Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d602f168-f33a-3c77-9a9d-60d00ba800a1.roa
File: d602f168-f33a-3c77-9a9d-60d00ba800a1.roa (raw, json)
Hash identifier: j6SpV0yMQ6zawPeJBGibZHaGyKJgYSdKBZYifrgFVnk=
Subject key identifier: 07:F2:2F:A0:52:46:ED:96:8C:40:E3:C0:87:86:3C:42:AE:BF:87:89
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFB2985B0236E59FDC5880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d602f168-f33a-3c77-9a9d-60d00ba800a1.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.119.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:b2:98:5b:02:36:e5:9f:dc:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=06e5d2dd-d93b-4c87-b956-f08da04d2998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:23:d0:b0:0e:55:11:83:b6:f4:b0:28:ab:
e1:83:f6:e8:64:18:ad:57:f1:39:9b:bb:11:2a:73:
9d:22:9a:67:c9:82:4f:bf:9b:cc:f3:c7:cb:47:2d:
2d:8b:0f:5c:e1:76:d3:aa:2c:54:f5:e4:22:c4:44:
6d:35:12:0e:23:3d:a5:9a:79:f6:24:25:cc:9c:c9:
3c:b8:97:65:b2:3c:e9:71:00:7a:fe:05:51:a6:87:
9a:4d:8e:95:47:64:c5:b3:40:25:20:c8:d7:ff:90:
4e:1f:38:d2:65:a5:b5:79:38:57:ed:47:b0:b8:96:
9d:89:f6:ff:75:3e:27:41:e4:d4:d3:92:2a:75:07:
ca:7a:f0:a8:ea:08:bc:56:32:d2:6c:11:d0:65:0f:
01:27:bb:14:ba:f8:81:bb:2b:ef:f6:61:cf:a3:ff:
09:1c:8e:f0:39:ee:86:e2:6d:f5:eb:8b:69:ad:21:
9e:81:8b:4e:f6:42:a5:0d:43:67:f4:fd:40:24:c0:
8c:9a:4b:2a:a2:f1:2c:4d:6d:6b:7e:3b:36:fa:0c:
6a:c5:61:c2:f8:cf:b5:a7:42:1a:b3:b9:aa:5c:1f:
a1:1f:b8:37:1b:3b:f3:60:eb:a9:f9:76:38:19:5f:
3d:44:f3:d1:44:8a:70:55:8e:58:4c:ea:9e:60:6d:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F2:2F:A0:52:46:ED:96:8C:40:E3:C0:87:86:3C:42:AE:BF:87:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d602f168-f33a-3c77-9a9d-60d00ba800a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.119.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:35:5d:d8:19:68:bb:32:41:0c:08:bb:10:44:b6:5c:e7:3f:
b0:77:b1:e3:ac:d2:e7:9e:49:02:fc:41:a5:fe:15:87:b9:7c:
ef:23:e1:84:cc:45:51:d6:06:d4:93:2a:06:12:f4:3a:d9:a0:
83:95:a3:7e:e2:2c:45:0c:b9:7c:2a:60:8d:34:f4:99:67:80:
f4:60:4e:db:a4:5d:60:f4:63:2d:7b:21:05:c2:cc:c1:41:2b:
c8:dc:19:d8:9d:0e:aa:42:cf:d2:9b:84:b2:c9:ad:11:2d:c2:
6e:a5:5d:89:2e:66:9a:57:cc:e5:92:a4:2a:f6:a7:bb:c8:cf:
4a:a8:ab:54:97:be:59:d6:e7:84:42:eb:3e:9f:ec:46:32:67:
d3:57:39:7a:90:5d:99:b4:03:b9:98:22:00:7e:83:a9:35:33:
48:00:a8:b4:08:08:12:f9:6e:f1:b9:b1:7c:b3:f5:ea:5f:60:
f4:87:49:65:b6:1e:3a:bf:d7:71:df:6a:5b:03:7a:7f:d0:33:
2e:4a:52:40:5c:36:d7:e5:86:9e:d8:c0:eb:6f:fc:7f:65:d4:
8b:56:18:66:20:92:cc:94:ff:d3:74:2a:fd:72:a3:ff:4e:d2:
4e:79:ff:b9:2c:57:43:ce:92:57:3f:5c:6b:da:0c:60:e7:1f:
39:43:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org