Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6caad6eb-1158-381e-b03b-7fd0c9963f7c.roa
File: 6caad6eb-1158-381e-b03b-7fd0c9963f7c.roa (raw, json)
Hash identifier: O2p9Js25+uj8myvgOroxQzzk/i7Ir3oSh5cVNtSsiOs=
Subject key identifier: 4B:1E:4D:15:AC:6A:3F:82:06:EE:73:5E:4A:BD:4A:78:67:E6:E6:1D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5514CF19A2A3E4FE1C510
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6caad6eb-1158-381e-b03b-7fd0c9963f7c.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 74.12.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:51:4c:f1:9a:2a:3e:4f:e1:c5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c961b00f-aa68-4f93-85f3-b426d701793c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:fc:d6:4c:eb:a0:a7:10:4f:21:96:b6:b4:
2d:7c:f9:f0:24:96:88:5c:92:f8:1c:de:61:a9:39:
84:bc:27:2e:a8:04:d2:22:a8:91:6e:a7:aa:a2:29:
80:8a:15:12:52:92:e4:83:9b:9f:0b:4d:fd:97:ce:
e2:38:11:6a:35:08:94:ec:95:ba:1b:47:60:29:1e:
8f:75:ce:7d:00:e3:5a:a3:30:fd:37:02:d7:1b:5f:
0b:44:d8:b1:cc:ab:75:ec:a3:f3:13:40:04:84:26:
24:de:cc:e8:50:a4:5f:70:3a:eb:88:00:fa:82:07:
d6:12:89:92:5c:55:7d:99:90:60:ce:a9:7e:c6:52:
c3:0b:f6:a3:5c:3c:97:96:90:fd:85:39:79:66:24:
9b:22:ab:0a:45:85:56:a1:8c:06:dc:97:2e:22:76:
21:a2:89:09:91:74:8b:90:6e:cf:f8:59:cc:e8:4e:
34:fe:76:09:aa:2b:27:58:06:c2:51:8a:cd:bf:2c:
b7:13:02:16:20:be:1d:e2:c1:73:e1:2f:64:d2:65:
a3:0f:26:e9:97:6f:05:67:7c:24:37:66:ef:7e:7a:
04:e5:93:52:a5:d0:16:33:70:7b:bb:3d:9f:1f:a4:
a3:a0:5a:31:7e:59:86:f2:3e:cb:eb:ec:76:78:7a:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1E:4D:15:AC:6A:3F:82:06:EE:73:5E:4A:BD:4A:78:67:E6:E6:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6caad6eb-1158-381e-b03b-7fd0c9963f7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
74.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:10:68:d9:73:78:86:91:57:ed:cb:16:c4:a9:5f:b5:5d:c0:
a4:e9:ac:d8:ea:5d:b0:83:a5:53:53:ee:ce:5f:21:79:ed:6a:
cb:62:c6:10:2b:34:81:3d:d7:8b:51:f4:57:01:5f:c7:66:f4:
ab:46:2d:43:79:f4:24:a2:3b:8c:56:d4:ba:31:1a:18:12:ac:
86:fe:63:cd:0c:2d:ca:e4:e7:cf:a4:a1:b1:df:ae:85:8a:c3:
f5:78:68:db:01:f1:b1:46:0a:22:48:fd:66:ab:56:7f:49:d2:
1a:6d:4c:d5:66:bb:8e:76:12:89:d5:22:d4:c1:82:9d:51:51:
eb:d5:10:88:69:db:9d:db:93:bf:e7:0a:c7:8c:19:63:bf:df:
b2:35:c5:5a:fb:0c:23:92:95:39:4d:24:7a:b6:fd:12:78:20:
44:52:b9:33:11:d7:50:64:8c:10:a4:c6:d1:e8:ae:d1:08:4a:
05:58:05:47:b6:95:fa:b7:c0:a2:c3:b2:f8:8d:8b:5c:36:d8:
34:ca:c7:cf:87:a2:11:b0:a0:e4:c7:ce:59:a0:22:ca:f4:5d:
aa:6a:4b:67:4a:12:14:01:75:e2:5e:93:a1:f1:9d:3f:19:e8:
29:19:07:e5:2d:05:b5:78:5f:68:c7:7c:3c:19:45:a1:dc:7f:
28:9e:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:21 2025 by rpki-client