Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c8acfd-220c-3bb2-a1ce-537266d5ced0.roa
File: 25c8acfd-220c-3bb2-a1ce-537266d5ced0.roa (raw, json)
Hash identifier: U+rVEi8zx9DLQHoxJwuXVIabIAisjGMiTTlIa4zWuQQ=
Subject key identifier: 0B:F9:53:69:FF:91:A0:28:7C:42:63:BA:DD:A9:50:4F:1B:6D:28:54
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313E0E92905497354809B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c8acfd-220c-3bb2-a1ce-537266d5ced0.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.53.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:e0:e9:29:05:49:73:54:80:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1440b540-a3d9-452e-a4a0-6c405b6ba4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:34:dd:68:83:86:ed:83:4f:df:e1:3d:49:9c:
d1:15:a8:fe:63:55:1b:fc:e3:4c:9b:f4:fe:9c:d8:
43:2d:1d:17:7a:69:bb:05:7f:78:99:5e:0c:cf:34:
3f:f8:b5:e2:dc:d5:b6:20:83:ae:9d:8b:9a:94:65:
94:2b:c4:ae:f8:80:0a:7a:3a:59:cb:b6:6a:f4:a5:
07:86:0f:b6:dc:d0:10:d8:47:10:f6:bf:1c:a1:82:
9d:27:16:ed:e9:10:02:da:c6:1b:88:0a:ba:09:ed:
db:17:d1:b9:aa:f7:7d:37:91:6f:a1:3e:d4:f1:47:
e1:f4:98:5d:7c:d9:d3:77:2d:d4:81:52:11:4c:16:
7a:ba:c0:d6:a7:22:31:1e:99:63:8b:25:30:5f:c0:
ad:12:11:52:f9:1a:b2:52:ff:92:81:80:74:3b:a2:
67:99:c1:95:be:aa:c8:0a:07:f8:e0:7e:8e:d8:4e:
91:73:64:b0:3d:20:e6:09:16:34:89:b3:57:60:8f:
4c:4a:ac:fd:20:4a:c8:97:b2:a6:13:02:9e:7e:cd:
26:8b:18:d8:e2:eb:fc:a9:20:d9:51:be:fc:22:d8:
7a:67:38:55:8d:f0:49:01:51:3f:34:cb:34:e5:76:
eb:b2:80:6c:a3:51:12:ac:77:24:47:03:64:66:ce:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F9:53:69:FF:91:A0:28:7C:42:63:BA:DD:A9:50:4F:1B:6D:28:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c8acfd-220c-3bb2-a1ce-537266d5ced0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:37:b1:61:82:8e:6f:0e:46:42:8b:1f:fa:ae:98:79:29:d4:
7f:f8:36:67:9a:02:24:e7:74:48:77:e1:42:e4:e3:41:10:d7:
66:8f:0a:e3:2c:30:2e:ae:5a:a3:07:15:2b:f7:78:20:90:a5:
98:3c:68:be:b7:9f:4f:44:29:2a:b1:3e:59:75:2d:06:05:9f:
f4:19:fe:8d:ba:75:23:13:eb:29:59:b3:e0:83:3b:de:4f:ea:
79:d8:f1:62:34:9f:6a:ee:8e:e3:5d:77:15:f8:77:a2:d7:91:
9f:94:12:42:0d:89:ac:da:d2:6f:04:8f:b0:02:40:3d:70:b0:
11:92:9d:df:21:d8:d2:a8:73:54:8b:36:4d:2a:30:ce:d4:07:
f4:94:6e:9e:8e:d2:72:5d:b4:1f:56:9d:82:e8:de:31:66:af:
41:d7:66:ce:e4:99:d9:31:f3:65:a4:a2:dd:ac:3d:38:5a:5c:
47:20:64:ca:b7:ac:7b:61:4b:b4:08:4a:3c:26:b2:87:df:b3:
9d:b8:bd:ff:ef:73:db:78:63:32:c6:1a:ca:f7:94:dd:cc:01:
93:ef:ba:93:d8:80:99:94:46:ef:32:65:16:e9:dc:2e:7f:f6:
c9:7f:85:3f:6b:95:bb:d4:29:b3:6c:f8:a1:42:d3:25:0b:80:
f1:5b:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org