Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5bac7aad-8483-301d-a1df-02f2c65c870c.roa
File: 5bac7aad-8483-301d-a1df-02f2c65c870c.roa (raw, json)
Hash identifier: c49ONoDOFZkEBs7JMvusSRYbBY4bUrfmTzKNsQJLnHY=
Subject key identifier: F7:0F:B3:38:36:A4:11:1B:F2:7C:EC:3F:1C:F7:7E:67:E4:40:98:0F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28D2EC0FA283007EFBE680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5bac7aad-8483-301d-a1df-02f2c65c870c.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.28.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:d2:ec:0f:a2:83:00:7e:fb:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=c61c9b16-589c-4c86-a01b-23e40402760f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ab:3b:78:c3:bd:dc:6f:21:a3:6d:44:44:36:
c8:ad:6f:8a:f0:32:d8:21:19:19:b4:85:c9:24:ef:
de:e9:67:7d:be:ea:81:b9:b6:e6:0c:d3:d5:9e:55:
18:36:35:8f:e2:1a:ba:79:0b:5b:1c:27:a9:af:42:
a0:8f:2f:b3:14:3f:ac:fa:3c:d6:98:4e:c9:c2:75:
33:90:1d:34:9e:09:6a:32:5a:06:b8:19:d0:30:49:
fa:f5:c0:fe:da:c1:29:62:dd:70:3d:50:44:94:1b:
b5:0e:6b:c7:09:94:48:16:d9:56:9c:82:9a:4d:cf:
33:0d:78:08:eb:d9:d7:d8:ab:b7:72:f8:01:20:34:
dc:cc:b0:56:c6:4e:4e:d6:ae:88:cf:1d:f1:96:5a:
3a:f0:f5:79:fd:26:86:c7:70:13:a8:6f:0b:40:19:
aa:c9:d7:c6:e0:3f:73:e8:e3:b3:95:e0:c4:2d:a7:
ca:96:a4:ae:77:ea:7d:eb:c4:33:f8:14:26:d0:2f:
88:4e:8e:74:46:96:8f:80:80:f3:e5:11:d7:1f:4b:
40:24:08:07:7c:ac:2c:33:55:24:05:80:8f:61:08:
f8:eb:97:bf:75:00:1e:e3:2b:39:d9:76:d9:70:5b:
37:c3:b1:2b:cb:83:f9:45:ad:88:40:8b:32:60:f3:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0F:B3:38:36:A4:11:1B:F2:7C:EC:3F:1C:F7:7E:67:E4:40:98:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5bac7aad-8483-301d-a1df-02f2c65c870c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:85:a0:03:07:e7:5e:2d:b2:a7:8c:52:e4:76:3d:df:e3:30:
df:a5:aa:30:61:17:83:b2:e9:60:13:74:80:a8:c2:45:b3:d9:
35:c9:52:52:36:3a:4e:5e:53:fd:4a:30:a4:9c:a1:85:82:cc:
e2:82:a2:ba:2c:12:50:ef:78:c8:c0:6e:0b:9e:76:ab:bc:3e:
70:2f:a9:76:65:01:32:48:91:6c:01:66:9a:2b:9f:70:ed:80:
c4:fd:c8:9d:17:51:48:da:47:da:82:77:d7:f9:0e:a1:88:87:
72:e7:7c:1f:cc:95:a6:cf:10:8a:34:51:d0:70:55:e6:6e:79:
33:f9:3e:62:db:ba:1a:bd:61:b0:c5:f0:64:cb:76:dd:7c:be:
1e:94:51:f5:d8:6d:f2:01:cf:55:0d:af:a8:bf:8f:37:ab:ba:
c0:ba:8d:ba:3b:5b:10:15:96:e8:5f:ee:53:89:25:a7:a2:46:
ad:42:b9:97:8e:37:5a:47:f2:ee:63:92:fa:29:ce:4a:2c:36:
be:a2:73:6d:22:22:cd:f0:f4:6a:67:03:8c:40:be:5a:4c:a0:
90:7a:ef:f4:22:cc:17:23:0c:4a:6f:90:ec:74:a2:16:bc:90:
0d:4d:a5:94:06:d3:86:96:3a:c7:52:ab:db:10:1d:28:5d:81:
b1:55:c0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:07 2025 by rpki-client