Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2931a35c-a19d-3ac1-916d-7786dd4ed384.roa
File: 2931a35c-a19d-3ac1-916d-7786dd4ed384.roa (raw, json)
Hash identifier: Wg+8h6DuDNh3chtHSoP4xFuhQaQM12X9HplnSO7nbgg=
Subject key identifier: BC:21:47:35:C7:94:4D:AD:59:60:2D:CC:0E:BE:19:E3:B3:5D:41:DA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5309F480433B422D64780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2931a35c-a19d-3ac1-916d-7786dd4ed384.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 70.26.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:30:9f:48:04:33:b4:22:d6:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=04e426aa-cba1-4b18-bcb3-29ed71e074d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:05:f8:96:12:a7:21:6d:50:74:ce:40:ad:c7:
cd:89:71:79:d1:21:d7:39:54:a3:28:99:bf:28:a5:
bd:59:44:67:cc:9d:71:a4:a2:78:39:74:84:6c:83:
05:d0:ac:9a:c6:cd:e1:97:2f:3c:67:22:eb:82:73:
0e:18:dc:ff:c7:85:df:df:1e:ed:88:c1:b0:8e:ee:
2a:cb:f5:f6:cd:b3:85:d6:92:85:81:e6:ed:b7:4c:
94:48:67:44:20:bd:76:c5:c4:26:99:1a:86:04:8a:
16:f0:2d:58:80:42:db:34:29:0c:5c:b7:b9:a1:25:
9f:fa:42:26:82:20:ed:2d:f4:57:27:de:52:a7:0e:
c3:82:1c:25:32:03:83:d0:ef:00:4d:41:a7:c5:aa:
6c:34:75:a6:e3:56:b6:16:14:fa:0a:00:60:d8:bf:
55:4b:c7:39:93:07:ae:2b:a9:35:0a:15:82:aa:17:
96:c2:c9:52:42:e0:a7:71:82:e6:48:7b:c7:cb:db:
13:d9:8d:31:d2:f1:21:f7:89:5d:99:4f:8e:9d:9b:
33:94:30:a8:e5:b3:8b:ba:4a:bf:a9:eb:5e:d0:16:
b5:47:25:d0:c4:c4:eb:bc:76:a0:98:74:28:05:bf:
b6:ef:8f:d7:8b:9d:bf:82:36:06:a9:81:12:ab:03:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:47:35:C7:94:4D:AD:59:60:2D:CC:0E:BE:19:E3:B3:5D:41:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2931a35c-a19d-3ac1-916d-7786dd4ed384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.26.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:62:19:98:37:cc:dc:13:90:d1:89:be:3f:9d:e6:fa:4e:4f:
a4:5b:68:7f:07:41:84:3d:12:f3:45:09:b4:61:b9:51:7e:23:
df:68:34:40:f4:91:26:40:90:ef:d3:3e:16:d6:21:f3:09:df:
fd:fc:ad:34:b3:a5:f7:44:06:f8:18:3f:12:12:1c:0f:96:12:
86:35:48:be:f2:31:e1:84:4e:0e:4c:73:72:74:7e:19:e6:7a:
0b:75:37:a6:11:42:1b:00:52:40:9c:e5:cd:52:8d:24:17:4b:
c6:64:f9:d5:4b:c8:49:8a:89:46:ad:5a:4e:ba:7a:a3:b9:bf:
e1:d2:22:ab:11:65:51:f5:c4:1e:3e:5c:b6:56:1b:dd:f4:9b:
ee:36:4d:6f:55:1a:82:15:cb:51:5a:d6:38:80:f7:49:5e:5f:
84:82:ae:18:23:9e:ba:aa:87:67:f9:4b:0e:f5:c3:19:81:1d:
c1:6f:f7:fc:4c:57:d5:0e:9d:70:39:23:f8:78:80:3e:57:99:
85:a4:a4:39:b8:a9:77:1c:86:73:b1:76:cc:e1:01:8a:ca:08:
1f:7c:97:6d:71:ad:d1:ec:56:9d:cc:fd:f0:7b:09:27:05:a5:
c9:45:49:02:01:bc:a3:39:47:68:41:3b:77:04:2c:c0:6d:74:
6e:e9:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:15 2025 by rpki-client