Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53a4a2e0-b955-32e7-8198-ebb742d53fe1.roa
File: 53a4a2e0-b955-32e7-8198-ebb742d53fe1.roa (raw, json)
Hash identifier: gwFeW/FEMpk5Hlo8S86QrEskq1+LHRYpXy9RpiXdPng=
Subject key identifier: E0:85:31:DB:9C:F1:25:79:93:A4:81:A9:29:C5:7F:56:72:AF:84:8E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5566DF6E1D67AE5CE2480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53a4a2e0-b955-32e7-8198-ebb742d53fe1.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 76.65.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:56:6d:f6:e1:d6:7a:e5:ce:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=ea8dab3d-719f-4342-8fb4-6fb09cc53802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:db:1b:ab:b6:e3:08:da:93:36:78:73:4b:01:
40:e4:0f:15:fb:d5:9b:fb:4b:c1:19:62:2f:57:e0:
6a:4b:18:43:a7:5b:5c:7c:29:61:bb:04:ce:10:f3:
23:08:8d:26:ce:df:c1:63:c9:e3:c3:63:c7:f9:59:
8d:41:47:2a:49:25:bc:c9:54:2e:42:b5:11:66:1e:
05:8f:19:91:31:d2:17:69:5e:e5:6e:70:cf:23:89:
cc:71:a4:55:9f:c3:87:d2:13:0b:d1:a7:8f:98:c4:
94:c3:6d:27:7d:e1:a4:e9:1d:9e:12:10:50:9c:10:
6d:54:ca:ef:f9:b3:21:56:c1:79:09:76:69:d6:7e:
f2:2d:96:fd:c2:d5:68:90:45:86:6a:82:2d:27:e7:
f1:ae:d6:c2:0c:6c:f9:ef:e3:e7:12:b1:42:4e:cd:
4e:12:29:9b:73:2d:b9:54:ab:44:91:00:3e:11:90:
b8:4e:d0:86:3c:89:55:e5:40:0d:b1:c8:b9:7c:ae:
9d:ea:7b:7c:60:06:09:90:db:5d:fa:f9:eb:7e:96:
80:89:ee:53:73:07:99:b3:b4:d4:d9:69:59:2b:e9:
4a:0b:26:68:49:c6:04:25:c7:95:a0:fd:d5:b9:75:
ac:82:c1:94:6c:79:65:73:09:94:12:a3:eb:44:20:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:85:31:DB:9C:F1:25:79:93:A4:81:A9:29:C5:7F:56:72:AF:84:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53a4a2e0-b955-32e7-8198-ebb742d53fe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.65.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:f6:3d:53:8a:a5:3f:93:0b:c1:f1:f5:cb:26:ad:66:27:27:
87:47:64:4f:1b:b1:d5:55:6e:be:25:d0:69:e5:40:79:64:a2:
8f:6a:2e:a4:3b:29:9f:60:7c:bb:96:ef:e4:b6:db:cd:3f:0d:
f0:21:65:e6:44:c4:9b:e5:b8:b7:97:b9:b4:42:d9:da:71:4d:
3f:e1:1c:0a:30:6c:e3:85:20:cf:01:9f:6b:df:1a:04:46:62:
d9:fc:06:98:42:5d:53:f9:6a:68:85:96:ad:b7:17:fa:37:59:
3a:af:9f:3b:8c:a3:5d:cc:80:92:71:41:a3:ea:69:fa:ad:c3:
ab:7d:4f:2f:e4:16:dd:58:84:37:9a:db:7a:95:eb:ca:00:4d:
3c:89:40:79:a2:18:b3:8c:13:ca:cf:1a:f1:ad:e4:10:c8:0b:
f0:e6:fc:9e:54:fe:62:19:94:b7:cf:e5:22:df:04:cc:27:92:
0d:75:c1:3e:10:0b:ba:7e:8f:d8:0f:4b:1c:e0:fc:d2:a7:25:
51:a0:5e:d4:33:b3:6a:64:5a:e5:9b:f8:a5:ad:20:b2:fc:89:
ce:b0:07:6b:1e:f6:2e:bb:e1:5f:d2:87:5f:ed:f5:b7:33:c2:
65:02:4f:0a:6e:58:fd:be:d4:1d:a3:0e:e4:7f:14:30:65:0b:
7e:19:4a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:45 2025 by rpki-client