Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d13cff56-197b-3c0f-9702-f871b30bf67a.roa
File: d13cff56-197b-3c0f-9702-f871b30bf67a.roa (raw, json)
Hash identifier: LsK2eURiP9/PXFqGmpLBBqnUQngj5/PsGmSRKsoW6RQ=
Subject key identifier: 2D:C0:64:AC:78:51:9C:B5:A3:79:F6:5E:32:E9:AB:45:0F:BA:31:C9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931426DFA1EA2D4C61390580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d13cff56-197b-3c0f-9702-f871b30bf67a.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 855
IP address blocks: 142.134.224.0/20 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:26:df:a1:ea:2d:4c:61:39:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=4f19ba66-932c-4a6a-ad0b-be8232608ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:ca:47:01:f5:9c:3f:a1:38:b1:2e:05:9a:
d3:0b:6b:ae:eb:7d:ae:65:9c:9a:c9:89:46:3f:7d:
d0:22:c5:74:b2:ca:76:22:7d:d7:4a:45:c4:89:cd:
f1:01:65:f3:a2:b9:b1:5e:2c:35:03:bb:01:11:84:
23:ae:d2:2a:10:98:8b:a6:7c:44:eb:86:55:a1:d9:
f7:04:de:7c:ab:30:1a:87:2d:72:3b:29:23:e8:99:
1c:38:de:ae:d5:23:f6:55:f4:1d:16:66:79:44:15:
10:41:ed:ab:1b:a7:47:3f:a9:f3:7c:aa:43:07:97:
78:c6:70:bf:c6:4f:ff:df:67:ff:d3:42:ae:de:96:
c8:b9:75:2e:56:f1:2a:67:51:83:b1:9b:ef:48:bf:
88:c4:15:cc:d6:1d:de:50:c8:02:19:0e:aa:32:18:
fa:a5:74:31:09:d2:de:9d:28:6d:24:74:c5:00:f6:
d2:5e:47:83:23:d6:79:16:07:0b:ce:d8:26:17:ec:
6b:8b:9b:ac:71:a1:4a:6e:c7:b4:53:19:ff:1a:05:
d2:f3:b9:af:0e:99:06:89:fc:28:de:46:4a:aa:0e:
b2:67:01:d1:d2:53:35:2d:09:5b:35:59:6b:55:5a:
bf:92:ce:22:0b:25:25:ac:47:70:3b:4b:f6:83:fe:
55:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:64:AC:78:51:9C:B5:A3:79:F6:5E:32:E9:AB:45:0F:BA:31:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d13cff56-197b-3c0f-9702-f871b30bf67a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:85:15:24:b9:ac:dc:86:c2:4e:6f:f1:46:ca:b8:8e:cc:5e:
15:83:0a:a1:80:be:94:13:a5:82:f3:9d:6b:cd:5b:50:1d:20:
c2:f1:e2:3d:32:a8:7d:28:33:e1:1d:3b:f7:8a:fe:bd:dc:e7:
52:70:2f:73:36:cd:74:89:af:ea:16:01:ab:fe:a8:55:4d:9e:
83:e7:76:99:e6:31:81:ac:8b:ab:ce:d6:29:68:c2:6e:5e:3c:
af:83:95:d4:d0:87:a3:14:65:10:87:51:f2:51:f5:21:f3:35:
b0:ec:3b:08:db:fd:7d:de:d0:cf:76:a1:29:3c:5e:b5:75:bd:
5e:b3:4a:0f:0d:90:b9:0a:28:4b:99:1f:8d:c8:ae:a0:11:3f:
f8:a5:0d:70:36:8a:5f:e7:cf:b5:c5:8f:31:fa:79:03:ea:48:
f7:ce:46:81:02:5f:3d:5e:67:06:d1:80:7f:9d:b5:e9:01:22:
f3:ed:d0:83:06:04:37:a6:dd:e0:02:99:fb:d5:4c:44:63:e9:
ce:6e:df:46:6a:c2:6e:cc:4d:0d:37:45:ed:e0:1b:2f:40:d1:
26:25:7d:67:86:37:41:91:3f:30:9c:1b:a6:29:96:97:4c:97:
ba:a8:43:8a:bf:89:98:a1:37:77:66:d0:d1:3b:85:8a:b4:e7:
90:22:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org