Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4febf89c-c94a-3677-8b10-2e7467b24251.roa
File: 4febf89c-c94a-3677-8b10-2e7467b24251.roa (raw, json)
Hash identifier: VDQYXrSYkq+7wpZqv5GeXMFvO7+BHI1mSzdU3EE4i10=
Subject key identifier: 9B:FC:83:1F:0E:B8:EA:ED:22:77:F5:53:34:80:E8:01:92:CB:C8:B0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5CAFDDF56D038519CC590
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4febf89c-c94a-3677-8b10-2e7467b24251.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 184.151.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:ca:fd:df:56:d0:38:51:9c:c5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f1947048-ef8f-4b9c-87b7-a0e106f3ecc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:9c:55:a7:3a:b0:b9:fd:0b:0d:8d:af:5f:
f0:bc:72:9c:64:ad:85:76:99:99:ca:ad:fd:54:1b:
19:f2:34:b7:ec:2e:8d:af:f0:6f:65:b1:8b:b1:64:
88:f9:bc:bd:cd:7e:c6:40:ae:01:9e:88:32:09:5b:
36:c6:1c:11:e3:07:4c:8e:c7:d6:4a:ef:00:6c:ff:
27:1c:61:b5:31:c2:47:03:67:4e:98:98:eb:27:39:
bd:ce:61:cf:65:ce:f8:5d:35:c2:c8:07:f0:d0:c4:
50:42:09:51:0f:dc:ba:0e:a9:10:64:1e:b5:6f:c9:
7e:a3:8f:fd:11:61:f2:4c:4e:75:1f:db:5a:e3:48:
97:14:09:f8:e2:ff:bb:5a:89:a3:1d:ea:bd:1c:51:
d3:d6:1b:8a:17:22:dd:8d:40:e3:52:7f:77:ae:11:
45:2c:ab:45:ee:2b:04:73:ad:bf:2a:e8:0c:fa:47:
71:ea:85:74:8b:66:61:94:fc:31:f7:75:99:4a:ad:
cd:72:f7:75:a1:96:30:b3:70:bf:28:6e:c6:97:fa:
d5:58:25:98:f6:3f:b0:9b:79:a5:dd:38:4d:e0:14:
08:bf:74:7e:5d:68:99:94:5a:46:07:4d:d4:e1:dc:
b5:1d:cd:5a:68:ff:88:5d:7e:f7:4c:97:fb:b2:6c:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:83:1F:0E:B8:EA:ED:22:77:F5:53:34:80:E8:01:92:CB:C8:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4febf89c-c94a-3677-8b10-2e7467b24251.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:a3:ac:f4:00:fe:0f:84:ab:74:9b:98:7f:84:7d:e5:52:56:
75:d5:09:37:9c:ea:2a:21:99:4a:cb:67:55:d2:d8:64:eb:51:
be:e6:34:f7:79:ff:61:83:7b:af:e0:c0:4f:a4:f4:38:a3:bb:
2f:fc:6e:c2:2c:88:f0:87:64:d0:26:74:34:cd:68:4e:9b:98:
9b:54:d4:80:a2:e8:58:31:13:09:4a:99:f8:9b:ac:40:1c:48:
3f:05:2c:ec:b9:ce:89:de:52:e7:3a:e0:96:4c:e5:0e:12:f1:
34:63:71:54:76:7b:c7:f5:19:60:21:a7:7b:0e:f2:f6:e8:87:
c7:31:2f:73:68:0c:76:53:fe:3e:c3:7b:a1:ef:94:c9:48:f3:
86:1e:29:2b:b4:1b:59:72:26:10:08:f3:9d:79:de:a9:1b:31:
9b:3a:fb:4a:19:68:ab:1a:d8:bf:9f:ad:5d:d7:11:56:01:16:
0e:95:a2:9f:07:38:e9:31:58:7a:1f:83:0b:74:a5:5f:40:05:
0e:79:0e:b2:a7:cb:70:f8:a1:32:4a:61:d5:53:9f:65:c0:a5:
fa:68:ec:58:7b:79:71:a8:67:6e:be:fa:29:6a:a8:0a:e0:f0:
8c:13:de:7d:30:eb:be:f4:8c:cc:61:6b:9c:4e:cf:57:6b:ed:
65:b3:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:55:44 2025 by rpki-client