Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0cd4d05f-0957-3e45-962a-cfa84d3f8d4f.roa
File: 0cd4d05f-0957-3e45-962a-cfa84d3f8d4f.roa (raw, json)
Hash identifier: aX5kVny4SEoOvvQ3iFW+VzG4HpZlPO1nqKPkQbam0EY=
Subject key identifier: FA:26:EF:B3:33:42:76:30:02:97:2F:27:2B:DF:F3:30:AE:D3:65:B8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28984AEE3FE96986ABD080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0cd4d05f-0957-3e45-962a-cfa84d3f8d4f.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 36493
IP address blocks: 66.38.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:98:4a:ee:3f:e9:69:86:ab:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=4f87408d-641c-4888-a9e2-05c2f3f056a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:04:48:8d:56:19:88:d6:68:19:9d:6d:b6:
5d:bb:c4:29:5b:ac:71:3b:41:7b:60:1a:4c:07:92:
65:af:72:12:2b:eb:00:0a:e9:4a:ee:4b:20:17:17:
8d:be:80:b4:b6:4d:7c:91:44:ba:95:5e:45:17:49:
21:ca:c7:dc:43:05:4d:43:b4:c3:bb:9d:cc:76:16:
d1:97:e1:dc:00:51:f6:33:51:67:90:a2:a2:48:6b:
b4:0f:f7:ab:d4:5b:9a:25:f9:d3:ad:a1:6a:35:8b:
3c:50:b5:af:42:a1:bc:a0:53:4f:b8:0b:ac:71:26:
d8:67:66:bd:fc:15:dd:1f:07:3a:a1:fa:2c:f7:39:
66:fe:ac:ed:8f:a0:e2:40:92:d5:34:4b:04:e5:bc:
9d:c6:41:35:4a:81:f8:5a:5e:c8:a6:f3:2f:14:8c:
6c:09:fd:37:e2:f0:ee:92:17:4e:ae:75:29:d9:fe:
6a:9f:a1:00:c0:7c:f4:d1:ba:25:67:a6:0b:81:06:
c3:f1:fe:61:f2:3d:b5:a0:9e:ed:5d:5b:f0:f6:bf:
74:9a:2f:64:00:4e:4b:12:7e:7a:99:87:fb:e7:d2:
5c:9b:1b:b3:26:ad:f5:92:9f:ed:0e:b2:b7:7e:28:
34:5a:b5:44:00:4c:9a:23:b1:eb:e2:87:e0:ed:02:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:26:EF:B3:33:42:76:30:02:97:2F:27:2B:DF:F3:30:AE:D3:65:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0cd4d05f-0957-3e45-962a-cfa84d3f8d4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
66.38.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:66:9d:80:b4:c1:45:2d:aa:88:b6:38:fe:1a:c8:03:e9:dd:
da:95:2a:b9:6e:bd:3e:cc:5a:e2:ec:f0:33:b2:b0:ef:86:52:
da:2e:c0:3d:39:72:ba:98:bc:16:b6:35:e7:a5:86:9a:35:a9:
e7:44:04:3f:6b:9e:11:0d:44:dc:92:0e:88:13:2a:36:ff:73:
c7:47:dd:92:fc:76:6d:c8:c4:2a:36:9c:97:98:7c:92:9c:34:
43:52:64:2f:2a:ed:bc:ac:88:29:49:bb:b4:ee:94:32:6f:3f:
cc:9a:1a:cf:c3:64:c8:c7:58:e8:0c:4d:ee:2e:9a:cd:15:2c:
b8:f5:a2:d2:88:77:4e:d4:57:a6:da:8f:27:df:12:46:6c:12:
8a:b3:38:f5:cd:3b:4c:71:31:7f:14:3d:46:e1:c1:e4:f0:eb:
ab:e1:c9:db:86:ef:46:dc:8a:84:13:b4:89:da:42:04:ed:88:
0b:d5:c1:12:77:c2:22:38:d8:4e:76:11:94:f0:05:07:0f:33:
3c:99:50:ea:d7:dc:ee:d1:be:3c:06:0b:bf:2e:54:8c:2d:0e:
40:12:bc:00:48:d2:35:e8:e1:32:da:41:85:72:4a:26:6f:81:
e9:60:6d:29:b3:31:a7:52:91:62:cd:e8:3d:78:0d:9f:21:8e:
f5:a5:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:06 2025 by rpki-client