Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/033ee31a-904c-3b3c-95a2-679fc3ef00c3.roa
File: 033ee31a-904c-3b3c-95a2-679fc3ef00c3.roa (raw, json)
Hash identifier: Y23/HzWD5mM1ySh5ffrpaMHn3M/vT8jzthY/aJP4ZcQ=
Subject key identifier: 8D:25:D5:74:9A:A6:CD:0C:A5:91:CE:6C:C5:49:40:FF:89:C6:12:28
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5329E760DE7FEC094F240
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/033ee31a-904c-3b3c-95a2-679fc3ef00c3.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 70.28.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:32:9e:76:0d:e7:fe:c0:94:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=fb6f5e6e-b7b0-4b64-aa1b-9dd9b64c7180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:f9:b7:68:ca:6d:7a:18:b0:87:e8:53:12:
9f:7d:5b:17:8a:b7:a9:52:e3:8d:22:14:41:e8:8d:
06:21:75:43:53:f8:fa:52:03:9a:ee:a9:8f:77:f1:
8b:ff:60:82:c0:6a:5a:5d:b7:df:03:0c:b5:f9:11:
03:14:a3:8d:97:cb:75:77:2a:eb:b0:f3:04:c5:c9:
97:9e:a5:84:db:1f:98:b6:63:10:e9:f8:14:5e:0a:
62:b5:3e:46:95:ef:5e:34:73:ca:96:6b:9c:41:51:
08:ad:a6:0e:e6:4d:c3:b4:e3:cd:fd:d0:c6:c8:7e:
0e:f4:30:09:8d:aa:f0:e0:c1:6a:0c:13:9f:c9:92:
92:52:86:a9:85:a2:ac:44:fe:0d:77:02:8c:0d:75:
4f:03:54:e8:60:86:32:0d:51:fb:e9:c5:25:37:90:
90:3f:89:8e:f2:7b:ca:46:0d:ef:34:a1:bc:aa:c0:
f6:e9:e8:6f:dd:f9:51:55:b1:d7:f4:7c:b1:33:ff:
cc:3e:15:7d:66:e8:15:60:d9:14:8e:35:a5:92:0b:
37:fa:eb:00:b6:09:7d:8a:7c:7a:f0:06:9d:0e:fc:
68:66:50:32:49:41:9f:92:09:fe:a8:99:19:51:95:
95:7a:48:4d:43:a1:33:3e:62:00:dc:a7:e9:c4:d6:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:D5:74:9A:A6:CD:0C:A5:91:CE:6C:C5:49:40:FF:89:C6:12:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/033ee31a-904c-3b3c-95a2-679fc3ef00c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:1a:53:ce:56:c0:63:b2:b3:81:dc:eb:d1:88:79:69:c3:b2:
01:6b:ea:3e:68:ce:8e:fc:c9:80:ee:7e:36:e4:a4:50:9d:fb:
45:23:e1:4b:12:06:6b:9e:6a:61:17:da:3b:3d:14:ca:78:38:
bf:7c:fb:4e:03:7a:60:e5:62:a9:ec:ae:8e:dd:4f:05:9b:2d:
95:2f:5e:c1:5e:60:25:cd:ae:ec:7b:8e:c8:43:30:ec:e7:34:
f7:ed:24:e2:8a:04:ed:22:e1:57:32:a2:d0:5d:ad:b7:7b:4d:
e0:a0:aa:ab:f3:e9:ea:a9:ae:fa:df:75:9e:8f:49:19:05:cd:
84:73:8e:b1:8d:c3:d7:f1:9d:d1:78:8b:c8:8d:b4:73:0b:2a:
96:62:a5:15:31:42:a2:6e:6c:26:03:a3:11:4f:a3:7c:f2:46:
f9:01:e3:cf:34:2f:80:f7:01:3a:52:80:b9:4b:9b:81:30:61:
40:b6:a5:a7:fd:0a:68:5c:dc:5b:15:f8:0f:8f:fe:4c:c8:ff:
07:be:4d:98:95:eb:75:fe:bc:f3:ff:03:87:5b:b5:ff:d0:de:
c4:8e:c0:14:91:57:77:43:73:e6:68:4f:03:3b:3d:5a:41:2c:
a6:d9:0a:8d:9d:d2:cf:86:24:a6:3d:38:d9:a2:af:a8:71:16:
eb:d4:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:07 2025 by rpki-client