Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/74de1eea-b689-318b-8885-1b9ab716bb47.roa
File: 74de1eea-b689-318b-8885-1b9ab716bb47.roa (raw, json)
Hash identifier: 4Db6vIDPuO/owwFWQQlJvtnWjjYs4ysWF2/kqXMbiJ0=
Subject key identifier: 86:42:8F:EB:5C:9A:87:A3:97:32:E4:5D:3B:70:EB:7F:E6:AE:47:0A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B592D3C4D29BB8B21CC680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/74de1eea-b689-318b-8885-1b9ab716bb47.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 142.176.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:92:d3:c4:d2:9b:b8:b2:1c:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=d225be47-f19e-45de-9176-cd8fcbf1a709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:0a:fe:c1:22:62:e9:31:b5:55:e1:35:da:
91:a0:c9:f1:53:3b:ba:57:41:6c:ad:9d:cc:cc:3a:
27:8c:02:70:2b:df:8f:b8:3d:ff:8f:73:8d:5c:65:
45:41:fd:cf:bd:ab:29:62:47:15:d1:63:fc:0f:db:
01:e4:6a:22:fa:af:54:dc:a3:da:08:c5:a9:42:73:
ea:93:49:c8:2a:90:3f:ce:46:2d:6c:44:3a:73:db:
97:06:9d:ff:9c:a0:24:f3:5f:99:3b:59:13:3f:26:
f6:75:d9:38:87:dc:8f:85:b6:01:8b:77:ec:59:f8:
d0:88:4d:93:58:39:db:c4:9b:f7:a2:d7:9e:fb:07:
97:0d:c1:93:26:a1:8b:1d:82:fa:2e:9b:b2:cb:9e:
2b:62:dc:ad:96:04:af:e1:b5:a5:5f:21:fe:b3:37:
dd:9b:60:fe:0b:05:37:e2:2d:63:77:7c:81:e1:b2:
aa:1b:80:11:5b:69:26:0a:f0:d0:f8:88:d8:ef:93:
d8:30:e7:0d:c7:90:6c:5f:47:26:40:40:d8:b3:7d:
de:41:84:e9:99:eb:d4:47:b6:63:26:dd:86:2c:c8:
c8:d4:cf:33:32:5d:3b:42:20:58:e7:63:c9:e3:dc:
8e:b3:aa:e9:73:83:ed:41:01:82:82:ba:b2:57:4a:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:8F:EB:5C:9A:87:A3:97:32:E4:5D:3B:70:EB:7F:E6:AE:47:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/74de1eea-b689-318b-8885-1b9ab716bb47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:12:04:5b:85:72:33:fd:79:92:92:ef:3d:79:b5:af:7a:70:
f7:81:41:87:67:cf:ab:ea:5d:36:44:57:1c:d5:b6:40:c5:85:
5a:4e:f0:a8:5a:bf:16:aa:de:84:91:08:6e:57:ef:f9:47:74:
ec:6a:a8:f9:77:78:c1:76:24:1a:5c:09:27:a6:0d:3a:5e:45:
a0:8e:c0:40:ba:c6:81:51:85:5d:b7:fb:79:f0:3a:7d:bf:86:
1e:fc:8c:f0:19:80:19:d7:e5:c3:d7:28:15:47:28:36:da:21:
32:1c:2c:fe:f5:7a:59:4b:45:1e:82:a8:44:0e:17:05:f0:82:
51:f9:d5:a5:bf:0a:30:22:7b:fd:26:af:23:06:28:c8:e2:0e:
19:62:9f:ac:91:21:35:a7:0d:7b:3b:ff:71:f1:c5:8d:56:5b:
ac:dc:e4:49:f4:38:28:42:36:53:75:c5:5e:6e:70:cd:9a:50:
45:7e:55:5f:6a:9d:f9:95:b4:e7:a9:a1:11:6d:a8:e5:fe:02:
3f:d9:bc:73:6a:b4:7b:2f:9a:22:a7:8e:09:14:15:71:e3:95:
6f:52:47:03:1a:6c:a7:44:55:ca:4a:90:bc:0c:47:e8:eb:27:
8e:90:c6:de:2a:34:2b:e1:30:f2:dc:52:e1:b8:5d:c4:15:d6:
c0:61:21:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:39 2025 by rpki-client