Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f34c012-12a4-384f-ad72-5ad123b3b899.roa
File: 3f34c012-12a4-384f-ad72-5ad123b3b899.roa (raw, json)
Hash identifier: Ff3ODG4pHxSqsVtzYGXaqHGd2aT1NOp3LcZYhX8jDKc=
Subject key identifier: BF:0E:C0:C2:EE:D3:D3:18:5A:50:98:97:0B:24:3B:E2:F8:C6:D7:04
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328583FED26F11AEF38304471AD7644
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f34c012-12a4-384f-ad72-5ad123b3b899.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 577
IP address blocks: 70.54.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ed:26:f1:1a:ef:38:30:44:71:ad:76:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=0d6cb0ac-fbca-4d5f-a3e2-ee5c7ddaf2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:aa:ed:24:79:24:41:1b:81:2e:20:16:5f:
a7:ad:eb:41:28:bb:cb:ed:3d:c8:a9:1a:32:5f:de:
cf:e9:ea:d5:ba:fe:18:de:33:dc:23:a2:b2:e1:09:
18:da:0f:8e:f7:5f:bd:78:24:a8:44:e6:c2:4a:12:
1f:17:63:7b:df:39:ee:ae:ec:3f:3f:75:9e:25:f9:
b8:fd:dd:0a:39:a1:6d:f8:b8:8d:66:38:f0:9b:9b:
5b:5e:ff:ef:32:d5:66:e1:6c:eb:96:bc:33:f3:4d:
1d:9c:6f:e5:aa:5c:78:ea:02:1b:5e:84:56:69:89:
c5:4a:0b:a6:a8:ce:7a:7d:be:8b:91:9b:69:9f:2b:
aa:a3:79:13:c4:b0:33:ef:a8:b2:8a:8c:a7:8b:a6:
39:d3:87:7b:15:2f:a2:01:c6:3f:a6:5f:3d:b5:c2:
b9:32:d5:00:e2:53:34:45:5c:cc:5d:df:f4:8f:7b:
54:fa:eb:45:15:5a:e7:b1:80:73:05:d0:90:ac:f0:
29:61:af:73:9b:b0:a8:19:3e:5c:df:09:ba:53:26:
ac:8a:8e:6b:65:2b:16:fd:ae:34:d7:ab:0b:72:dc:
a1:d4:e9:ef:50:b6:49:78:4f:75:ca:a1:14:ea:33:
1d:70:c2:0b:b6:7f:cb:bb:bc:75:22:00:ff:94:48:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:C0:C2:EE:D3:D3:18:5A:50:98:97:0B:24:3B:E2:F8:C6:D7:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f34c012-12a4-384f-ad72-5ad123b3b899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.54.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a6:25:c5:8f:30:f4:6c:77:35:25:4a:ba:7f:26:8f:ef:ac:
68:05:d8:f0:6b:d9:8c:33:c1:ed:83:65:d3:88:d5:41:74:e3:
5f:3c:2d:a8:f8:14:2b:c6:8f:7f:ea:a9:90:64:16:23:d7:24:
8d:dc:31:e0:29:86:ec:98:74:64:8a:ad:4f:19:63:95:9d:93:
20:40:88:cc:66:ce:7b:62:9d:96:c9:ee:4d:47:c8:87:7e:fc:
f0:7c:2e:ba:13:91:bc:f8:9e:99:1f:cf:cc:d3:74:91:98:a3:
e2:75:ca:45:ad:c2:a2:c3:26:b7:a2:46:97:dc:77:ae:82:eb:
9f:a1:66:16:b2:45:90:fb:26:bc:a3:c9:c9:ea:4c:a0:5c:18:
a5:13:d7:e2:0b:ab:0a:05:4b:25:25:37:83:59:6f:ac:08:17:
88:36:66:0b:de:9c:17:80:c5:f2:01:89:c2:20:df:e2:3f:23:
18:b6:92:fb:8f:89:25:4a:56:02:ce:be:b4:95:74:6d:cc:8a:
bf:53:c0:55:c0:50:eb:9f:e2:6c:af:22:c3:d3:28:61:85:b7:
dc:d3:a8:b9:4e:fb:30:42:a7:e1:01:46:0d:18:47:6c:27:e8:
e9:18:d4:a9:e5:5d:86:be:40:1a:f1:4c:2f:04:5c:6c:e4:e3:
58:be:2c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:23 2025 by rpki-client