Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67479967-e162-324c-8919-03f1e4f49e46.roa
File: 67479967-e162-324c-8919-03f1e4f49e46.roa (raw, json)
Hash identifier: 1VOxu+rlBqXqLwWjBbapfpuru9JhJmappAcmr/7jJkk=
Subject key identifier: 9A:C5:1A:B4:EB:01:86:8F:61:96:40:C0:73:F3:A8:39:5E:A0:78:9C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28AF7E28E571F2672C0922
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67479967-e162-324c-8919-03f1e4f49e46.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 67.70.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:af:7e:28:e5:71:f2:67:2c:09:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=bd4472ee-d3af-4ea0-93c3-3a5808b2f7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:9f:87:a3:34:7e:cc:8b:a8:a9:38:a7:e7:
96:64:80:ba:6c:bd:ae:5b:58:9f:5c:6e:eb:00:8f:
28:34:eb:fb:b5:35:5e:e4:ec:07:b1:36:06:d9:53:
28:9c:99:0d:ef:39:43:1a:77:f0:af:c6:a1:1c:ce:
ac:c2:c3:1a:66:30:43:f2:d1:2e:21:ab:79:86:63:
4b:40:64:92:17:5b:59:49:c1:c8:9e:44:ba:eb:69:
99:04:51:c9:b0:cb:a4:05:9d:57:1a:97:67:6d:12:
ca:ff:dc:7c:81:ee:e5:a3:9c:b3:b2:d6:e7:0f:05:
59:e7:38:fa:12:5f:5e:d5:42:06:5e:95:74:84:d7:
2b:a4:be:51:d7:b4:7f:cf:1e:02:f0:64:40:37:62:
fa:b2:77:41:fc:31:d6:78:13:67:c6:9d:d1:24:88:
6a:cc:2b:75:fc:29:de:5d:86:35:b6:33:d8:ef:84:
6e:22:67:4f:7a:82:78:83:c7:28:17:f5:28:76:a1:
67:23:7f:6d:ec:2d:55:5a:66:5d:6b:3b:c4:68:c8:
88:eb:09:a9:9d:59:05:88:48:0e:16:41:28:e9:77:
67:b3:e2:89:19:c5:ea:91:2b:47:b1:4c:50:2e:53:
70:78:4f:a3:90:64:04:f5:ab:e2:73:ac:bd:53:66:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:1A:B4:EB:01:86:8F:61:96:40:C0:73:F3:A8:39:5E:A0:78:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67479967-e162-324c-8919-03f1e4f49e46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:61:1c:dd:d4:d3:48:ce:7e:e3:4e:8d:8f:8e:68:e8:5d:35:
eb:8e:af:a7:2d:da:c0:02:63:1d:fe:af:38:7e:e6:92:73:70:
79:f4:c1:d4:f6:9f:d2:b5:3d:39:4e:97:85:98:46:1c:80:5d:
00:21:43:c6:10:7c:06:16:ca:f0:7d:74:bc:e0:78:7b:55:09:
6b:1f:d2:f0:96:d8:7d:f4:74:ee:3f:ad:ee:9d:fc:d6:63:cc:
cf:fc:a6:cb:6a:2e:af:1f:e7:71:7d:28:9b:ec:19:79:cd:eb:
bb:6c:a3:c3:5b:e3:8f:1a:1d:cd:bc:d4:ee:b1:32:f2:5d:96:
a0:a5:45:ba:d1:cf:fb:7b:7c:ed:91:8f:b5:25:a1:4d:9f:d7:
b5:90:71:e8:8b:c2:15:48:cd:2d:bc:fd:b6:27:6b:35:75:79:
f9:f6:2e:2a:9c:4e:c5:26:60:52:aa:3b:54:18:b2:df:41:83:
92:e1:5a:45:bf:82:d1:d7:65:06:66:77:c9:2c:7f:3f:0f:d9:
0f:e7:3b:e1:cf:1c:28:26:69:6b:c1:7d:2b:f7:09:e2:d6:28:
12:81:a4:e4:e8:40:de:c0:db:3b:53:bd:62:d6:20:8c:49:75:
50:25:92:0f:9f:95:14:c5:73:26:b7:0c:45:01:25:66:80:b7:
e2:c8:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:19 2025 by rpki-client