Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dd4b38e-7647-3e06-8b38-8f508af2b943.roa
File: 1dd4b38e-7647-3e06-8b38-8f508af2b943.roa (raw, json)
Hash identifier: rVDXX9mjnuqal4EEkH/f+/GTXnLgejLAQL8UX4Q46ws=
Subject key identifier: 7D:A6:E2:41:42:EB:10:0E:40:4A:E7:E6:D4:C2:F1:37:3E:E0:16:95
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B52DB9AA1862B82769A2C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dd4b38e-7647-3e06-8b38-8f508af2b943.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 70.25.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:2d:b9:aa:18:62:b8:27:69:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=cbade789-e0cb-4c12-97c0-a2b5c6ef9c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:c3:e9:d0:dd:45:bf:36:e8:38:ce:48:e2:
38:13:4f:b2:0f:1b:97:69:8e:8a:e3:c8:9a:94:91:
fe:31:4f:e5:45:f5:63:1c:31:12:7e:06:21:93:92:
a0:78:e6:e5:d1:fe:d1:5b:01:1e:a9:ca:b4:bd:48:
8d:44:95:08:73:ee:44:29:02:54:ce:b7:80:bd:7d:
4c:d6:b1:85:51:b8:7a:ea:43:67:e2:0d:d8:0a:b9:
c1:7e:d2:4d:95:7b:00:2d:86:1f:ec:38:6a:de:35:
f9:5b:ef:71:0a:9a:6b:4d:83:42:16:00:7d:9d:f6:
46:d4:af:12:57:31:58:d4:df:04:d4:46:73:4a:f3:
de:4c:42:bf:42:06:33:1e:b3:24:a8:7d:05:c7:f7:
49:92:eb:ea:4c:89:74:7f:d1:48:99:c5:2b:c0:de:
43:d0:a5:6c:37:21:f8:a5:0a:d9:8f:9d:e4:e9:72:
f8:34:24:28:03:ef:b3:06:fc:7c:f6:91:a8:14:dc:
e8:2b:7b:da:ff:cf:4a:83:95:18:e5:a8:c8:43:6b:
ed:f2:86:12:53:ab:65:3c:f9:46:67:4c:ed:21:e0:
c9:55:98:de:79:a6:7f:6f:13:63:79:c4:db:36:2a:
ab:39:27:9a:6a:8c:b2:12:ca:83:67:5c:49:21:40:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A6:E2:41:42:EB:10:0E:40:4A:E7:E6:D4:C2:F1:37:3E:E0:16:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dd4b38e-7647-3e06-8b38-8f508af2b943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.25.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:d0:66:b8:58:bd:1b:60:43:4e:7c:b1:0d:da:be:2c:52:7d:
dd:df:5f:cc:70:a5:7e:28:0f:68:08:c8:8a:8d:51:d9:de:77:
96:f5:31:06:aa:16:0e:1f:3d:9a:52:05:79:dd:15:6b:c1:7e:
d0:04:09:3e:f0:da:96:97:3d:0a:02:1b:fe:0b:6a:ea:51:30:
3f:7a:1b:94:b6:14:9a:8a:fd:7a:57:8a:56:da:a3:a1:c6:3b:
c1:a1:9c:e6:31:ac:2c:6b:0d:55:9b:88:6b:a5:71:16:a6:50:
e0:79:27:11:53:e1:2f:7f:e1:af:ac:8d:e5:a8:ec:ab:f2:d8:
f8:b6:cb:ba:b8:2e:b1:e2:1e:7d:6e:d5:a5:09:c3:e7:96:26:
65:55:6f:4a:15:08:fd:f5:c8:ed:b4:57:68:41:31:fb:98:88:
d9:f9:38:c8:32:a9:56:89:7e:7a:f5:fc:05:fd:90:d8:7b:0b:
a8:67:ef:c9:75:27:41:1b:e3:37:ec:ff:59:fc:07:c3:e2:91:
bd:28:a2:4f:72:61:e2:8e:91:59:61:d7:e0:2e:04:33:f3:94:
2d:b6:6c:fc:ac:ce:65:91:ec:5a:a2:26:9d:82:db:29:82:3a:
1d:89:c1:4f:c9:04:26:58:69:8a:eb:ff:d1:2f:24:62:5b:44:
2b:20:1e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:08 2025 by rpki-client