Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/03e23583-aafc-3d7a-94e4-580d507d0977.roa
File: 03e23583-aafc-3d7a-94e4-580d507d0977.roa (raw, json)
Hash identifier: uM3OEs+70fHPBQBunSoZX6AgqYVZAVWvhrMwQMCIpis=
Subject key identifier: 0C:FA:87:34:08:9A:44:BA:8F:EC:B4:C4:92:C7:39:D0:90:A5:FB:18
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28E2D45D5395D403780900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/03e23583-aafc-3d7a-94e4-580d507d0977.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.52.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:e2:d4:5d:53:95:d4:03:78:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=66a6d527-7544-47bf-a7d9-1b71927f6561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:63:02:f7:14:0d:fe:f8:13:18:06:38:b4:
69:f1:7b:8e:91:04:73:63:28:8e:15:81:29:7b:e4:
37:9a:75:23:c1:e3:37:fb:a3:93:8c:dc:4c:0c:42:
7e:f3:6f:2c:11:ee:f8:19:09:60:05:be:6e:52:7b:
b8:ec:b7:36:0c:52:90:88:2f:cf:9c:f4:6f:51:72:
2a:98:09:af:cd:a1:c1:79:63:61:b1:e1:6d:60:9c:
f3:b0:3c:90:65:24:5e:f4:e9:ef:8c:fe:dc:c7:4c:
84:03:d4:27:c3:56:08:a6:ac:9d:37:17:b5:01:bc:
6c:b1:dd:03:bd:5c:86:9a:74:e5:c2:fa:8d:01:80:
f1:dd:d0:da:85:af:52:b3:46:c4:75:06:43:c4:42:
f1:64:7f:e5:e2:8c:45:a2:ea:69:b4:06:c9:f2:ed:
5f:2d:8a:df:2a:61:33:70:56:7e:3c:f0:ae:40:39:
32:a6:84:34:6a:7a:08:fa:06:6d:97:98:95:d4:49:
de:1e:b7:98:81:a2:48:13:29:09:6f:b4:ae:c3:2e:
29:88:42:68:69:fb:95:a4:e2:2a:d5:c2:ce:4d:a5:
e9:67:6d:92:e3:12:fa:0e:7a:b0:68:79:cc:e7:2c:
99:99:df:fd:fb:ff:ff:77:8a:bf:46:f2:fb:25:3a:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:87:34:08:9A:44:BA:8F:EC:B4:C4:92:C7:39:D0:90:A5:FB:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/03e23583-aafc-3d7a-94e4-580d507d0977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:80:d4:ed:e1:c6:84:4b:60:06:94:80:22:36:9f:39:3a:7d:
22:4e:5c:cd:66:10:c3:46:30:9f:55:18:9f:b2:15:d2:4a:db:
c9:a1:18:4b:28:d8:6d:65:d3:13:09:e9:17:90:d1:16:e6:ca:
7d:6f:9b:e5:17:4e:4e:6c:d9:d9:06:6e:d0:2a:b2:95:94:5e:
7e:3e:78:35:1d:00:e8:49:f1:79:5a:10:64:fa:fe:09:21:e6:
7f:a0:f7:07:54:8d:10:6e:7e:07:94:ae:4a:5b:51:15:ca:1a:
f2:f5:5b:dd:f4:24:e8:ec:73:b7:5b:d2:cd:fe:64:fa:6e:77:
69:a1:da:9e:48:9d:0b:88:48:a8:54:b6:29:0c:cd:11:0b:a3:
b1:db:c5:52:ce:1d:22:56:b4:95:80:ab:a6:69:da:cc:da:4b:
67:89:1f:ee:3a:4f:31:4b:86:90:f5:05:3a:9e:c7:6c:fa:90:
f9:79:df:f0:b2:0e:02:37:71:f7:e1:74:00:19:5d:27:cc:d3:
b3:b5:2e:ca:12:30:84:55:5a:97:9d:47:66:ac:9f:b2:ee:10:
e2:d6:b9:13:eb:51:ca:4e:1f:4d:95:a9:a3:44:45:33:20:55:
ee:fb:62:14:06:04:b9:47:9d:3f:31:bd:5b:9a:0d:a1:91:d5:
bd:78:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:17 2025 by rpki-client