Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b97dcb7-5bba-3f32-83a3-60c13b190e6f.roa
File: 9b97dcb7-5bba-3f32-83a3-60c13b190e6f.roa (raw, json)
Hash identifier: cV84+ApHjyaMOrFxr63rDKR4tq07ZqiVszaQ7lfhiE4=
Subject key identifier: B4:CA:62:23:3D:46:EF:40:49:86:7F:2C:C9:F1:BD:05:E1:AB:40:47
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B605E6B3E4DBE7EDB45200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b97dcb7-5bba-3f32-83a3-60c13b190e6f.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 577
IP address blocks: 216.209.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b6:05:e6:b3:e4:db:e7:ed:b4:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=e4ec45b5-5401-426e-89da-c224701afc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:e6:0f:c5:5f:bd:40:44:db:50:9c:1e:e6:
56:79:82:ff:19:58:5b:3e:67:fc:12:5e:96:63:96:
c9:6e:24:d8:8e:e4:20:42:d0:08:64:11:ef:d9:7f:
8b:af:4c:53:88:fb:68:df:b2:40:9e:c7:fc:31:fd:
d4:e3:5a:ae:06:f2:ac:59:e6:3d:88:96:fb:8d:9d:
a8:af:94:db:0c:ac:b4:7d:d5:ae:87:a7:71:d5:fe:
1e:92:c1:fa:0f:9f:6a:47:e2:6d:de:a3:69:13:3d:
cc:75:b6:a3:2d:14:aa:00:d5:4a:cc:14:a0:22:20:
a4:0f:c0:d0:b2:77:a1:29:d1:85:cd:39:ef:ee:dc:
04:27:3a:02:b1:2d:93:09:af:28:ca:da:89:74:6d:
48:90:83:67:81:0e:66:ba:9f:b6:25:f5:6f:74:8f:
23:fb:11:43:3c:8d:b2:2e:89:47:36:9f:aa:24:a1:
09:37:86:46:cd:b5:75:42:c8:ad:c5:4d:4e:19:4b:
2f:63:da:2c:e2:55:85:3d:bf:64:e4:09:b8:74:3c:
5b:76:84:b4:93:63:6e:d6:ec:58:ce:b0:a2:8a:67:
47:ff:57:ce:75:bd:39:17:c2:3b:c3:42:e4:b7:c2:
3d:e0:5e:46:2a:27:7c:a2:6b:6f:0d:ee:73:cb:d2:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:62:23:3D:46:EF:40:49:86:7F:2C:C9:F1:BD:05:E1:AB:40:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b97dcb7-5bba-3f32-83a3-60c13b190e6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:95:1b:61:85:7d:bc:26:47:13:86:9a:9e:ff:74:c3:7a:c2:
4a:5d:d8:11:5c:16:67:de:be:4b:79:4a:b0:dc:96:94:d1:d9:
ff:44:cc:b7:79:c7:bd:69:b3:bc:c6:6b:82:21:02:ff:22:36:
ba:9d:b1:e2:c7:75:b9:fa:0c:cf:09:44:a2:57:f2:b8:66:4e:
d6:2e:e9:fa:46:11:28:e5:55:9a:58:ff:1d:b7:a7:e0:90:ec:
8d:8b:f2:7f:25:5e:a8:6a:01:2d:5e:22:7e:f6:6b:4d:c7:13:
77:dc:2b:40:ad:8c:33:c6:d2:c5:3c:68:4f:6a:29:90:d3:a3:
2f:09:18:43:bb:3b:d9:3f:c0:ef:c3:6c:e6:96:cf:d1:c0:a4:
55:9b:12:d3:3c:aa:e9:d9:74:c7:24:db:eb:8b:8e:43:cc:2c:
4a:e3:1e:7f:d4:4f:ae:63:87:8e:6b:fb:de:30:90:c4:79:ce:
d3:af:cc:2b:28:c5:da:5a:19:39:f3:b9:20:72:89:55:6c:c4:
66:b6:99:b3:31:f6:58:fe:72:15:32:79:9a:94:e8:b0:0e:68:
7e:aa:38:c2:73:8e:d7:e6:be:eb:c7:91:a0:92:d1:e0:da:dc:
25:fb:d2:da:dc:da:20:f6:63:82:2e:48:7c:6d:18:76:d6:51:
37:27:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:04 2025 by rpki-client