Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7ff5767f-fda5-3dd6-913c-2a863e86927a.roa
File: 7ff5767f-fda5-3dd6-913c-2a863e86927a.roa (raw, json)
Hash identifier: d3jvavLfTqJSUSDcEBuqqT6sKl20vwPEcYXxyHCYJyY=
Subject key identifier: 9F:0E:9A:87:EB:FB:D5:7F:C0:76:8E:D9:EA:7B:09:3B:B2:1A:CA:01
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B54353A3C1A2FECF90DF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7ff5767f-fda5-3dd6-913c-2a863e86927a.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 70.31.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:43:53:a3:c1:a2:fe:cf:90:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=5ace43ea-cd18-43e5-9500-4b495c193573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:95:53:8a:fb:70:af:32:6c:68:e0:0e:84:
3b:9d:18:2a:20:0d:0f:13:27:53:fb:fa:27:22:90:
f0:90:b3:86:04:8c:08:b2:d8:7b:06:1c:92:cd:52:
89:6b:72:37:08:cf:3e:98:e1:98:c6:3f:7f:60:ab:
70:00:5f:11:71:43:93:f7:06:12:ba:e6:d1:db:25:
3e:3e:6d:c9:ab:5a:88:6a:9e:d5:c2:62:99:7c:7a:
a0:0e:2b:e4:1a:c4:08:4d:19:87:f3:df:03:7f:a7:
44:ea:be:bd:bc:5f:d9:68:10:5d:02:3b:64:61:39:
c4:6b:3a:aa:e8:98:56:be:27:d6:75:a2:ca:8f:ff:
96:9e:31:e9:bb:e7:0c:df:9e:cf:01:c4:17:79:33:
b1:4a:5f:83:23:e9:4e:17:80:dc:ab:6d:03:bf:b8:
e6:67:35:60:11:82:29:63:0c:45:6d:e7:5d:bb:16:
5f:4d:cb:cb:05:91:9c:4f:6b:a3:14:61:10:51:38:
35:75:b0:36:f8:89:12:ef:a3:5c:00:89:4f:08:aa:
cf:55:a3:15:c0:0e:d6:7d:e1:b9:1f:8e:f1:e5:ce:
8e:1a:88:05:02:1c:b6:2c:7d:31:58:d6:ea:a8:1b:
68:c8:25:b9:41:a4:83:93:fd:6b:d8:a6:01:b0:a2:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0E:9A:87:EB:FB:D5:7F:C0:76:8E:D9:EA:7B:09:3B:B2:1A:CA:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7ff5767f-fda5-3dd6-913c-2a863e86927a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.31.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:0e:3d:45:53:e7:7b:20:b4:14:da:b4:fe:aa:aa:e9:52:59:
c2:7e:0a:cb:ba:3e:34:b2:98:9e:ae:54:09:00:48:a4:43:95:
3b:63:cc:84:dd:e2:2b:7b:bc:8e:2d:05:73:43:a4:61:8f:68:
02:82:62:dd:c4:82:c8:c4:75:50:6b:cb:ef:49:07:61:d5:f1:
cd:d3:82:05:4e:36:12:b8:39:f2:b3:56:53:1d:3e:c3:49:8e:
0a:a3:0b:1b:80:76:ca:85:f7:9e:2d:25:a2:15:c6:b2:89:77:
1d:e8:6f:2a:aa:af:a2:f2:21:d3:34:6c:e1:da:44:ef:04:6c:
e9:b3:66:35:62:88:9c:17:13:77:09:c0:dd:6f:8a:bc:22:87:
04:79:3f:cc:43:e0:93:40:58:26:ba:9c:a1:88:f5:03:f7:cb:
65:ad:11:75:af:8e:e9:60:36:08:ea:47:6e:43:08:a5:f8:d3:
26:b7:a7:77:29:2e:d3:e7:0b:cd:6d:31:35:29:13:75:80:23:
12:55:2a:af:29:ce:8e:b0:dd:aa:09:88:78:0f:1b:b1:bf:8d:
3c:85:0a:65:86:cc:63:2e:47:b5:53:42:de:a3:f6:9f:67:ab:
5f:dc:f3:a2:0c:5a:cb:fb:e5:e9:04:59:08:40:55:76:f4:5d:
4b:bc:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:25:13 2025 by rpki-client