Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/00dbcfa8-1715-3d4b-a9a5-873adc11399b.roa
File: 00dbcfa8-1715-3d4b-a9a5-873adc11399b.roa (raw, json)
Hash identifier: 1NOQtMsUTH24//RencUzvizdxKpEi7b1ACSiHiCDhb0=
Subject key identifier: F9:B7:29:88:77:45:CA:08:C4:AB:21:9D:A6:55:B5:71:CB:5B:F2:71
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B569D6D286B26F684242E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/00dbcfa8-1715-3d4b-a9a5-873adc11399b.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 134.41.0.0/16 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:69:d6:d2:86:b2:6f:68:42:42:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c00fadde-ed05-4165-981e-a8ae3fd005ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:f6:71:e7:76:b8:b9:53:7f:0b:9b:cf:16:
93:37:1f:7a:29:d8:84:5a:74:85:e5:9d:e8:9c:71:
f1:2f:4d:21:16:9f:2f:f8:1f:9c:73:7a:96:2f:73:
ab:f4:72:57:7e:f1:7f:bd:cb:5b:fe:48:02:2f:f1:
fd:8c:35:f3:8a:3c:f6:b3:78:da:0b:86:a8:1a:92:
4b:cd:6a:60:0d:4c:b6:b3:66:5a:c1:25:29:19:2f:
c5:b7:ea:3a:60:39:8c:20:5f:af:81:a4:b5:b8:54:
77:da:28:49:04:58:f1:00:ca:c2:e2:b2:20:b4:6d:
d3:60:95:98:1d:f7:13:9e:ca:87:76:d2:89:cd:3f:
26:5b:ea:03:e7:4f:44:d4:3e:d1:a5:7c:86:6a:56:
8e:87:3b:d2:2c:5a:61:74:a5:cd:5e:5f:cd:9b:72:
b1:64:23:dd:a5:0d:8b:0e:46:a4:39:cd:7e:6a:c2:
eb:83:ca:15:52:35:39:81:2b:0e:50:c4:66:4d:62:
db:61:cc:f1:c3:fb:55:4e:56:4d:6e:54:93:a4:d0:
26:eb:00:9f:0c:61:b8:d6:92:5c:39:7e:2f:5c:9a:
3e:d0:c1:1e:7e:af:4c:9b:7e:a0:3d:b8:08:69:8a:
90:53:51:17:88:0c:93:90:cb:3a:e0:4e:57:15:00:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:29:88:77:45:CA:08:C4:AB:21:9D:A6:55:B5:71:CB:5B:F2:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/00dbcfa8-1715-3d4b-a9a5-873adc11399b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
134.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:21:b3:f0:43:2a:46:b9:41:56:0f:1b:ac:f2:92:14:8d:c6:
21:c2:dd:69:07:3b:9c:7f:75:50:18:b6:9b:35:40:d5:77:69:
6c:e4:be:54:1a:9a:53:cd:40:50:b1:ee:f6:70:9f:d3:cb:b4:
7f:88:7c:0a:1b:f0:db:d9:5d:da:b8:af:07:0d:90:b8:a3:9a:
9f:a3:07:14:8d:b6:6a:33:4f:a5:59:40:45:da:92:ca:cd:4d:
9d:19:3f:14:bf:65:7f:39:4a:6e:57:18:83:8c:4f:3b:5e:59:
70:74:dd:d4:58:1f:34:a1:7a:3f:32:a4:7c:62:6e:a6:35:e6:
b3:9a:88:f8:09:9b:a9:0f:ed:45:3e:83:a0:c6:25:55:ed:5e:
e7:31:e1:28:6e:2e:43:e3:9f:d0:4d:96:85:44:28:63:26:16:
b9:d7:30:09:1e:3b:b2:c2:3c:45:6c:71:77:a1:5e:83:80:0c:
b3:8c:cf:3e:5a:99:65:0c:e9:b8:9c:b3:d5:fb:b9:2f:58:4d:
9b:30:68:2e:e9:b0:66:8b:a3:0e:ca:d9:3d:7d:a5:c5:5d:13:
d5:36:ce:79:aa:d1:6c:b0:c6:50:ff:eb:db:24:37:dc:88:c1:
b4:0b:63:7c:c4:e9:e1:7f:34:ec:da:07:3c:f0:7a:6f:f9:9e:
af:39:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:43 2025 by rpki-client