Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8058b326-5721-34dd-81af-039d4732cc25.roa
File: 8058b326-5721-34dd-81af-039d4732cc25.roa (raw, json)
Hash identifier: 9wTTJ/TXLVqqXLJsMiYMLkqVfakNT/11SjW5qOWy+80=
Subject key identifier: 19:D4:D5:EA:55:59:99:F7:4E:C4:7A:61:D2:3D:7B:E0:E9:96:21:99
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285842AA11629AA915551871F91BC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8058b326-5721-34dd-81af-039d4732cc25.roa
Signing time: Mon 24 Jul 2023 12:00:00 +0000
ROA not before: Mon 24 Jul 2023 12:00:00 +0000
ROA not after: Tue 24 Oct 2023 04:00:00 +0000
asID: 577
IP address blocks: 70.24.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:11:62:9a:a9:15:55:18:71:f9:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jul 24 12:00:00 2023 GMT
Not After : Oct 24 04:00:00 2023 GMT
Subject: CN=e963046d-1c4b-433e-8a0a-d06f50206874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:31:f2:c7:9d:c4:96:bc:e1:c7:66:2e:c0:
95:08:44:7f:26:d1:e0:78:5b:ae:2d:07:b4:be:77:
59:12:40:26:6e:62:11:76:c2:97:e3:6b:8a:2c:b8:
9d:08:91:c6:28:ed:34:fb:c7:22:9e:86:44:b0:ba:
d3:1b:0f:86:86:9d:fb:cc:27:e4:9b:d2:71:63:c3:
13:bc:22:69:ed:1b:1e:c9:f2:ee:56:3d:4c:30:1c:
39:38:1c:dc:d1:88:b0:ac:61:f0:72:53:f9:bb:aa:
fe:5a:c3:75:2c:34:2c:b8:f9:03:1d:9a:62:21:43:
d9:36:84:44:e9:d0:28:82:d6:d2:84:de:7b:36:28:
42:b7:23:be:81:8a:03:25:54:3d:65:2b:96:ed:f9:
60:65:64:03:67:44:74:af:b6:f2:22:52:b9:59:44:
40:ef:be:88:5f:54:fd:2c:f0:78:6d:eb:d4:e5:56:
d6:91:14:28:9d:05:f6:e2:1d:a7:fc:53:44:07:6e:
85:96:a4:8e:5e:f6:2a:e6:d7:db:e2:8d:bc:2a:68:
4b:e7:50:7e:32:2f:aa:4b:58:37:03:1f:ee:5c:cc:
a3:64:48:a3:6a:6a:c5:00:ed:c7:f3:1d:15:c5:60:
69:5a:49:a8:83:d1:e4:f6:0a:7d:3e:e8:c6:0a:cb:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D4:D5:EA:55:59:99:F7:4E:C4:7A:61:D2:3D:7B:E0:E9:96:21:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8058b326-5721-34dd-81af-039d4732cc25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:44:91:71:8f:23:b8:7f:85:9d:08:d7:ae:d1:93:e7:00:51:
59:ba:ab:ef:87:38:ad:80:93:49:a1:b1:e6:25:a3:ce:1a:b1:
6c:29:d6:13:9c:fb:66:cc:eb:1f:8a:dd:78:e8:01:89:5b:59:
22:61:a3:1e:b0:b9:b6:2f:ff:a2:5b:78:46:97:e5:a5:14:eb:
35:ea:9c:9b:04:fb:6b:e8:0b:9b:bc:55:d2:34:d3:06:81:ce:
fd:b5:86:f5:ce:6f:12:ed:b6:ea:96:1e:fb:7e:c3:e8:9e:81:
4d:69:f1:6b:d4:f2:d8:cc:b7:3d:71:df:bb:fd:24:56:aa:29:
61:93:d6:91:63:a1:66:6d:b8:6f:7d:1f:be:90:26:be:ec:93:
b5:96:1c:c7:06:58:f0:3b:21:82:a0:db:82:d5:2f:22:6c:dc:
e1:25:a2:ac:7c:ae:7f:15:9e:e1:d3:d0:66:2f:75:10:2b:d4:
a9:c7:a5:42:54:14:72:ff:9d:76:e0:41:e7:38:5d:e4:35:89:
1a:6e:d9:97:ad:21:cd:ff:cb:1f:4b:1a:b2:2c:de:d4:80:67:
e6:ca:27:4b:92:e2:b6:eb:c9:64:3d:95:45:b2:7e:4b:63:a4:
66:e3:12:05:40:8a:97:b1:db:06:1c:af:df:80:1a:1f:f0:f4:
f5:2f:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:40 2025 by rpki-client