Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/544d4802-b717-3019-a73e-a259277643b4.roa
File: 544d4802-b717-3019-a73e-a259277643b4.roa (raw, json)
Hash identifier: 9Blzd/xD459yti3qrvpBrThpPvKGPjcc5NbpuXLv5RA=
Subject key identifier: 66:9D:01:46:BB:83:0A:AF:C5:46:73:09:DD:B7:26:3A:A3:12:8D:E9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B53B71EB0FD508363A44BC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/544d4802-b717-3019-a73e-a259277643b4.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 70.28.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:3b:71:eb:0f:d5:08:36:3a:44:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f131985c-bd57-4a9c-9ee7-4378c5d459af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:62:08:f3:b6:71:30:bd:66:01:47:0a:e3:
e1:c7:21:57:74:af:b9:b5:a0:20:3d:1d:26:d6:c1:
b4:ae:3d:71:0e:50:26:a9:c6:f6:32:78:7c:79:ba:
39:07:05:37:fd:db:f0:a2:91:a1:a3:b1:5e:c7:2c:
35:6f:df:5a:27:d2:a3:de:39:33:7f:25:04:40:7f:
b4:6d:e5:33:4b:76:15:ab:73:b5:68:e3:e6:2d:5f:
b7:6f:21:a1:57:43:43:d0:e7:1a:3a:c9:17:6a:77:
20:30:9e:9e:e9:8d:04:34:ae:e6:33:b1:52:ad:7a:
b7:cc:67:a3:bb:9e:33:21:b4:5b:0c:dd:05:ad:14:
97:05:65:35:36:20:ec:d3:22:ea:f0:45:7f:ff:f0:
f3:cd:c3:39:ea:57:40:3f:e8:13:a2:43:81:64:f7:
a4:78:7c:96:11:7f:89:ce:71:12:e2:d0:e2:09:98:
10:03:0c:84:5a:16:1d:59:ba:08:35:bb:4c:b3:89:
d6:9e:a5:9d:00:53:09:69:24:9c:20:c9:88:59:90:
54:2f:54:fd:7b:f5:da:1a:1e:c4:73:33:be:2c:6d:
65:07:f6:c6:82:47:96:c4:1b:bb:b6:7f:2d:4a:8a:
2a:f8:4f:f1:3c:61:71:58:21:cd:31:51:1c:ec:c6:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9D:01:46:BB:83:0A:AF:C5:46:73:09:DD:B7:26:3A:A3:12:8D:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/544d4802-b717-3019-a73e-a259277643b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:61:f0:7e:da:77:c7:c0:d3:70:76:0e:8c:31:f2:e0:08:59:
8b:1d:8e:9d:e9:53:bf:51:6d:e4:b2:89:9e:7d:f6:cd:ea:f8:
24:57:8e:92:7f:96:8c:69:b1:6d:02:1c:c5:8b:51:91:b6:98:
23:51:bf:00:93:f2:8e:0a:e6:fc:6f:9f:05:ca:21:b4:9b:cc:
db:ba:80:3b:1a:eb:5e:0f:43:fa:30:34:af:4e:74:e6:14:3d:
ed:b4:1d:18:c7:b9:a9:df:3c:d0:a7:cb:73:91:38:92:d1:32:
5a:2e:f7:7c:4e:5d:2c:d3:82:39:8d:0d:4e:b2:68:5e:29:d0:
4a:eb:60:1e:a6:64:14:38:3a:f2:6f:53:f6:65:01:60:16:4a:
b8:35:94:5b:8f:6b:83:54:1c:68:39:9b:96:14:02:d2:cf:f7:
bb:2c:55:e6:2e:03:b8:3c:66:3c:14:af:87:4a:5e:28:b4:b4:
84:31:2f:66:08:26:58:11:8f:3d:e2:a9:06:6c:e2:66:70:6e:
67:6e:40:b3:e0:99:c1:76:4a:3f:a1:eb:d5:74:10:79:b7:75:
56:1a:a4:13:fd:50:12:1f:9a:4f:7a:88:2a:2f:2e:53:ba:4e:
3b:ad:59:85:0b:8a:bf:c3:7b:15:3d:1f:5f:42:35:4c:55:c6:
4c:c7:f3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:32 2025 by rpki-client