Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/125fe31d-7cdc-3783-a6ba-3dac73f8eba6.roa
File: 125fe31d-7cdc-3783-a6ba-3dac73f8eba6.roa (raw, json)
Hash identifier: o8WFvVgrlNKinFQSy2RTwrc2WxJO67EWLBdxixw9X9U=
Subject key identifier: 80:DF:90:EE:70:A0:D8:59:53:53:89:2D:55:47:DC:BC:A8:D5:67:0D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B4F960ED07C02C4FEE61C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/125fe31d-7cdc-3783-a6ba-3dac73f8eba6.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 10965
IP address blocks: 64.4.90.96/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b4:f9:60:ed:07:c0:2c:4f:ee:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=9c75ff9e-b0ac-48e2-a25d-ef57aa682e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:e3:9a:a8:2b:b1:b4:0a:c6:99:46:8a:d8:
f5:45:e0:95:9a:25:b1:6b:39:e8:25:7a:84:ae:53:
01:56:3d:42:84:69:44:ec:45:3b:74:4f:8d:d7:1e:
a5:f2:bf:7e:5e:cb:c8:86:7c:fd:89:a1:c1:c2:17:
46:58:ac:2d:1d:aa:a9:3f:cb:2c:95:07:73:96:55:
d4:46:ad:d8:1b:22:78:0a:c0:78:3a:58:b5:cf:6a:
c1:e4:b8:34:66:bb:e9:7a:3e:b1:ce:74:8a:2a:4d:
ca:db:14:48:0d:f1:ec:d6:ac:85:50:7a:80:5c:93:
d4:f8:7d:b9:12:2f:85:56:42:fb:e1:59:fd:d6:d9:
ba:74:10:45:b8:f1:20:06:aa:5a:89:cc:e5:94:db:
d3:8a:39:40:3a:5b:41:27:d7:f4:f5:b7:39:80:a2:
50:5f:06:43:6a:fa:96:d0:77:38:40:2a:f3:28:a1:
26:00:4c:98:3c:35:30:c0:3a:d3:ef:b6:8a:a7:da:
6b:58:5d:a0:40:2d:9f:55:51:3d:ce:c5:5a:48:18:
3e:73:93:5b:10:2f:ce:1a:7b:04:96:22:6a:8e:1e:
67:9f:13:14:18:cf:b9:62:ae:9c:f7:12:09:a7:25:
34:4e:1b:7b:f5:a2:f3:f2:9e:e3:3c:74:38:0e:83:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DF:90:EE:70:A0:D8:59:53:53:89:2D:55:47:DC:BC:A8:D5:67:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/125fe31d-7cdc-3783-a6ba-3dac73f8eba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.90.96/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:85:ff:6e:94:34:5b:cb:8b:3b:ea:b2:e6:57:08:31:ec:05:
16:e2:84:fb:93:c6:c0:26:b0:0c:7a:d5:e1:44:09:e1:64:c1:
bb:51:3d:11:15:1d:52:a2:6b:55:17:b7:4e:13:69:38:20:d6:
b9:3e:82:48:b0:0e:40:b9:46:d4:b4:a1:4b:4c:c2:a3:90:2f:
fe:22:27:ed:56:7a:9d:59:fd:9c:ef:2c:0a:a9:4b:59:11:76:
19:12:ed:ff:51:2b:db:96:30:0a:22:3a:ae:91:2b:a0:78:5b:
76:39:4f:e5:02:b8:29:16:0b:74:c3:50:80:8f:d3:96:7a:06:
27:b3:47:d4:f0:d7:e2:79:c8:6d:0b:78:e5:79:84:e1:44:ce:
6a:1a:8d:22:44:44:04:cb:a9:60:09:c2:64:40:e0:21:56:aa:
32:74:37:f4:94:66:81:59:be:d6:cb:dc:4e:d2:eb:25:4e:b1:
c1:6d:1f:6b:b6:67:92:55:26:83:2a:67:b9:bf:e9:1c:84:76:
f0:b8:79:01:0c:d2:f6:20:40:38:c3:3a:7d:f2:08:2e:23:ae:
9f:4e:0e:1d:43:79:d7:aa:87:73:4c:b5:0a:ba:51:b5:49:76:
d3:89:79:d8:77:48:ad:e9:f7:07:92:f4:9e:70:f7:7a:d8:c5:
52:2b:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:23 2025 by rpki-client