Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a888f66-a3e9-3a56-89e6-6cbe86717f88.roa
File: 7a888f66-a3e9-3a56-89e6-6cbe86717f88.roa (raw, json)
Hash identifier: xSPL0j1ErZ6cZWwz4iqhXl5ngKairgfBKyiYGXi26Pc=
Subject key identifier: BB:42:8A:ED:8A:FC:A9:D3:85:F9:A7:5C:B1:12:0B:37:68:6A:CD:DA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B2E2FFAB75D65E6B76434
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a888f66-a3e9-3a56-89e6-6cbe86717f88.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 7122
IP address blocks: 209.202.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:2e:2f:fa:b7:5d:65:e6:b7:64:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=a559305d-8404-49f1-a802-5cc83c522ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:51:bc:cd:2d:72:cb:61:4c:3f:71:f5:34:
fa:f1:d3:6f:8a:d5:7c:d7:62:e7:9e:95:21:85:d4:
d0:4f:fa:c3:32:a8:22:0f:d3:6e:68:28:cd:79:50:
bf:6f:c2:72:d8:f6:67:32:43:6d:a6:5e:09:cc:6b:
ad:ab:99:91:e7:9d:23:c4:ad:75:cd:77:9b:2c:86:
27:ac:dc:d9:06:48:ad:f6:f8:2c:52:ab:ec:f0:bc:
0a:1d:27:a7:51:e3:a0:d7:ed:79:5c:d9:17:f2:66:
37:37:46:7c:2c:b4:a0:8d:5d:14:81:4a:7e:20:96:
7b:27:e6:d6:e2:57:bd:b2:e2:1a:ef:61:b8:90:c1:
30:ce:28:8d:8a:55:7a:25:a9:06:c0:47:4e:7e:17:
4a:8e:34:55:6d:c7:82:2f:5f:39:3d:40:73:be:66:
eb:c2:01:7f:44:0d:ae:dd:8b:3e:a3:c9:63:55:d2:
b9:2d:6d:90:33:98:27:a1:56:2f:44:a8:40:0e:99:
c9:a8:bf:c8:7d:9e:cd:38:79:e1:96:a6:ab:d1:27:
ab:64:fb:f3:89:7f:27:c5:50:b5:ca:34:1f:b6:f1:
77:21:c3:6b:e0:c7:5c:d4:6a:cf:b3:1c:b6:1a:b9:
3c:1c:b6:4d:b8:ac:48:9d:5f:34:52:0c:f9:78:aa:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:42:8A:ED:8A:FC:A9:D3:85:F9:A7:5C:B1:12:0B:37:68:6A:CD:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a888f66-a3e9-3a56-89e6-6cbe86717f88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.202.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a0:a1:bd:25:c8:bc:53:36:ed:d3:22:6f:0e:e6:cd:72:28:
ad:d1:ad:8b:8b:09:c5:cf:77:ee:ae:26:a2:95:c6:24:41:c5:
bf:ec:76:19:b7:e7:08:29:8b:7e:2b:18:3c:23:c9:ae:b2:02:
7f:f7:fd:a7:d7:72:81:02:a1:ed:d8:5c:35:9d:54:f8:ea:c2:
56:af:fd:89:96:55:01:3f:42:f5:f1:5b:eb:5a:33:5b:b3:e8:
cb:11:22:d6:bc:49:8f:86:f2:a4:64:22:9e:95:6c:a4:65:d2:
c5:3a:70:88:d3:54:37:3f:9b:b3:a2:6f:3a:b8:28:a0:3c:35:
7a:d4:67:3f:05:ca:c8:b9:0b:a6:8d:bf:28:35:25:84:4c:5f:
d1:b8:d3:04:83:2c:0c:ee:8a:b7:93:15:07:6e:b9:d9:ba:57:
62:b5:b3:f4:5f:5c:79:c1:3a:a9:65:31:58:fb:24:55:71:5d:
af:25:e6:bc:c1:22:03:d8:de:ca:6c:c1:c4:e3:55:4d:b9:66:
64:db:dc:3d:a3:11:7f:a8:14:6c:20:b7:6f:21:b7:d5:94:99:
e3:3b:da:77:28:4f:67:05:ee:a0:d5:97:db:1c:2c:28:9a:2a:
de:87:1f:c1:ba:d3:b2:ed:1a:d8:a2:4a:18:ea:54:45:4e:69:
a0:c9:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:29 2025 by rpki-client