Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c9fc8d6-7e95-3194-b559-0f1ec96ac2bb.roa
File: 0c9fc8d6-7e95-3194-b559-0f1ec96ac2bb.roa (raw, json)
Hash identifier: qtXuga0CunL13tHVus8pvX62CXNG9tAMmCy40KxtbV4=
Subject key identifier: 80:60:61:B9:60:F7:25:03:89:5A:D9:96:E5:74:5D:E3:37:68:6F:EE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5B1E82568FE13FE2A1180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c9fc8d6-7e95-3194-b559-0f1ec96ac2bb.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 174.93.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:b1:e8:25:68:fe:13:fe:2a:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=afa35e66-8ae8-4ff8-ab70-8e0144625b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:fe:72:0e:7c:ef:53:be:dc:77:c3:e8:bc:
16:62:e8:2e:c8:b3:eb:f7:9b:c9:27:0d:64:82:01:
79:ed:a2:56:93:b2:2c:94:13:2e:c3:95:83:a6:38:
57:23:51:23:91:06:2f:9c:2d:ae:5a:72:a7:11:d4:
b6:ce:3b:18:83:2d:e3:15:84:ed:02:f9:2d:a6:ce:
fc:12:33:77:d9:69:2a:f3:c0:0d:30:cb:0f:74:09:
7e:d4:b1:36:49:51:23:f6:e8:65:a0:d4:3b:73:ed:
a3:2c:ad:d2:33:e1:29:14:16:b0:b9:c5:f3:22:95:
13:00:70:41:3c:8c:58:2c:75:b6:d8:1d:cb:d4:8b:
bf:b6:e6:d1:54:d2:ff:91:b9:1a:35:19:21:4a:a7:
15:00:32:12:75:0d:8e:a5:4f:26:51:11:f7:d3:67:
bb:57:69:ef:1c:97:10:89:72:16:47:de:30:2a:2d:
3a:f5:ef:a6:06:ec:2e:12:03:06:13:77:3d:15:63:
49:32:4b:f5:7d:07:e9:ef:73:27:84:78:a5:64:0e:
8a:47:19:b0:36:a3:07:3e:67:dc:cc:6e:7a:0e:98:
0f:cb:bd:63:a6:b9:3c:b4:29:25:c1:d0:fb:00:eb:
9f:9f:bb:ae:db:5f:eb:62:47:92:0c:ba:f9:83:87:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:60:61:B9:60:F7:25:03:89:5A:D9:96:E5:74:5D:E3:37:68:6F:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c9fc8d6-7e95-3194-b559-0f1ec96ac2bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.93.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:57:ff:df:25:84:92:90:c9:97:f1:27:69:89:ea:41:90:df:
7d:38:66:58:91:56:4e:26:8b:91:67:2b:c9:13:f2:af:d3:1f:
db:2d:db:59:f2:96:c9:e6:b7:e9:64:4b:3f:e8:f4:01:65:29:
f1:a4:b3:ef:92:a1:4f:0a:24:92:a7:cc:bc:1c:1c:eb:57:ea:
22:7d:37:89:04:ef:f2:9a:42:9c:62:15:65:5b:30:bf:e1:28:
c8:31:73:ed:e5:4a:f6:bb:6f:c3:27:6b:38:29:1f:2d:2a:65:
ba:4e:37:7d:b6:44:96:f4:26:71:0f:2c:00:ef:07:fc:1f:2a:
c2:a0:2c:5d:cb:6b:15:69:74:ec:11:96:0b:59:d9:30:f4:ae:
cf:85:2d:47:c3:10:74:b7:87:ee:30:3b:73:30:fe:65:e2:0e:
e3:43:4a:85:4e:02:56:d3:be:74:51:f2:0b:ff:4e:94:10:31:
ad:69:57:39:87:aa:02:16:c9:27:61:80:97:46:f1:e9:f8:8d:
fa:43:41:24:47:44:37:67:40:04:df:d0:a6:3b:fa:55:67:96:
5e:68:9b:62:00:f3:46:f4:8c:0e:6c:1a:a6:a5:24:d8:30:a1:
d3:c3:55:b0:1f:0b:02:e9:48:02:39:42:e3:82:a3:46:51:e3:
d5:2b:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:33 2025 by rpki-client