Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76d79afd-e393-3815-af3d-eac38095819f.roa
File: 76d79afd-e393-3815-af3d-eac38095819f.roa (raw, json)
Hash identifier: gI0hob7yTkCbHFyMFAqFUWpjMXgewSrcre1ueBVkTPY=
Subject key identifier: 3A:85:9C:6C:E3:CE:5C:F2:09:A1:CE:0F:50:7F:9A:F7:B4:FA:F7:0C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2917941434184ECEA05BC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76d79afd-e393-3815-af3d-eac38095819f.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 142.134.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:17:94:14:34:18:4e:ce:a0:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=e74e89cf-1052-47b9-9b8b-53a9fe477fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:0b:f6:30:79:60:28:44:61:a0:4e:e8:49:
41:f6:84:d1:f2:df:d7:ad:e7:2a:e1:d2:b4:8b:b0:
99:6b:61:8b:75:d2:74:27:96:14:a3:95:a6:93:8b:
77:03:08:26:ed:24:c2:5e:89:f3:af:b1:4c:28:e5:
b1:e7:b6:a4:84:dd:b0:94:30:07:d3:cd:b9:83:bd:
93:09:6e:00:d1:d9:d1:cd:8b:68:fb:ae:3c:42:8b:
6c:aa:b7:4b:72:af:4f:a9:1b:f2:8d:b2:37:90:02:
a6:e7:f7:78:31:2b:0a:30:00:c3:96:99:5b:27:bb:
77:6d:fb:94:9c:25:fe:a3:b5:a7:cb:fe:ce:62:a5:
ba:00:52:60:0a:69:b1:63:a1:3d:49:9d:4a:73:8e:
76:08:b6:dd:aa:26:08:55:d3:a4:41:7a:e4:8b:a8:
36:4d:e1:82:d2:bb:cc:5e:f2:20:42:12:ba:71:49:
25:99:4f:98:91:51:e5:a2:98:51:5e:7c:79:19:e1:
ad:ac:0f:b7:05:f5:18:64:68:b0:ce:06:f2:6b:38:
c2:10:e1:5b:9a:27:75:d1:80:21:ab:c7:e6:aa:2d:
2b:ec:30:83:33:67:28:16:1d:49:37:5a:81:2a:b3:
b6:9c:ae:6a:39:ee:bd:2e:7f:ca:87:0a:6b:47:99:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:9C:6C:E3:CE:5C:F2:09:A1:CE:0F:50:7F:9A:F7:B4:FA:F7:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76d79afd-e393-3815-af3d-eac38095819f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:5f:41:f5:59:20:20:6a:11:0d:62:7d:c1:d9:f4:a5:51:d9:
4b:1e:e3:57:38:88:a5:dd:5d:e6:4f:39:fd:72:ee:e3:6d:c6:
59:37:6f:0e:70:03:51:21:a9:48:f8:81:c9:ae:83:66:0b:eb:
57:b2:94:ed:db:8b:bd:4a:ac:83:cb:e8:2f:3b:28:54:d1:2d:
c8:83:13:20:6f:aa:b0:62:c0:0a:43:86:29:a7:77:db:11:de:
77:5c:f4:16:67:41:ec:ff:42:ca:18:8d:87:29:4a:a9:0a:9e:
8f:08:ef:39:93:ef:50:e5:8e:f7:33:cc:2d:de:05:51:25:e4:
9a:01:cb:e9:25:dc:cc:4e:85:72:e4:23:3e:21:ad:33:97:b2:
3d:76:7d:91:b4:f3:4f:f8:b1:7d:76:25:1b:a3:73:2f:8f:37:
97:4c:7f:01:4b:a8:e1:3d:d8:3c:f0:83:91:b3:87:d1:6a:6b:
4f:63:9f:1d:a9:04:6d:36:d2:bd:6b:5c:97:3f:6d:0a:4f:28:
72:32:c4:39:95:4a:05:46:64:f3:42:eb:6f:1a:e5:d5:13:4a:
28:5e:7a:5c:fb:29:bb:89:df:ad:c3:98:58:af:a0:1c:4b:94:
07:d2:e0:85:78:d0:e8:11:0b:9b:69:3a:f2:38:56:66:c8:89:
ee:1d:70:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:23 2025 by rpki-client