Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77d6faa2-b862-3445-bda2-e560c985b39b.roa
File: 77d6faa2-b862-3445-bda2-e560c985b39b.roa (raw, json)
Hash identifier: soTCICScbCj1U80d6Ol8wRWxGcf5sIIgGJvyU9z3LzE=
Subject key identifier: F1:10:1C:24:64:4C:48:E1:39:30:C4:A6:20:4E:0D:EA:D8:BC:F4:FB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B546497AA90004AF4F39E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77d6faa2-b862-3445-bda2-e560c985b39b.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 70.49.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:46:49:7a:a9:00:04:af:4f:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=518b24d3-61ca-4d6f-8557-f60c204529dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:07:8a:1e:6f:d9:4a:37:fa:90:35:c8:be:
be:65:b6:d6:ed:f3:6a:16:91:3c:31:36:d1:a3:3b:
87:d2:68:88:ad:03:fd:18:ff:8c:7a:f2:0c:6b:cf:
37:9c:e5:e9:ec:9b:cf:8d:c9:6a:57:33:86:81:83:
26:0c:a9:a2:f1:5e:4a:5b:0e:8b:0e:d7:7c:9f:64:
c8:6e:99:0f:3d:64:b6:86:8a:20:b2:a0:96:5a:07:
be:8b:74:ef:33:fa:d2:23:ad:d4:94:5c:d2:a9:16:
21:16:3a:9a:a2:74:c1:53:97:b5:f7:32:97:28:b1:
a9:67:83:cc:49:98:8c:bf:cf:1e:37:8f:76:06:79:
bd:2e:04:72:40:f8:05:ec:6c:17:74:4a:1c:d9:85:
47:4e:31:32:6f:a1:c6:e6:95:ad:37:36:c7:11:03:
10:69:08:87:4c:0d:26:ef:4a:01:54:72:1f:29:16:
8a:7c:dd:4c:a9:c2:37:40:cb:17:4c:12:8d:1e:59:
cf:5c:7a:ab:06:4e:bf:5c:b9:a3:43:ca:01:4a:2e:
6b:0b:50:e9:63:99:f1:5a:e1:50:b4:0c:bb:f0:ea:
d8:09:13:cb:df:82:47:7b:ab:f5:8e:8d:39:34:c6:
83:f7:8a:aa:4a:c9:a3:2a:24:d7:1a:c4:2c:74:83:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:10:1C:24:64:4C:48:E1:39:30:C4:A6:20:4E:0D:EA:D8:BC:F4:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77d6faa2-b862-3445-bda2-e560c985b39b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c2:41:8e:97:df:cc:f1:40:fa:2c:ef:94:f2:28:41:30:97:
f7:5c:ef:9d:1f:32:d5:1e:3a:62:f6:25:ef:5c:32:d4:4a:42:
15:f5:9d:ed:65:5c:3f:5c:98:3c:e0:c7:e1:1d:46:93:61:5e:
e0:b3:2f:bf:b9:ec:6e:4b:de:cb:ba:40:52:6c:03:d8:ee:50:
be:5e:1d:32:ec:63:b7:55:a6:7a:39:ac:68:d4:d6:a8:73:57:
f1:b6:6e:f3:f3:69:c2:dd:3e:1c:9f:d2:4a:0c:ab:7d:6e:af:
8c:b4:5e:92:84:bd:4b:4a:7c:34:b3:62:30:57:4b:81:8a:50:
4a:c3:fe:68:33:32:73:a1:46:59:85:58:fe:87:28:04:76:52:
bf:7e:2a:98:60:ce:dd:45:fe:89:be:92:0b:1b:3d:d7:5e:92:
42:11:ff:e4:42:ce:1c:d4:c2:d7:12:60:e7:bc:86:16:4a:38:
2d:6c:73:5f:78:eb:b2:72:5d:3b:ad:28:2e:30:3d:70:10:55:
8a:3a:78:d5:3d:f1:be:f5:c7:5f:f4:b0:0d:60:41:b9:6a:12:
ee:d0:e0:5c:ac:cc:f6:9a:47:81:c1:01:29:da:71:7a:4d:8b:
b8:c4:32:7f:ed:7e:c2:63:36:4c:a4:d7:c0:44:55:8e:04:12:
27:97:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:38 2025 by rpki-client