Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dd58085-062b-377a-84cd-4d641458ad07.roa
File: 8dd58085-062b-377a-84cd-4d641458ad07.roa (raw, json)
Hash identifier: Qf7osa6aZbGZOLe3zUL33rWIzqdxMMu51U/fd7q+oVE=
Subject key identifier: 67:16:74:DE:0F:FC:AD:87:0F:95:38:3B:7A:12:29:96:1D:23:A4:90
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28E5CD6EAA5D097B9AC120
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dd58085-062b-377a-84cd-4d641458ad07.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.55.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:e5:cd:6e:aa:5d:09:7b:9a:c1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=91f576b7-0b99-44ec-9142-4c63a1630195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:1f:0c:a2:97:a3:a0:6f:aa:2f:4b:44:0d:
69:09:49:7e:7b:c8:ab:c4:95:93:9d:61:e1:6c:91:
94:29:ce:83:84:fe:64:f2:a9:38:6d:e4:ef:d5:b2:
0f:07:fe:a6:0b:df:aa:a8:93:c0:94:16:7c:1a:88:
dc:dd:0a:a5:f8:84:a7:21:ad:d4:fb:fb:5b:d0:ac:
62:9b:45:c9:85:34:86:e2:fa:98:1b:49:a0:ed:70:
4b:8f:bd:cc:ad:9d:c1:87:e6:5a:3b:b2:89:50:db:
00:95:60:b9:d6:a9:48:b6:46:a0:37:4f:1e:46:12:
f4:83:dd:c6:a1:8d:a9:b5:5c:45:e3:19:33:62:12:
11:c7:fd:01:f4:7a:cf:a6:5f:ca:41:f9:4a:e5:54:
a6:3c:5d:e0:c3:79:36:3f:da:5b:3d:13:b0:76:6d:
cf:47:22:cf:66:85:24:d6:e0:be:4f:32:c5:f3:72:
c9:32:15:2e:af:e7:67:0f:29:7c:38:57:2c:ca:14:
c7:40:17:5e:ce:df:46:a0:10:ea:7e:4d:55:64:e8:
a6:e0:f4:88:93:d8:52:d6:f7:65:6b:cb:54:0c:35:
74:4b:93:01:83:95:31:f0:24:5a:d2:0d:fe:9a:b7:
62:36:f1:a6:79:c6:1e:ac:36:58:04:51:d1:3b:f4:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:16:74:DE:0F:FC:AD:87:0F:95:38:3B:7A:12:29:96:1D:23:A4:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dd58085-062b-377a-84cd-4d641458ad07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:6e:5b:66:74:ef:f3:53:d8:36:3a:b6:17:8c:79:b7:b6:d1:
db:ab:64:c1:8b:3d:29:e7:9a:9f:69:b6:28:1b:9f:55:a9:8e:
c0:8c:77:f1:eb:5a:10:8f:0d:9b:6b:9d:dc:51:41:c6:a3:63:
4f:f1:fb:b4:95:5f:9a:a5:6e:f3:ca:34:89:af:2a:39:be:e4:
d0:ee:96:d8:93:28:9d:85:3d:09:c7:3f:8e:ca:cc:eb:47:df:
29:52:aa:38:71:a0:b9:c1:04:38:1e:76:ee:28:d8:32:06:14:
de:bd:e0:78:bf:ce:a7:82:48:10:a8:d0:43:eb:ec:68:b1:f3:
25:e5:c2:55:11:f1:43:39:51:55:16:e3:26:c9:fb:4e:7d:68:
da:36:ef:38:6b:45:20:58:50:d6:d9:cc:4c:c5:33:7f:52:20:
5e:d1:e3:e2:eb:31:16:32:e8:34:29:c3:4f:6d:03:27:87:2a:
26:f0:9d:37:3e:10:85:22:02:65:26:3b:f3:d7:07:10:7f:ae:
d3:02:63:a7:87:e3:fc:3a:19:02:96:98:c4:99:8b:6a:4a:47:
28:8c:2f:23:72:4d:c2:49:5c:d7:c5:5e:ec:e5:a9:9d:92:78:
b2:1c:b8:04:7c:e4:72:de:31:5e:4c:e5:21:3b:ad:c7:df:bc:
90:46:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:07 2025 by rpki-client