Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e88119c-ba1c-357c-9bc8-b37b06fe4363.roa
File: 2e88119c-ba1c-357c-9bc8-b37b06fe4363.roa (raw, json)
Hash identifier: LkmcnQhXjFCMMOcxfpMyR0D+Wi5i97b4jM8WEKEl15s=
Subject key identifier: 56:9B:6C:84:69:DE:D7:5C:DD:96:6C:19:24:6A:27:6A:02:03:F7:DE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D293EE771E91FE34C8DF080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e88119c-ba1c-357c-9bc8-b37b06fe4363.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 855
IP address blocks: 159.2.0.0/16 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:3e:e7:71:e9:1f:e3:4c:8d:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=509a2f72-b85d-406c-8b02-5bdb6b7ee4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:73:dd:04:e2:10:a4:a7:86:5a:c0:7e:0a:
c7:b2:43:60:a7:ae:4d:e9:f4:42:6d:92:c3:1d:3c:
89:c5:c8:57:61:ae:23:1d:90:89:31:9f:90:57:1b:
63:7b:ff:43:54:27:cb:06:c1:ce:f2:ca:0b:c2:fa:
78:90:ad:84:b4:4c:e3:18:86:06:dd:35:e5:9d:51:
fa:d4:c7:64:f9:58:f2:7e:c2:a6:f6:2b:12:b2:b7:
73:d9:52:a0:2a:03:ca:2c:da:b0:19:28:92:aa:20:
81:b3:e4:c2:26:66:91:78:d8:bd:8c:9c:4b:91:be:
d9:66:5a:ae:79:e0:a0:bd:5e:ec:f3:34:59:8f:77:
05:fe:43:9f:b6:0c:01:33:93:9e:ff:5f:8d:3e:19:
5d:af:62:b0:b0:a1:3d:38:0a:ba:66:27:ea:73:3f:
72:90:0c:98:72:1f:05:c1:77:3c:60:50:68:ad:b5:
95:4a:1e:23:03:5a:27:95:b5:a7:6a:cc:b0:9f:13:
19:34:58:73:05:12:cb:a9:26:d9:56:da:cf:52:05:
47:50:3a:31:80:e8:c8:08:d7:2e:61:a8:10:bd:4b:
57:7d:44:97:7d:20:53:db:b3:01:f3:d7:41:d3:62:
ca:b4:2c:a7:dc:bc:bf:5c:31:ed:bd:d1:40:2a:32:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:6C:84:69:DE:D7:5C:DD:96:6C:19:24:6A:27:6A:02:03:F7:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e88119c-ba1c-357c-9bc8-b37b06fe4363.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
159.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:7b:12:16:7d:02:a8:98:91:bb:29:43:59:04:a4:46:cb:1a:
ca:5a:49:15:60:ce:42:e1:ad:67:4f:2e:28:e9:53:10:9e:82:
84:ff:00:0f:68:63:6c:c7:98:05:75:8e:2f:3e:9c:81:a7:e0:
0d:1e:e7:76:08:1d:89:3d:82:81:76:03:e2:4b:42:8d:43:a0:
fa:59:22:54:7c:d1:ec:8d:12:aa:35:23:8c:da:06:49:5a:34:
0b:2e:0a:a6:13:4b:6c:9a:6f:de:cf:a7:65:73:e2:af:b9:fa:
59:d2:f2:ad:df:5b:50:1a:c0:6a:b3:4c:db:2b:79:29:19:22:
1e:15:70:08:4d:8b:76:51:b2:ad:cc:93:0f:43:4c:e9:1a:cb:
87:e2:03:3c:c2:41:83:4f:39:3c:a1:ec:21:93:b2:96:df:41:
c8:39:34:5d:bb:a5:9c:de:ed:87:6c:69:7d:8c:90:fc:05:a1:
95:0a:55:a9:37:42:e8:14:71:47:1a:be:74:4c:46:1f:9e:f8:
4c:ff:12:bf:f0:c5:cd:9a:44:7e:60:f3:f3:0a:be:69:a7:de:
7d:d8:54:05:c0:c9:4d:d1:d1:38:e2:5b:31:2a:75:f3:1c:0d:
1c:b1:d6:21:8f:d6:cc:35:5f:52:54:96:c2:03:b0:1b:a9:f0:
db:c2:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:49:24 2025 by rpki-client