Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84d6b33e-44aa-372b-b8a7-83fd179deced.roa
File: 84d6b33e-44aa-372b-b8a7-83fd179deced.roa (raw, json)
Hash identifier: h9s8YON1NgdrezesTLZmSg6Ht3ZCe1iyfp1Hy1fblds=
Subject key identifier: 1B:F6:E3:BC:41:B2:BA:BB:D3:C9:D3:2D:6F:E1:43:65:99:32:79:C4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28ED0352391734F2468E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84d6b33e-44aa-372b-b8a7-83fd179deced.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 74.14.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:ed:03:52:39:17:34:f2:46:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=57704704-2cf3-4f9e-b974-0ed465fa0c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:69:79:3c:cf:fe:63:66:56:65:3f:91:60:
33:ec:33:57:16:be:98:75:a4:67:ed:e4:c4:0e:3a:
4b:54:c2:9b:b8:9a:62:d9:65:d2:2e:a9:af:bc:4f:
16:4e:cb:a1:4d:52:0c:65:41:71:92:8d:07:51:e4:
65:2e:dc:58:f3:a1:c5:1d:bc:84:31:c4:1c:81:32:
53:67:9e:46:6a:cc:2d:61:69:ec:84:a1:54:3d:a4:
87:e3:37:dc:5c:47:89:ea:2d:da:1d:29:58:3f:c9:
f9:60:b7:24:19:9f:f8:56:d8:21:a5:fe:a8:49:70:
0c:6d:e4:42:76:a6:dc:63:19:9c:3c:e8:b8:d8:61:
d2:d4:16:e0:7a:0e:a4:6b:f7:84:63:6e:66:cc:98:
68:98:59:a5:02:49:ef:db:c5:23:15:88:55:a6:e9:
c8:74:c9:1a:56:50:e4:1f:8f:05:d0:90:d3:9c:df:
4d:f0:3d:02:99:bc:06:ba:0a:69:49:8b:a0:87:dc:
8f:a8:5f:54:ac:be:c4:a5:ef:ab:c1:3d:c4:48:cd:
a0:cd:4e:52:8b:7e:f1:d0:37:7d:f9:80:ed:1c:49:
3c:43:79:23:45:f1:25:96:09:54:fa:18:0c:2b:b4:
73:d4:f2:a4:5d:17:75:96:be:02:3f:43:d0:c3:82:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:E3:BC:41:B2:BA:BB:D3:C9:D3:2D:6F:E1:43:65:99:32:79:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84d6b33e-44aa-372b-b8a7-83fd179deced.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
74.14.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:a2:3d:34:e8:8c:f7:ca:a8:f8:01:e3:b9:fc:9b:8f:50:85:
55:ad:d8:45:cb:8a:ed:95:da:12:1a:a4:fb:a8:01:19:28:f0:
cd:0a:3a:e8:8e:ff:79:71:d3:dd:22:d7:5b:1a:ac:72:ab:69:
a7:40:73:5a:0c:d1:11:10:6d:a4:f2:23:e1:64:27:4f:3d:41:
c3:c6:b7:96:71:fb:e3:21:5f:79:7c:26:c1:2c:e3:9c:b9:ce:
a4:85:c7:7b:79:73:14:da:6e:65:5b:6f:2e:bc:9b:fd:fb:73:
b4:08:a1:92:35:b3:50:78:07:d2:04:1e:5d:f6:38:51:48:c1:
71:a4:59:11:45:4d:4d:b8:28:ca:80:85:3b:a5:da:c8:08:23:
6a:cf:e9:08:fd:a6:16:12:b7:76:72:58:fc:f1:51:27:f3:57:
47:10:c2:9d:e3:a8:a7:af:57:36:d3:11:e9:d1:14:6c:13:b3:
35:d9:f4:88:2e:71:e1:79:88:66:fa:aa:6e:3d:e6:9b:56:8d:
d6:06:a8:7b:49:d5:17:63:7d:ca:44:a9:41:04:70:45:fd:60:
e3:0b:58:10:ec:22:e3:21:f8:07:da:8b:1e:ad:44:96:8b:a8:
67:7c:15:88:2f:53:62:6e:09:e0:d5:68:56:85:68:b8:74:78:
7a:59:9a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:49 2025 by rpki-client