Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ec78e39-2e50-35ee-8e82-5cdf7f86c20f.roa
File: 5ec78e39-2e50-35ee-8e82-5cdf7f86c20f.roa (raw, json)
Hash identifier: Nf1MPvmxvVT2d3caRtEtQWJ8QDA+sWHIn+knyqS5/Zs=
Subject key identifier: 0F:7D:28:E1:6B:60:78:09:B0:3A:75:3D:6E:9C:DB:2C:F1:0D:C9:3D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5CDDD8A4CDF4163FA9280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ec78e39-2e50-35ee-8e82-5cdf7f86c20f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 184.151.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:cd:dd:8a:4c:df:41:63:fa:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=614e8543-8a2b-447c-9247-1bdba7781262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:a5:b7:45:22:84:48:34:0f:e9:ec:9c:0e:
83:70:d2:8f:ce:25:fe:86:42:30:e1:14:f7:1e:dc:
28:98:54:5d:ab:a7:ad:dd:7c:1c:5a:9a:fb:33:e9:
9f:eb:ca:e5:4f:41:6d:99:bf:7a:d1:8a:b8:b3:f8:
c7:8b:ea:6d:b9:28:62:bf:ca:c3:0f:77:dc:4f:05:
1a:87:f1:58:2a:15:51:f7:16:e7:3f:4f:a5:37:80:
bd:10:35:0f:83:d4:00:c1:d3:e4:ba:f1:b9:5f:76:
b1:11:09:25:8f:9f:aa:d1:f9:53:01:db:7f:42:cc:
25:ba:aa:44:7e:b8:a6:49:f5:80:8f:12:7a:89:a8:
25:40:bd:e9:fb:1b:70:fa:57:58:97:e2:46:76:08:
75:da:3d:ed:65:bd:41:b4:e9:d0:19:2c:b0:1c:75:
ad:40:de:a7:c5:30:1f:79:2e:36:0f:07:d4:6f:12:
7d:1d:ef:f7:2e:5a:27:cd:92:dd:9c:f3:21:cc:5b:
b8:ec:de:76:07:30:54:98:3d:fc:62:5f:20:7b:73:
28:ad:60:03:e9:8c:6a:74:0e:f5:07:3a:de:2e:c9:
6a:e2:07:0d:e8:51:37:36:f1:42:77:85:04:c9:8a:
b5:e2:d8:df:e8:90:0e:5f:b8:15:a3:ab:12:62:30:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:28:E1:6B:60:78:09:B0:3A:75:3D:6E:9C:DB:2C:F1:0D:C9:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ec78e39-2e50-35ee-8e82-5cdf7f86c20f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:5c:be:9c:01:0b:ee:e8:6d:8c:b5:f1:5b:ce:5d:41:25:28:
f1:c9:a4:0d:6e:bf:af:e7:03:ad:d7:03:f2:f3:47:84:e2:ec:
6e:7c:11:69:53:eb:cb:11:7f:d9:87:d5:0a:9c:8a:93:c4:87:
05:c1:68:f1:80:91:bd:65:e3:3d:c3:63:31:eb:41:95:d2:31:
f5:39:27:76:24:87:25:0c:27:eb:1a:e9:28:75:1c:84:e3:16:
98:3c:22:22:fb:c0:91:7c:b6:10:af:ac:3f:cf:d2:b0:af:9e:
b5:8a:d2:c4:a8:01:47:9a:8e:fe:7e:77:8a:53:6d:49:c1:c2:
c4:b0:d5:5e:11:96:a8:4f:aa:37:a5:ed:53:30:93:17:69:62:
15:d6:6c:f9:c3:12:b4:11:ff:ee:5e:67:1b:bd:d6:b7:cd:f8:
cb:43:56:7c:f2:50:99:f9:e2:9d:f5:d6:41:a2:98:e1:d1:22:
e7:6e:2d:1e:f9:5d:12:df:15:bc:ff:e4:29:39:6c:b4:da:e3:
d9:8a:d7:bf:47:1d:e3:cf:80:2a:18:e6:fb:25:8d:c1:2c:f9:
56:71:e8:8a:ea:a7:bf:07:86:d9:8d:6a:35:f1:a4:5c:7c:fe:
af:6f:69:d1:19:48:07:e3:49:27:20:aa:9b:22:13:c4:11:a5:
1a:06:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:21 2025 by rpki-client