Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32fcafca-aa43-3e86-ae0b-eac63f6cb2c2.roa
File: 32fcafca-aa43-3e86-ae0b-eac63f6cb2c2.roa (raw, json)
Hash identifier: QB8k31WIZHBCauIQe1IJ790Ls4cGoPK6vGMPkEPAaOY=
Subject key identifier: 34:19:AB:77:9B:25:32:A7:60:8B:FC:86:84:DE:D4:BB:AB:8B:14:DA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7CC38C3A7418915DE5EC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32fcafca-aa43-3e86-ae0b-eac63f6cb2c2.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 216.18.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:cc:38:c3:a7:41:89:15:de:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=d00c1acb-152e-4eaf-bdf4-598244aa1f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:c8:68:81:66:e3:8b:83:e2:1e:07:7c:85:
33:5e:2e:82:b7:53:8c:fe:95:dd:e9:f9:92:12:79:
aa:02:1b:32:02:cd:8b:fc:65:e0:f3:ab:ad:17:f0:
57:45:76:49:a2:27:fc:b3:d1:a6:c5:8a:7b:94:b8:
c7:5c:52:01:4f:bb:e7:9a:7d:48:10:47:93:cd:ad:
e9:2c:90:7c:21:2e:d7:a4:80:ad:41:10:5f:23:0b:
ea:3e:85:0a:8b:53:fa:6a:bb:dd:7a:0e:4e:46:ea:
7c:d0:3f:cd:d8:9c:38:f6:ff:9b:d3:b5:bd:90:d8:
71:bf:1e:d4:31:8f:6f:9b:30:a7:56:6e:57:db:ef:
90:d1:4d:be:0c:eb:82:c6:8b:aa:db:9a:42:42:bb:
e1:c4:67:14:84:b1:6c:9d:ef:25:a5:5e:8f:91:11:
83:2a:f9:e7:38:2a:c8:5a:bf:68:53:e8:0b:78:99:
0f:be:83:f0:c0:e0:f4:d7:f9:18:be:8c:8e:91:21:
43:be:ee:78:36:49:93:c9:76:41:73:8f:dc:5c:c1:
3d:89:5e:20:56:bb:06:cd:d6:31:32:22:a4:7f:17:
57:e0:4c:4f:ba:83:ca:e2:90:b8:52:7e:ab:6b:53:
f1:0c:ca:69:74:23:ff:97:4b:22:82:03:80:06:b0:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:19:AB:77:9B:25:32:A7:60:8B:FC:86:84:DE:D4:BB:AB:8B:14:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32fcafca-aa43-3e86-ae0b-eac63f6cb2c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.18.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:38:ad:17:f1:6e:a4:cd:af:bc:58:f4:c5:3c:9f:c9:4a:9f:
e2:15:0a:f9:c0:ba:f4:47:31:54:7b:e8:36:45:8c:45:07:51:
6d:c8:e5:1f:f9:8b:cb:ff:b5:1d:c0:b1:4f:06:1a:23:02:41:
b1:78:d8:9b:d1:68:d3:a3:74:56:26:a3:5a:0c:d6:92:f1:e1:
e1:0d:20:a4:f6:ee:ff:74:ab:97:6a:96:ac:75:c4:3c:8a:4c:
32:cd:a4:8d:ce:b4:41:8e:4a:89:89:a8:7a:ff:2c:5d:eb:ed:
ab:f5:3b:c7:40:0b:b4:bb:ec:be:45:f9:9f:7f:7e:b6:0b:4c:
3c:2c:ee:ce:8c:8c:13:9c:56:2f:e4:4b:da:f4:a8:35:37:a3:
44:40:cb:5d:33:46:f3:47:b8:5e:02:bb:ca:27:2b:00:10:49:
93:72:44:d9:b0:e8:a0:bc:89:c2:2e:ad:32:43:ec:20:c7:4b:
70:1d:2e:67:a1:53:33:89:d9:ee:68:b9:3e:90:fb:aa:67:d6:
2f:17:57:6c:05:8f:08:30:a9:16:5f:c3:ab:42:7b:ad:9b:7d:
fe:6b:df:41:3c:19:bd:68:98:8d:52:52:da:f0:46:63:62:bf:
34:ea:8d:09:cb:bf:e9:3d:23:1b:15:76:c7:71:eb:20:85:c7:
02:69:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:19 2025 by rpki-client