Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/427d0015-e161-3e92-a93a-2ca7011b333a.roa
File: 427d0015-e161-3e92-a93a-2ca7011b333a.roa (raw, json)
Hash identifier: CfWFiKpWb5jwrhVLDRJVMfkPa2JReRnzcdnkkQPSaQc=
Subject key identifier: 08:C0:1E:A1:5D:2A:10:84:2A:F0:D0:3D:64:2E:3B:D2:04:7F:B8:CA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2BBEAA751877F60BB1ED60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/427d0015-e161-3e92-a93a-2ca7011b333a.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 3848
IP address blocks: 2001:4958:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:be:aa:75:18:77:f6:0b:b1:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=c073d8e0-4fb5-4b41-bdfc-0a835fb5707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:18:be:ac:d5:04:28:a3:76:b8:80:c3:f5:
65:ac:0e:f0:1d:0c:fb:77:37:16:54:ca:f8:a6:f5:
4a:ea:04:d5:38:38:39:9f:94:28:29:91:b0:95:aa:
e3:a0:d8:c2:47:97:c8:fe:27:55:d6:83:9d:34:53:
cf:dd:23:9e:bb:f4:3d:d3:8f:40:22:84:d3:b4:a7:
6f:cf:ba:3d:50:21:e1:a5:bd:e6:d8:02:13:e2:b2:
25:81:f2:c3:3a:48:c0:04:f2:16:2d:20:6d:c8:68:
6a:48:72:e1:07:0b:93:a4:17:cb:3e:d7:36:a8:5d:
35:de:32:74:e0:77:e8:08:b5:ce:55:65:09:e0:05:
7a:68:ac:8e:45:fa:ee:d8:f9:e5:c7:1b:80:00:f1:
2d:f6:33:83:56:10:db:23:46:59:8b:7d:87:a5:1d:
b3:70:01:55:5a:e9:37:90:16:dd:81:98:27:f2:52:
cd:83:9a:74:23:73:22:00:dc:cb:73:a9:57:57:62:
f4:03:66:50:36:ba:86:c5:60:08:eb:7a:a2:33:33:
fd:85:d1:03:92:5a:fa:c1:61:67:99:03:1f:3d:d6:
17:26:77:fd:45:c0:bc:3f:11:01:e0:e8:4d:29:a6:
c8:16:11:d5:f2:f6:a6:f1:ea:82:b2:5a:17:e1:11:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:1E:A1:5D:2A:10:84:2A:F0:D0:3D:64:2E:3B:D2:04:7F:B8:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/427d0015-e161-3e92-a93a-2ca7011b333a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4958:a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9a:e9:56:73:c9:69:29:e5:f3:93:78:16:0c:26:ad:5b:b4:
40:eb:dc:a9:47:41:58:f4:1f:f3:2b:74:94:10:99:7c:eb:92:
14:69:0f:66:70:e7:93:76:a0:a9:6d:cc:13:b1:90:00:bb:a9:
4e:2d:9f:2b:f5:41:f2:53:de:97:df:f8:55:30:c7:2d:ba:14:
27:28:1b:8e:21:21:18:2a:e4:6b:ab:d9:53:07:90:ca:86:93:
ce:95:e7:42:25:ec:75:0a:25:57:e5:a3:4a:6c:95:43:7f:2f:
9b:1c:8a:21:86:5c:89:fb:d8:2c:af:b4:b5:b6:cd:49:f2:27:
1d:9e:a3:6d:f0:b7:06:d7:50:d9:ca:13:16:ec:dd:6a:ea:83:
a7:b0:b8:5c:bc:8c:aa:cf:d7:5f:6e:7d:64:40:20:97:3c:ac:
22:1a:fe:81:68:55:b6:27:1e:18:9a:03:ae:06:c0:67:83:18:
cf:97:b3:ec:58:bd:55:7e:25:e8:1f:e4:39:5a:19:8d:0b:56:
46:86:96:04:66:da:c1:2c:46:7b:cb:e4:13:32:6b:d2:c8:1b:
18:2a:39:f9:f9:a5:2b:41:b0:0c:12:bd:6b:9b:49:13:7d:57:
bb:b2:43:e5:ac:22:f7:28:60:4c:a7:1a:1c:c5:f8:9a:6c:b5:
90:65:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:38 2025 by rpki-client