Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a5c88a3-8f34-3110-bc32-a48d454edcf6.roa
File: 2a5c88a3-8f34-3110-bc32-a48d454edcf6.roa (raw, json)
Hash identifier: aBf4lkLeZ9Jkoc79SHJpse/5tSQyCRsRFeU/QpKIgPM=
Subject key identifier: 0F:86:F2:A5:C0:FF:05:2B:4C:0E:55:F1:10:B2:81:9A:53:1F:B4:03
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2880F7AF4C7FBFF06A0400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a5c88a3-8f34-3110-bc32-a48d454edcf6.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 855
IP address blocks: 47.55.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:80:f7:af:4c:7f:bf:f0:6a:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=ab77d326-d5b8-439c-a245-bd97359769ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:59:40:82:e0:b6:d3:d2:ee:8e:c6:b4:9f:
97:30:48:e6:7a:f7:5d:70:15:cb:89:20:c5:19:d9:
22:13:d0:99:92:b0:89:94:8d:f7:56:8c:69:d5:a0:
5d:8d:05:8c:78:7b:31:f0:9c:f5:63:26:cc:9d:40:
c9:b5:da:74:fb:2b:69:80:c5:3b:43:40:d0:7a:04:
28:4a:16:d0:26:13:0f:c9:23:ec:06:cd:ae:a0:f5:
72:b0:82:7e:34:64:93:cf:60:84:82:71:65:ad:71:
12:48:ab:08:51:72:b2:da:48:ec:61:b6:65:67:66:
9b:51:16:28:7b:87:fb:4e:3d:95:8e:95:fe:54:42:
a7:51:af:bd:a1:e6:d0:29:57:ed:9c:55:ac:e1:2f:
48:a7:99:5e:ba:99:ee:1d:2e:19:df:df:ac:1a:c1:
20:d6:09:79:b5:96:6d:e3:a0:af:89:5a:a2:97:f2:
ae:84:92:83:50:d6:f5:ba:e8:df:05:8f:44:79:0e:
d3:84:4e:da:d0:8e:b5:72:aa:a4:c7:68:f8:79:e5:
fb:14:77:dc:e6:aa:58:e0:a6:cf:81:aa:99:50:33:
76:60:b9:59:ed:6e:80:c6:26:45:fe:8b:65:6a:4c:
71:be:11:fd:94:0c:16:67:17:fa:00:30:4b:a1:cc:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:86:F2:A5:C0:FF:05:2B:4C:0E:55:F1:10:B2:81:9A:53:1F:B4:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a5c88a3-8f34-3110-bc32-a48d454edcf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
47.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f2:c0:ac:0c:e6:de:07:be:e7:98:16:ea:83:ea:09:76:18:
2b:82:92:97:25:fb:0e:4e:15:c0:23:31:10:36:58:e9:41:dc:
cf:2d:4c:ea:fa:32:7f:2b:cd:e2:3c:5b:bc:32:88:50:be:8f:
fa:68:4a:9c:f7:a3:93:75:af:2a:0e:aa:7b:64:06:f3:7e:33:
0d:69:39:1f:56:e8:16:b1:8b:2f:68:88:9d:9c:f6:7f:76:5c:
6c:a5:3f:10:f1:a8:bd:bf:50:39:1e:2d:b1:9c:72:1b:70:66:
56:63:18:3d:74:c2:d9:5d:30:7b:60:2c:9d:1d:8b:11:cc:d7:
56:1f:52:b3:db:2a:68:06:91:53:48:df:3a:25:aa:69:69:31:
9f:55:19:dd:05:c8:9b:af:24:77:02:ba:f3:e1:a2:d4:d6:01:
7e:2d:bc:94:ca:c0:99:76:6a:b5:80:b2:9e:f3:cd:77:c6:12:
43:67:f9:d4:50:84:f0:ba:a3:3e:8a:89:33:f1:14:21:b5:5d:
72:28:a2:73:85:36:8e:95:22:31:ec:dc:aa:e8:53:e5:e5:40:
06:88:19:36:18:59:42:97:02:21:33:2a:6c:c4:8b:c3:5f:3e:
08:60:64:97:f0:aa:dc:55:32:6a:2d:c1:66:76:68:cd:bc:7c:
bd:d0:a8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:25:01 2025 by rpki-client