Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/477f454e-6a8c-3897-b376-915b41864437.roa
File: 477f454e-6a8c-3897-b376-915b41864437.roa (raw, json)
Hash identifier: c7+a1hfwXFPxGuPdJCXPtQbpW98dmUiQCNdnSRtgsPc=
Subject key identifier: C8:FA:67:57:2D:5C:CC:E8:92:6E:00:A6:99:32:C8:84:22:51:E2:4A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B4E1EA8A8086E153EF8F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/477f454e-6a8c-3897-b376-915b41864437.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 4540
IP address blocks: 207.35.52.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b4:e1:ea:8a:80:86:e1:53:ef:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=187bfe9a-6ff6-4b6e-a6b3-70708226cc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:6c:78:0f:ea:0b:39:65:e6:a4:78:bd:de:
d9:2b:27:e4:cc:2d:ae:d3:9e:da:14:c6:1d:a1:ff:
d5:ea:48:8a:f9:6b:80:5e:45:1a:4b:03:8d:ff:86:
07:0b:6a:7a:f7:e3:3f:76:48:e7:07:73:5f:44:a1:
89:75:af:ed:6e:8e:e1:fc:eb:70:c6:77:71:6e:af:
5c:dc:2a:4c:a4:b0:87:6b:de:b8:e5:f2:15:15:94:
0d:70:46:41:7a:fc:6b:10:b8:73:13:86:fe:60:59:
20:66:2c:b0:50:91:42:60:fe:6d:0c:dd:8e:e3:bf:
59:cf:1c:8b:3f:13:c3:44:dd:58:df:a5:ef:62:ef:
c6:e2:ef:29:2c:72:dd:8c:f9:c1:54:95:1b:6a:d1:
47:36:76:89:a5:09:c8:e1:f4:cf:91:3c:31:b0:2f:
12:c3:a0:e5:41:2e:93:6d:d4:5b:aa:5d:c5:99:1b:
4a:56:ee:98:96:f6:7c:bc:7c:48:53:3d:cb:93:70:
de:e9:a9:bb:cf:a9:84:5f:24:bf:96:ce:1d:73:be:
4e:88:0f:8c:a7:70:57:90:17:ea:ad:79:46:0c:e6:
8d:ab:46:c7:51:73:19:5a:31:a5:9f:dd:0a:6d:c8:
86:13:84:f5:53:34:f2:f8:1b:2d:2e:f4:ec:c1:e2:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FA:67:57:2D:5C:CC:E8:92:6E:00:A6:99:32:C8:84:22:51:E2:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/477f454e-6a8c-3897-b376-915b41864437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:d5:5f:ad:b2:57:3f:be:c4:d5:fd:4c:3c:eb:31:e5:fb:bf:
fe:df:49:2a:74:67:2a:48:14:c2:78:62:09:49:6f:0a:c3:1b:
4d:04:11:38:c7:77:f3:21:4d:6e:61:74:59:24:ba:2e:dd:a5:
54:41:0f:09:77:a7:8a:99:7e:86:66:4d:5a:fc:14:e1:bb:06:
4f:7b:79:87:d0:c8:77:b6:f2:dd:40:dc:15:dc:c8:04:cc:84:
1e:e1:6d:b6:39:c6:35:74:b4:c9:75:77:a3:af:06:0c:e4:b7:
c1:bf:8e:50:c5:f8:b1:75:ec:9c:a0:36:f5:bb:6d:b0:cf:1a:
85:00:57:1f:17:db:92:9b:2e:cb:45:dc:b9:8e:6d:bd:91:fc:
14:c6:f6:72:7e:04:21:08:63:48:30:47:52:0c:ef:f9:e2:12:
11:42:c2:ae:49:87:de:80:05:18:a6:70:64:15:37:12:c4:c5:
2e:b4:22:8d:13:48:c0:56:e2:36:05:c3:ae:25:68:c6:a9:73:
fd:70:6c:28:f1:c4:e6:99:bb:af:8f:56:13:fc:99:0c:44:51:
26:61:3f:71:6e:b1:60:89:d4:06:04:7d:f2:ae:dc:f5:ae:44:
41:1b:7c:86:f8:81:18:35:17:38:f5:9c:33:fc:3c:8a:c3:bd:
8f:e2:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:18 2025 by rpki-client