Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b0e6dc8-e396-32c6-948e-21b6e2c9b6f1.roa
File: 4b0e6dc8-e396-32c6-948e-21b6e2c9b6f1.roa (raw, json)
Hash identifier: nskGS/1OnUxYGnPAMmjz3rHkzd48+Isbc8kR+sujYRo=
Subject key identifier: ED:1A:36:AB:51:93:21:B8:B9:C7:C1:68:E6:4E:07:13:95:B9:02:34
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B77467D185C649709DFF60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b0e6dc8-e396-32c6-948e-21b6e2c9b6f1.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 209.17.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:74:67:d1:85:c6:49:70:9d:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=5b8d05b1-788b-482c-acc1-e6ce9db25a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:93:f9:e1:c6:35:e5:4e:33:f6:8e:30:60:
93:ae:d8:11:01:77:d7:c1:c8:8e:fb:97:53:c5:f4:
ce:af:47:41:f3:88:75:0a:4e:3f:fc:17:80:d9:3c:
5c:6b:e8:4b:db:30:81:05:3c:f1:bb:09:45:3f:0a:
07:e9:21:1d:d8:d4:8c:66:85:fb:69:6a:6f:ad:b9:
0b:0e:03:3e:df:26:63:a3:37:1e:27:35:1b:bf:67:
d5:4e:1c:ea:27:7a:cd:27:90:b4:88:d2:44:8c:a8:
2e:df:d2:56:f7:2d:b8:95:5d:a1:f1:6e:1e:3b:e5:
b2:c3:de:77:c8:f2:a7:98:71:de:63:d0:cb:eb:22:
28:b6:9e:53:6d:fc:ba:23:78:81:1a:28:aa:5f:e6:
b0:71:61:68:cf:30:9d:34:31:fe:5f:2a:2a:04:32:
e7:56:c4:36:c3:32:c4:3e:28:34:18:ef:75:c3:5c:
61:05:28:d1:e1:a5:73:fb:d9:c1:72:18:02:d3:c3:
69:7b:f0:c8:44:de:96:04:8a:b4:dd:98:74:9d:eb:
c2:6e:14:fe:b1:1c:09:dd:dd:8a:1c:6a:df:0d:16:
5e:72:71:1f:b9:29:db:41:2a:74:78:ed:87:5d:4e:
fc:f3:7d:af:13:ee:d7:cf:1b:99:f5:e2:bb:4f:50:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1A:36:AB:51:93:21:B8:B9:C7:C1:68:E6:4E:07:13:95:B9:02:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b0e6dc8-e396-32c6-948e-21b6e2c9b6f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:e3:61:c4:55:f5:d4:8d:e6:98:f5:90:67:1d:5a:c4:a7:10:
37:03:e9:17:0c:e5:a8:50:42:3f:c3:74:12:83:62:ff:b8:40:
34:26:06:51:b1:a2:eb:7f:8a:ef:4d:1d:14:10:01:5d:bd:a3:
e2:3b:76:ee:d5:2d:e4:2e:69:bd:d1:fc:aa:c8:26:23:03:86:
0d:3a:4e:d0:31:2c:08:b0:2b:db:27:e9:2f:74:4a:19:0d:16:
c8:89:b3:56:e4:09:55:9e:20:9a:0f:63:c5:1a:04:10:da:8b:
eb:59:32:12:b3:4f:9a:02:d4:29:16:11:63:fe:e2:06:01:10:
00:a8:b8:7d:5a:c0:ae:0f:00:b4:71:b1:75:8c:b6:cc:2f:03:
3e:b7:7b:99:ca:d5:42:68:8f:42:4c:ad:9f:62:7c:5f:cc:7c:
05:55:4e:28:f1:c8:60:50:16:7c:de:00:96:31:93:8a:b0:38:
86:52:d0:56:2c:08:01:8b:7a:17:1c:48:75:33:eb:2b:4d:72:
0e:fd:78:82:bd:e6:19:43:f0:2a:ae:a4:95:04:f3:fb:04:70:
9a:14:6f:5f:58:f3:56:fe:3c:1e:fc:09:0f:ae:4c:53:fd:b1:
3a:3f:81:6a:b4:46:be:1d:27:d8:f3:85:48:57:1b:02:c9:ec:
03:27:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:38 2025 by rpki-client