b2:67:dd:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:B8:0D:84:3B:0E:8C:9A:45:69:A8:D4:D4:2F:6B:A0:D1:A2:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b65e6e1f-84b1-32bc-8597-d0be9c601ee6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:61:cf:0f:e9:d6:4c:43:90:5d:b4:d7:53:d2:68:91:13:55:
cd:ee:0e:69:c8:94:93:5a:96:54:3b:5f:60:7c:89:be:d0:a8:
6d:8a:a8:1f:7c:61:90:8f:82:ab:8f:fa:5d:d5:90:9d:d5:a1:
48:92:29:c0:71:97:76:04:9f:75:d2:84:7e:70:95:e6:6a:47:
0f:e5:40:54:9c:dd:7c:0b:46:9e:82:21:c3:ab:95:5c:59:f6:
22:c2:ea:55:9b:84:3b:dc:d6:2a:29:eb:e2:21:3f:0e:db:fe:
78:46:5d:e4:65:5e:d0:c8:9b:bb:e9:29:a7:44:db:d0:ce:23:
8b:df:4f:f2:95:e7:f5:b2:4c:5a:af:3c:95:76:7d:26:c5:7a:
68:f8:15:fc:77:63:af:22:66:32:79:d6:f7:bc:28:50:5a:f4:
c3:ab:a3:27:29:e7:aa:f9:eb:2a:7c:d1:0a:4f:c3:5f:39:d9:
c0:a9:ef:f1:22:12:03:6e:f6:ab:a0:9c:bb:13:62:ec:97:04:
7b:f4:5d:a1:c7:7d:4c:97:b2:a1:e8:a0:24:ac:5a:ad:3c:82:
4f:02:5b:14:5e:49:4a:e6:19:27:23:5b:38:0a:08:d5:17:a3:
63:b5:eb:9b:47:68:8b:f6:9b:c5:a6:8c:21:a9:9c:de:7c:18:
87:48:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:18 2025 by rpki-client