Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d1afcbc7-a780-3cbb-8a82-ecda21772c40.roa
File: d1afcbc7-a780-3cbb-8a82-ecda21772c40.roa (raw, json)
Hash identifier: Q3QT3VsfHe/ghq27GsW/ZbezT++zewTfE9sN+flisvs=
Subject key identifier: AE:1F:44:17:B3:42:76:07:E6:FF:93:D7:EC:5B:8E:D8:C3:50:63:34
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D293ADEBA01DA9450DA6D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d1afcbc7-a780-3cbb-8a82-ecda21772c40.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 142.189.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:3a:de:ba:01:da:94:50:da:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=79216ba6-ac78-4fda-aae1-7771dee88d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:49:e6:12:5f:02:95:0f:ad:06:e7:6e:06:
ce:8b:2e:df:1b:d3:b8:d4:1b:d5:20:8d:f0:91:2b:
14:1e:56:36:77:66:6e:76:c7:c8:00:f8:ca:e9:cf:
e0:3f:ea:13:9d:2e:0c:08:99:df:47:72:1e:30:d6:
1a:13:b6:79:eb:ea:9e:4d:4c:12:a4:17:76:e1:b4:
28:a4:c5:c6:c0:a5:0d:41:28:b9:e2:1f:d7:33:8c:
65:6c:cd:dd:68:38:87:8b:28:54:f2:85:bd:d7:16:
47:30:a2:4b:ed:2c:3c:90:4b:2a:87:6b:fd:b4:a3:
aa:09:f4:c5:67:5e:33:7d:09:5d:d2:72:89:36:a0:
49:59:2c:ed:a4:32:e3:8f:12:b7:ed:e0:be:a7:f7:
70:7c:8d:74:5c:98:35:d7:d4:ae:0e:dd:79:80:0b:
87:28:b9:48:2d:ae:11:9f:53:26:14:b0:31:68:db:
75:2d:41:91:7c:53:dc:33:b4:9a:62:06:1c:0d:a9:
ea:f8:25:89:fe:22:fd:7c:b1:b5:fe:c0:2c:64:5e:
44:c5:86:bf:a6:a6:2d:cf:f2:20:d6:ff:18:e0:44:
e0:ca:4c:9e:0a:db:9f:df:55:ab:37:1f:31:82:c9:
78:c5:e2:c2:e9:f1:2c:f6:31:8b:b1:4e:06:6c:ed:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1F:44:17:B3:42:76:07:E6:FF:93:D7:EC:5B:8E:D8:C3:50:63:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d1afcbc7-a780-3cbb-8a82-ecda21772c40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:85:64:42:c9:f0:53:d3:6e:a9:56:7c:de:47:36:36:1c:d1:
7a:38:70:2b:f1:28:21:37:6c:e3:9d:4d:b2:35:c1:b0:4f:fa:
bc:6e:8d:5c:a0:b3:27:b9:eb:90:9d:44:dc:13:f2:6b:b4:42:
0a:f7:40:42:8a:bf:15:b6:f2:ef:6d:22:c5:ef:c6:b1:9b:58:
b9:ed:d5:ba:7e:1e:72:7f:33:8c:b2:c6:0b:78:12:10:8c:8a:
b9:f7:14:2d:17:2f:41:0d:20:54:c0:6f:05:7a:c6:f0:65:80:
3b:0c:01:3f:cc:ce:d7:02:f7:3c:fb:5e:9e:ce:84:51:f0:05:
31:3c:69:11:5b:d7:8d:13:01:39:68:34:af:35:7f:e2:a8:bc:
b7:38:34:28:e6:b5:1a:20:68:45:81:61:e4:2a:10:d7:14:68:
f1:32:42:99:44:6a:06:b8:c7:f9:55:21:75:7f:44:de:d0:e2:
54:6d:4d:da:b1:17:26:45:4a:ca:5f:8d:c4:3a:8e:22:5e:47:
50:fc:e2:d7:0c:2e:d1:e9:79:b4:60:72:38:08:58:1f:5c:e6:
0f:19:d1:1c:95:7c:86:3c:48:25:61:40:1f:bd:1c:15:39:e9:
ab:cf:8c:bd:5d:a5:e0:bb:e8:5f:f4:a1:4a:cd:80:4e:d0:91:
8b:4a:8f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:19 2025 by rpki-client