Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/096e671c-aada-3cf2-b98e-9ef7a8a62234.roa
File: 096e671c-aada-3cf2-b98e-9ef7a8a62234.roa (raw, json)
Hash identifier: yxUjy85KsEP9L98b5UgoUEMih0k+szMjVtviYTiTtuE=
Subject key identifier: 3D:4C:D4:4D:13:71:76:FE:E1:BA:8C:36:6B:5B:C5:A8:9C:81:25:BB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D289D9F64DD0DA6F7CA7840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/096e671c-aada-3cf2-b98e-9ef7a8a62234.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 67.68.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:9d:9f:64:dd:0d:a6:f7:ca:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=23efbeb9-b35c-448c-9e7a-d936a20df0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:7e:26:41:11:b9:65:75:35:be:11:1c:02:
e3:01:cd:e2:03:7d:47:53:89:ee:49:46:fa:2c:4c:
c4:ec:e0:4a:3d:28:b1:e9:6e:fd:1a:83:5c:92:63:
cf:24:d2:ce:cf:80:48:46:80:01:b1:ad:50:29:8f:
2c:c5:74:7c:7d:95:0d:a2:7e:9f:84:64:1e:2b:5d:
65:e2:8e:74:c6:c3:85:d1:51:94:cd:13:c6:89:f6:
2b:d2:69:4e:00:4d:92:79:39:28:79:fb:b9:eb:16:
e0:cb:1d:b5:95:13:c9:5c:da:5e:a4:f9:f0:57:84:
5e:a1:f3:d7:9c:26:ae:89:57:7d:b9:15:6e:0b:9e:
f3:e2:d4:03:fa:97:ee:08:7e:ac:81:b2:44:81:1d:
69:79:59:5e:ee:cb:d4:21:ae:2b:c6:94:7b:6d:26:
5f:83:bf:99:0b:e7:ac:21:ec:f9:d2:bd:b6:f0:36:
0b:60:ce:b7:e7:a5:60:1d:75:bc:ed:62:79:18:7a:
6e:53:d7:13:11:21:38:f8:c7:18:52:6a:3b:3f:6a:
e5:2f:f8:15:ff:23:4f:58:fe:03:c4:f0:d4:fe:56:
73:a5:b9:d5:44:17:3e:6c:00:7d:84:86:cd:0d:32:
4d:fa:b2:27:ef:d2:f7:d5:1c:aa:5d:1b:41:da:d0:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4C:D4:4D:13:71:76:FE:E1:BA:8C:36:6B:5B:C5:A8:9C:81:25:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/096e671c-aada-3cf2-b98e-9ef7a8a62234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ea:ce:a3:0f:c5:52:c8:0e:77:d6:89:01:47:69:75:b1:89:
fc:cd:b6:df:b1:8a:3e:1f:00:e8:0b:fd:2c:eb:e0:2b:c7:37:
a2:76:e3:10:3c:f8:ac:59:b0:26:3e:4b:12:f8:8b:aa:57:67:
10:ab:93:e1:cb:eb:bf:dc:5c:e8:d7:eb:e4:a0:10:af:ee:6b:
cb:a3:69:bd:c6:9b:2f:de:ab:9d:04:01:d1:fb:b3:8e:14:dd:
67:14:67:5a:5f:78:d9:b9:48:da:79:3a:d4:20:6d:91:54:91:
06:c5:77:53:5e:26:31:43:77:87:57:51:34:bc:0b:10:56:69:
61:a7:6d:1e:4a:91:29:68:b1:0b:39:a0:3b:98:85:c4:2d:02:
ef:db:4c:93:d4:c9:37:f0:0b:f4:2c:5e:76:6f:e6:97:36:3a:
72:5f:c0:62:0b:45:74:cc:f0:a1:0b:07:97:24:50:0d:5c:f4:
cf:fc:74:02:fc:1e:bc:28:0b:de:77:39:3d:86:83:92:fa:c8:
b1:1a:b0:01:c5:34:25:7d:a1:60:42:c9:ca:c4:be:48:58:a1:
3c:9e:47:1a:5e:aa:e4:d4:c3:b1:38:89:9d:d2:cd:2e:43:e3:
4d:40:66:02:f9:77:31:90:51:3d:02:17:ec:43:ec:1b:ba:2d:
0b:1a:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:44 2025 by rpki-client