Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c8361b6-8ae0-3109-8c29-c3d7de24ea85.roa
File: 3c8361b6-8ae0-3109-8c29-c3d7de24ea85.roa (raw, json)
Hash identifier: L4cxE6zRhYqH011Kv9755FZV3Y0tqUKYeEpxmwveQes=
Subject key identifier: C4:33:4B:6E:A7:64:9F:5C:14:75:90:15:80:CE:E2:41:83:87:2B:AA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B541372BACB7EF404187C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c8361b6-8ae0-3109-8c29-c3d7de24ea85.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 70.30.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:41:37:2b:ac:b7:ef:40:41:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=867313b6-920f-4c87-8820-0d9c7a895152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:ec:63:81:a6:58:b2:e6:99:60:01:a1:bd:
82:52:38:b9:8f:c9:7b:d4:9e:b2:ab:61:5c:ad:b4:
7b:c9:68:5c:a3:56:84:0b:9a:d4:e7:73:56:6e:50:
f1:9b:ac:9d:bf:4d:16:0e:9c:49:97:a3:a9:6d:8c:
f6:c5:d7:84:39:0e:ff:d3:11:31:38:92:a1:45:d6:
79:a4:ae:18:96:78:e5:d1:6f:61:fe:62:7f:ce:ff:
17:c0:10:5b:cd:12:dd:28:72:b1:04:f0:0d:61:e6:
a1:e9:6d:92:37:9a:10:9e:c9:38:c7:cf:87:7b:6c:
ec:3e:9e:13:b6:85:22:5a:74:7a:24:45:3f:69:55:
8a:e9:73:ac:6e:67:21:ef:e3:b0:40:6b:9b:bc:de:
ce:21:60:b0:73:ab:6a:d2:44:67:58:45:e5:b7:41:
67:ad:ee:b8:d3:b1:a2:fe:41:c7:f6:5a:41:fd:66:
24:df:75:04:56:8c:77:5d:2f:14:9f:7c:03:c5:4d:
4f:5a:60:1f:73:0f:f6:f1:58:bb:68:d6:84:11:75:
9b:0e:69:d8:75:4a:d0:2c:ba:a1:3e:f1:a9:12:e2:
e3:a7:70:42:c4:43:4a:3d:cf:bb:1a:de:e0:d1:fa:
19:88:88:9c:a7:16:35:55:ab:8c:31:fa:33:6e:00:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:4B:6E:A7:64:9F:5C:14:75:90:15:80:CE:E2:41:83:87:2B:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c8361b6-8ae0-3109-8c29-c3d7de24ea85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:7b:ee:27:64:74:4f:c2:38:12:07:12:e3:56:38:8d:3e:61:
e4:46:80:95:90:10:63:33:d8:49:f1:10:67:5b:ba:04:15:52:
f1:a2:e2:21:8d:60:26:c5:44:b2:d6:1c:52:ca:45:54:7e:c8:
a3:40:db:88:63:8f:a9:ee:e0:92:fb:a7:46:4e:8f:b8:59:04:
85:52:04:45:f2:81:31:60:32:4f:97:96:66:85:ac:84:ba:2e:
af:48:f0:59:9f:4a:39:96:93:9c:fe:4a:09:01:45:14:a6:b2:
57:8d:e7:b2:d2:ac:d6:fd:b1:d0:a8:6b:d5:c3:60:5e:3a:67:
64:93:2b:b2:d8:a2:da:9e:35:db:4b:44:d7:47:83:2b:d8:53:
26:0f:be:75:63:62:e0:12:f4:f7:7c:e9:1d:9f:aa:0a:97:c2:
0f:9c:15:9e:7a:2e:0f:be:d6:e4:d8:7e:49:5d:cd:f8:fa:84:
88:f6:05:3c:93:07:b7:86:ef:6d:5d:1e:59:75:fe:d1:19:a1:
7b:47:81:65:e4:19:ff:5a:ae:aa:20:4c:14:de:29:e6:50:0b:
80:33:e2:91:eb:a9:c6:34:0f:d9:da:02:07:0a:9e:75:8e:cd:
c5:9b:6d:be:44:ab:3f:90:1b:aa:e3:9a:60:3b:d2:3a:0c:63:
64:17:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:23 2025 by rpki-client