Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8aa7a493-fba0-3c5c-b925-2c99523f9617.roa
File: 8aa7a493-fba0-3c5c-b925-2c99523f9617.roa (raw, json)
Hash identifier: HCHQ3kLi8lKSvlKWomMQfue7N3oIInD4VTC6sGM+Iao=
Subject key identifier: 8A:03:61:1B:48:1C:D9:17:76:16:03:CB:C0:F1:CA:D4:1D:BE:14:B8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5BA0FCD4CCB1F3CA22100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8aa7a493-fba0-3c5c-b925-2c99523f9617.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 184.149.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:ba:0f:cd:4c:cb:1f:3c:a2:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=73d55fc1-0a07-4984-9da1-40a2a4ee24ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:94:3c:74:32:9d:ac:43:ef:a9:84:7c:9e:
f6:3d:d1:6e:3a:71:8c:3b:f3:10:e7:56:37:91:07:
17:22:55:57:59:6f:b8:17:1a:a2:94:6e:c4:52:3e:
e4:70:b3:b2:0e:90:f3:e9:ca:22:56:ff:c3:b1:80:
9f:32:a1:c3:da:7b:f4:a9:a2:be:bd:24:d8:90:d7:
84:cf:0f:f0:6b:7f:62:fb:af:5b:9a:75:5c:c4:fe:
57:f3:cd:3d:88:a0:64:d5:e0:fc:f0:e3:f4:72:b3:
e8:ac:12:a2:2e:ec:99:e2:4a:ee:87:99:4a:65:d4:
1c:2a:79:82:4e:ce:20:5f:6c:5a:b2:79:30:d5:36:
87:79:e3:f6:28:64:12:23:4d:bb:3e:0d:43:63:0a:
16:84:9f:38:f5:a8:8f:5c:07:f8:64:25:a1:75:da:
84:84:28:6f:9d:9a:c2:45:ae:ef:7b:ef:0a:98:5e:
a6:da:54:ab:aa:f7:6c:bf:7f:f5:5f:1b:04:20:4d:
38:f8:5e:ce:2e:90:49:60:ec:e4:fc:ff:ea:4b:be:
72:d6:59:82:d3:f5:2b:ed:06:40:ad:f0:ff:de:e1:
14:c0:14:a9:7a:98:20:99:9a:ea:3f:8e:91:ce:e2:
fa:b0:ec:30:ca:2a:85:7e:43:c9:5b:2e:67:2a:1c:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:03:61:1B:48:1C:D9:17:76:16:03:CB:C0:F1:CA:D4:1D:BE:14:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8aa7a493-fba0-3c5c-b925-2c99523f9617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:03:93:7d:31:98:37:fd:08:d8:9f:ef:7a:ad:a2:90:06:ae:
d9:7b:c4:e8:71:38:ad:f6:eb:c8:27:a8:5b:be:8b:60:97:aa:
21:b6:c2:5c:db:2e:fa:d6:1b:53:bc:ee:4a:ec:b6:dc:37:e9:
d4:68:f5:72:0e:f2:a1:49:eb:e6:49:f5:71:a3:bd:2c:da:00:
57:6d:f5:13:a6:37:da:be:80:a7:4d:32:18:2e:86:39:51:ea:
15:52:0f:da:0d:17:7c:16:aa:83:e4:d4:3a:31:32:2b:c9:20:
a8:e6:5a:00:56:3c:80:e6:b2:b2:df:97:ab:04:8a:38:bb:73:
9d:fa:9a:96:84:4b:da:0c:de:b0:d8:eb:4c:c3:c0:fe:c5:b7:
a0:44:e5:9f:f5:b6:f8:a5:03:d6:32:c0:5d:6f:f9:35:34:3f:
52:02:45:4f:f5:ee:78:94:4e:d9:62:f7:5a:fc:e4:c0:f5:c7:
8b:e5:18:41:31:a1:62:3e:47:17:a3:f1:a7:32:f8:b9:9e:fa:
ef:67:07:b6:80:b6:27:c7:16:e6:fd:e0:f3:b6:f4:7e:56:c8:
a9:59:b9:b6:5d:84:1d:14:5c:92:1c:d1:5b:4b:b6:62:b1:08:
b3:bd:e6:3d:60:9e:21:71:dc:3d:b6:5e:f6:61:d3:85:c4:99:
c8:1d:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:06 2025 by rpki-client