Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b2966d6-6937-36ba-a284-a71873c76148.roa
File: 9b2966d6-6937-36ba-a284-a71873c76148.roa (raw, json)
Hash identifier: WuXaf+MKnvImMlDyKsSzKkqoPtfzVQrT8g6ygvc5waU=
Subject key identifier: 6F:02:E5:80:43:5E:26:78:DF:EA:8D:81:7D:60:6E:71:AF:EF:11:E3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7D2F9884A986BEA99EF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b2966d6-6937-36ba-a284-a71873c76148.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 7122
IP address blocks: 216.55.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:d2:f9:88:4a:98:6b:ea:99:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=4d93e11e-0df7-4217-a828-03e0054f095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:11:5f:b6:05:3a:90:61:f8:74:57:f2:4e:
12:5d:6f:d9:95:17:72:92:c2:bd:29:b1:14:96:08:
28:be:17:f4:d2:a2:d2:2f:e6:65:39:32:ab:67:c3:
95:ad:29:29:bf:a0:e3:c3:93:b4:ed:82:d0:91:f6:
76:4c:b0:65:44:0e:d6:bb:dc:e0:6a:ff:2f:d1:74:
df:61:13:a5:90:29:80:44:3e:3b:e0:c2:72:ed:eb:
77:b5:46:3e:76:d1:f5:d3:27:9e:4e:be:96:6f:0d:
57:89:1f:d5:99:eb:65:75:85:48:86:e3:60:19:5d:
2d:df:5b:85:d8:31:df:8f:ea:42:d2:0b:86:22:04:
14:c0:05:80:76:7c:7d:29:76:1a:c3:56:6a:75:5f:
d5:8d:6b:06:f1:b8:cf:e3:5b:85:a8:99:cc:93:e7:
78:31:cd:ed:b5:d4:22:12:b7:18:c7:59:07:a9:13:
26:e6:f8:40:e0:e0:2b:88:b9:f3:62:cf:ad:0c:85:
61:23:c5:2c:cc:20:22:42:61:fa:20:bb:08:95:dd:
d2:b2:4f:fe:e3:3d:c2:76:9e:dc:61:f1:c1:d2:b9:
b3:24:f6:3f:e8:14:6b:e5:68:27:77:00:37:9e:b0:
17:7b:6f:d5:eb:81:61:2d:0b:0b:ee:85:8e:43:c4:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:02:E5:80:43:5E:26:78:DF:EA:8D:81:7D:60:6E:71:AF:EF:11:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b2966d6-6937-36ba-a284-a71873c76148.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.55.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:58:4a:a3:75:8c:f9:83:f1:35:f9:0f:79:44:b7:52:b7:a4:
5b:1e:93:d6:c2:05:27:f4:93:85:62:85:af:dc:58:ca:af:33:
95:b8:83:39:65:27:3b:59:91:05:36:f1:5b:e6:5a:1a:1d:b5:
13:4f:e2:d0:4c:b8:dc:0b:74:3d:a3:7b:09:59:5c:5b:7f:df:
b1:3b:12:2f:eb:77:cd:09:f3:1a:3d:4d:b4:85:31:ca:32:15:
b7:91:72:0c:f7:bd:a3:d7:98:5c:e5:a2:a8:2d:56:96:f3:c1:
f1:81:1b:51:c8:be:1b:89:43:d2:06:9a:66:58:b2:80:73:e0:
2a:57:10:41:f3:40:fd:c2:ba:3a:99:83:f0:79:e6:87:15:8d:
9a:ba:33:38:67:b8:4e:cb:69:e4:63:f4:15:78:e5:58:91:9e:
bc:97:17:fd:c5:2c:75:73:6a:a8:90:e5:d1:b6:e7:a3:bd:f8:
95:7a:24:b8:da:02:91:03:25:d9:e1:a7:ba:3f:29:85:19:9f:
c6:e8:e1:4c:91:0d:d7:cb:6b:1e:9c:f8:b4:21:85:0c:d2:53:
89:f3:96:35:39:80:0b:e6:ee:f6:f7:c0:84:9b:91:7d:ca:5b:
ee:28:27:2d:a5:1f:d5:66:5d:d9:d7:65:f2:a7:9d:97:60:02:
48:6d:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:02 2025 by rpki-client