Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/657dec37-2e20-3ab4-9cc9-0e139b22d2ec.roa
File: 657dec37-2e20-3ab4-9cc9-0e139b22d2ec.roa (raw, json)
Hash identifier: Ov09BNYJaDh2pcjO1yDJCHFHXMzNvv0m/FfZkjvLCnI=
Subject key identifier: 56:A3:90:D2:D5:AA:A1:80:E9:DD:21:2A:6D:22:16:35:D0:D8:86:AA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B56E246438EB1270F93700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/657dec37-2e20-3ab4-9cc9-0e139b22d2ec.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 142.113.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:6e:24:64:38:eb:12:70:f9:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=b6101995-ff0d-4620-a71a-e61dd4b8ed00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:6d:c6:34:b1:03:9e:00:5f:59:a9:44:1a:
97:7f:6e:02:42:36:ec:55:b5:e6:c4:32:42:d0:39:
61:93:07:50:a5:45:b1:cd:41:5e:a9:12:9d:ef:73:
da:61:5c:79:ee:fa:cc:dc:85:a9:f0:f9:7e:5d:d3:
81:07:b1:e5:03:db:71:5e:fe:bf:8e:e3:80:1f:44:
ed:a4:60:fc:30:e6:cc:ae:20:15:f6:7d:a0:3c:fb:
be:e9:05:cb:37:4e:e4:60:12:8b:f6:77:89:1b:10:
b8:80:7d:46:42:ea:8f:c7:55:0d:f7:88:94:5a:6c:
a4:0b:b0:08:a3:64:38:f0:83:4c:8c:d4:90:5c:b9:
85:1b:dd:f5:02:be:d2:2c:c9:fa:ed:f2:33:ed:72:
78:8c:20:fc:ee:58:e8:74:dc:ce:d9:ac:4a:b7:af:
0f:f6:b8:80:96:57:e0:28:e3:40:8e:9a:68:89:03:
e5:1f:f2:bf:f2:82:05:33:2b:05:48:15:42:6b:3a:
67:98:c5:1a:fe:9d:fb:fa:ad:ae:d3:9a:e1:99:57:
a1:41:83:b5:91:4c:37:fc:04:0b:00:4b:69:b2:ac:
f4:8c:cb:6d:20:a6:f5:5d:a4:76:6f:30:61:e8:80:
2c:76:22:33:80:bf:7f:68:62:56:c7:48:ed:ff:ea:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A3:90:D2:D5:AA:A1:80:E9:DD:21:2A:6D:22:16:35:D0:D8:86:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/657dec37-2e20-3ab4-9cc9-0e139b22d2ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.113.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:81:21:84:ed:76:87:dc:17:3b:73:c5:77:24:18:5b:db:2e:
ad:a3:d4:dc:2f:0c:bd:a1:73:3a:a8:85:ab:f3:6e:92:d6:c0:
6c:8d:7c:56:8a:fc:b9:5b:9f:6a:2a:17:0b:ca:a6:ce:a0:0c:
ca:7a:dd:b8:eb:0e:d6:0e:8e:8e:78:e8:8f:92:9c:4e:6c:55:
55:d0:0b:c9:ba:c0:81:23:71:d4:2f:97:17:c8:b5:d3:e3:8c:
0b:22:ba:7b:08:2b:cd:1e:1a:f6:cf:c4:f8:3b:b5:d3:5f:7d:
6b:46:7f:6c:2f:71:be:12:b1:4b:00:f6:e0:00:19:a7:8c:46:
67:b9:00:54:61:21:e2:45:f4:4b:03:1f:b1:8d:f6:2a:c2:1b:
fe:05:a6:64:e2:11:6d:55:05:63:c7:c4:ae:db:c7:33:bd:33:
ca:68:54:94:fd:57:f8:c7:6f:d2:d9:ac:b5:6b:62:fc:18:66:
d6:85:19:07:4b:db:07:18:fc:72:e5:73:86:64:ba:09:f6:f6:
8f:ea:32:37:a8:d2:4b:c8:31:39:a0:84:92:fc:39:02:e6:c6:
84:b9:8e:91:54:7e:35:c0:8c:8b:62:b6:13:14:67:4c:28:41:
86:2b:32:fa:7c:b7:dc:0d:c1:c8:30:5a:1f:9e:78:05:3a:22:
2a:d4:36:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:55 2025 by rpki-client