Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/89b4b1e1-5316-33cb-9f28-b944006adbb7.roa
File: 89b4b1e1-5316-33cb-9f28-b944006adbb7.roa (raw, json)
Hash identifier: 1G63Zrg5pOOCzg19ffUJm9yAFMskgnqA60FpE5AuyO4=
Subject key identifier: 3F:83:19:0A:49:C7:BD:78:A8:2B:C9:CA:CD:3C:FC:BC:BD:93:9D:BB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28F3265529FAC654676400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/89b4b1e1-5316-33cb-9f28-b944006adbb7.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 76.68.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:f3:26:55:29:fa:c6:54:67:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=a15f78ed-13e7-4334-8460-9021e6cdc1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:9f:f8:95:d0:fb:18:7d:ba:98:f8:51:e0:
92:ef:2c:ee:4c:6c:d7:d8:e0:4c:cb:54:fc:0f:b1:
49:1b:37:32:67:c1:78:f5:19:91:68:9d:d2:7b:5b:
6a:45:85:a4:bf:80:42:3d:cd:4e:15:7f:2b:d1:bf:
2e:3d:27:48:27:ca:6a:90:63:a6:b6:b8:8a:3e:63:
25:04:32:af:95:58:1e:f1:9a:2a:51:34:0a:47:18:
3b:a8:04:3f:5c:62:a3:df:99:ad:4f:8f:fb:68:fd:
2e:32:81:ba:b7:74:2c:30:10:55:26:45:ca:25:42:
34:d6:e6:4a:13:2e:d5:03:9c:47:7d:35:86:57:b2:
46:5c:5c:fb:d4:63:e2:2c:b4:a6:91:6e:2c:6f:c1:
b3:d3:d6:6b:f9:33:b6:2d:86:15:4c:a5:d4:87:1e:
7c:6e:95:5b:b5:5f:f9:1b:61:93:6f:9c:91:22:82:
9a:d0:ca:fc:c4:5b:23:7c:5a:c1:80:18:8d:e4:01:
89:2d:1c:89:d5:39:91:88:5f:9e:1c:d2:4f:e1:86:
a8:dd:ce:e8:0c:13:0a:da:b6:33:37:f4:bb:2a:c0:
dc:5f:3d:77:b0:9a:57:2f:b8:07:18:60:f9:6f:86:
d1:e2:e3:c2:18:74:2f:43:96:f5:5d:df:00:aa:ba:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:83:19:0A:49:C7:BD:78:A8:2B:C9:CA:CD:3C:FC:BC:BD:93:9D:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/89b4b1e1-5316-33cb-9f28-b944006adbb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:e1:8e:46:97:cd:c1:94:29:b4:7f:30:df:22:d1:3e:fc:46:
4b:ab:cf:27:b2:8c:49:ac:32:80:8c:ce:75:e9:a7:49:81:b1:
7d:8f:65:d8:71:c2:0a:1f:6a:0b:06:f4:d9:10:98:af:24:52:
5e:cf:63:91:d2:4d:a4:ac:c6:2f:2c:bc:26:31:5c:f4:5f:13:
a5:cb:55:ab:32:c3:67:d5:5a:0e:b6:2d:a7:2d:23:2d:a2:24:
3d:1d:18:b3:eb:65:99:84:5b:31:05:0a:bd:44:27:bc:b7:3a:
3b:f3:2c:e4:38:28:9a:df:f2:91:87:e2:c5:07:46:84:1c:3e:
24:fb:9a:9e:c7:c8:75:fa:e9:ea:ee:3e:50:9f:a6:6d:23:ff:
5a:c8:cc:aa:d1:e3:84:ce:ef:07:91:8c:bb:2c:0c:7b:06:90:
2e:af:7b:47:8c:39:e9:0d:ae:91:cd:44:f5:f1:22:38:28:33:
f0:34:e4:dd:24:db:49:b6:0d:f5:b4:63:64:f3:19:79:4b:8c:
eb:28:06:f1:9c:ce:4d:ad:5a:d6:5a:12:28:34:fe:b3:e9:86:
34:13:53:ec:12:1a:80:63:3a:0c:66:3c:4a:89:ea:c4:f6:4f:
2c:01:60:75:25:b9:db:7a:9b:f4:62:8c:28:34:b9:a1:62:84:
a6:58:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:42 2025 by rpki-client