Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85419167-a2f7-3b5a-a9af-0441e6f56a44.roa
File: 85419167-a2f7-3b5a-a9af-0441e6f56a44.roa (raw, json)
Hash identifier: 1JtFOQX2Nk8N4PAcbsrp+4QuGKmu6CYry1inmzCZ4uc=
Subject key identifier: 4D:1E:B6:AF:01:17:EB:8F:8A:B7:C6:4C:7E:5A:F9:69:8F:27:36:2B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493159390D352CA1834E73780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85419167-a2f7-3b5a-a9af-0441e6f56a44.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 207.35.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:93:90:d3:52:ca:18:34:e7:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=544febff-7b37-4af3-a916-f8eccd99d98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:c1:f7:81:ba:bc:06:f2:0c:95:25:53:2f:
17:27:0f:cb:41:86:6f:38:ad:49:54:73:38:a7:d5:
6c:d7:51:fe:0b:a1:ed:f7:10:a6:62:b8:da:a8:25:
02:1a:e0:82:0e:a2:dc:c6:54:d6:f4:83:c1:70:f4:
57:68:94:33:3d:bb:0e:e3:3d:8d:a8:51:d2:5b:3f:
44:13:60:d4:4b:a6:79:f8:c6:82:1a:7b:95:be:77:
c3:2c:c6:d9:f2:b5:3c:bc:f4:b3:38:32:c1:b3:01:
11:5d:75:f8:70:86:5b:c4:10:be:3e:36:ab:95:98:
c5:e2:9d:b0:0a:7b:18:e8:26:09:44:14:8c:0c:fa:
0d:0d:f0:16:9f:29:4f:41:31:4e:88:88:2a:c6:56:
e5:e2:80:7c:78:3b:25:ab:74:a4:15:73:6c:fc:09:
20:c8:cc:f2:09:68:69:4a:81:bf:27:2d:50:0a:f2:
31:8e:12:12:c4:6c:9c:43:85:f7:10:54:01:46:01:
50:7a:3d:c9:64:86:d9:10:b3:a9:47:0f:e4:72:cb:
80:05:f6:e6:ef:20:0f:00:38:99:4c:84:f0:e5:84:
4e:ec:78:54:6c:38:2b:49:29:73:9f:0a:99:20:a2:
d9:d2:df:93:68:8a:4b:10:ff:f1:6e:f2:aa:34:02:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1E:B6:AF:01:17:EB:8F:8A:B7:C6:4C:7E:5A:F9:69:8F:27:36:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85419167-a2f7-3b5a-a9af-0441e6f56a44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:8b:ad:1d:c1:b1:bb:9a:e9:3b:6c:1a:30:df:32:c2:de:46:
5f:07:07:df:4c:2a:a6:e3:9a:a7:df:3f:e0:dd:bf:b6:7a:fb:
4a:46:26:d6:d0:f1:12:1d:78:bc:89:fa:23:39:21:da:e4:fe:
0f:1a:2c:1f:68:3e:51:04:24:45:de:03:37:69:e8:5f:22:ce:
4d:4a:7c:a3:75:2a:79:c7:df:09:f5:60:ef:bc:80:00:83:98:
20:92:4f:16:d4:0d:b9:ae:6c:6b:ae:6b:bd:a9:45:85:b7:8b:
05:a3:21:81:2e:2c:53:73:8f:e6:f3:c3:86:e9:c8:a4:4b:1f:
7c:be:fd:f0:49:3b:95:42:55:3b:b9:73:7c:1b:9c:5b:09:ab:
6d:41:59:b0:b8:7a:ba:4e:16:82:56:4f:d1:ca:ff:04:e2:67:
de:12:38:91:a0:1f:3c:53:94:7f:92:91:4d:ba:d5:40:a5:54:
04:12:46:b4:bc:a6:b6:38:3a:a8:87:9b:70:0a:30:63:e6:61:
6d:69:28:74:9b:c8:77:7f:3f:16:00:d4:1f:02:3c:d9:71:4b:
95:26:af:66:f8:a4:c8:39:4b:21:fb:bf:67:b5:6d:89:93:4f:
87:c6:cd:34:e8:e6:3f:26:7e:32:9a:5e:b9:eb:8c:53:94:dc:
ed:f2:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:49:34 2025 by rpki-client