Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10f02ac9-ae3a-3905-828e-ba83ca48638c.roa
File: 10f02ac9-ae3a-3905-828e-ba83ca48638c.roa (raw, json)
Hash identifier: 4hZ/42u8z6AEoHN7erycXKcH9YJW+9qEA7EDCxPVf4Y=
Subject key identifier: 0D:46:74:14:09:6D:9C:1F:EE:13:1F:B1:98:9E:2F:CD:8E:26:6D:A0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B58CA70B0BACDDBB5FAC40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10f02ac9-ae3a-3905-828e-ba83ca48638c.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 40575
IP address blocks: 209.128.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b5:8c:a7:0b:0b:ac:dd:bb:5f:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=51c05a01-7aa2-4268-a493-d7d17af52005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:30:9f:7b:5d:09:3d:76:cd:74:e6:8d:d5:
5e:be:23:72:14:c7:c1:2c:c6:fc:72:1a:4e:e2:dc:
73:50:5d:4f:6f:f9:ef:1a:7c:76:6a:35:e1:92:cf:
35:cc:d3:16:1b:fe:9d:c7:56:dc:50:64:f1:32:ce:
e6:1e:6f:a7:14:28:a5:9d:97:ac:11:95:39:d7:35:
f1:e8:7d:e8:f3:56:71:cb:51:92:20:8a:fb:e1:73:
84:0b:e8:31:27:b5:58:76:5a:2b:c0:40:3e:91:02:
49:b9:53:70:a3:3a:20:d1:a2:72:62:ff:74:70:7b:
47:c8:29:35:65:89:78:e6:e2:fe:64:4b:50:6b:6b:
05:7b:fa:a0:9d:27:0e:49:f6:f4:8c:e1:d2:cb:6d:
10:b3:93:ef:b5:72:1f:c5:23:8a:58:90:d7:00:72:
e7:ac:9c:11:01:df:29:65:48:e2:17:21:31:94:b0:
d3:93:27:4b:86:cb:19:59:97:30:3c:eb:89:10:e6:
9d:94:39:64:8a:57:95:db:6e:c6:58:ff:a9:51:e5:
6a:3d:84:fc:8c:a8:ee:8c:49:fd:af:1f:ff:98:19:
a3:8d:d2:8f:d8:09:55:01:cd:36:60:2f:12:3e:a8:
2b:78:7f:27:28:99:56:e8:e0:d9:c2:5e:e4:c0:85:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:46:74:14:09:6D:9C:1F:EE:13:1F:B1:98:9E:2F:CD:8E:26:6D:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10f02ac9-ae3a-3905-828e-ba83ca48638c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:ef:ff:24:4b:7c:07:0c:97:84:18:79:79:d5:bb:45:00:ff:
18:c2:e6:e6:5c:25:3b:79:31:c5:c9:43:f4:1f:94:f9:13:40:
f7:70:b0:8f:6f:c5:17:da:74:3d:ac:d5:7f:5b:0e:63:ec:b6:
70:f3:1d:68:89:85:41:11:a0:bc:35:21:0f:be:65:b4:1b:3d:
90:70:b0:ef:ee:ce:b7:8d:90:3b:54:2e:77:a5:7c:71:61:b9:
b3:39:bd:51:59:8d:06:85:b4:7f:34:af:b5:9a:5a:6d:5c:c6:
e8:f2:75:68:64:ad:38:dc:38:6a:bf:56:c4:ca:3a:c4:6b:ca:
61:88:a2:f4:41:2a:3d:0d:ce:fa:a6:0a:dd:8e:65:28:1e:aa:
b8:3c:02:b7:dd:9e:29:bb:13:f1:23:96:81:97:7d:4c:a1:3c:
74:09:ce:d5:5d:dc:b3:f4:a0:16:82:44:aa:45:d9:f0:54:7c:
0c:e1:67:1f:70:58:59:4b:b3:36:58:9c:28:70:5d:e1:7f:4a:
20:a4:c7:f5:5f:c8:53:20:ac:a3:f6:7a:d9:8c:ca:84:85:53:
8a:7c:3b:06:e4:7b:cb:e1:c0:32:02:ec:53:dc:89:39:c1:e4:
56:bc:fe:42:bb:ee:35:cb:af:ab:ea:09:2b:19:79:ee:da:6e:
85:0b:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:48 2025 by rpki-client