Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a90bfbdb-7da8-37d6-aa38-5d84a40cdd08.roa
File: a90bfbdb-7da8-37d6-aa38-5d84a40cdd08.roa (raw, json)
Hash identifier: NuOqqEDcnhvBl2W7dul45y+t8h+IWtO6GQcKoTYv3jI=
Subject key identifier: 3F:89:07:82:9F:92:9E:B6:32:FD:E3:31:C4:DB:EE:35:EF:0B:89:5E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFC6D0DE2C695B59E99650
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a90bfbdb-7da8-37d6-aa38-5d84a40cdd08.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 199.243.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:c6:d0:de:2c:69:5b:59:e9:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=640b7139-6d72-4eac-9734-3327b6ea2173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:53:aa:02:2f:12:50:ff:0e:53:75:5b:42:d1:
1e:ab:31:88:fc:f9:49:9f:0f:33:a4:da:ce:f7:f9:
4f:0d:cd:e4:14:08:d9:a1:80:31:f8:b6:09:fa:ce:
17:b2:05:f8:9c:e7:aa:5c:10:82:b2:26:a3:9d:a8:
38:fe:9c:07:90:45:7b:34:33:41:bd:a9:f2:df:32:
c0:ce:87:c4:50:ef:b2:6e:31:7e:10:b0:df:b0:17:
0d:64:13:c3:cf:34:3c:6a:77:93:89:c7:73:bf:49:
86:79:63:e2:50:c2:80:96:2e:f8:0f:5d:79:7f:35:
6b:9c:f3:39:ab:18:f4:6a:59:6c:c4:4e:00:d6:f6:
7c:ba:da:c7:bb:72:df:ef:8d:a6:e7:c2:34:0a:c4:
cf:9b:4a:ed:a8:07:4f:1a:ed:4f:7d:4e:29:29:c6:
6f:5a:49:e8:93:91:5f:18:49:ca:62:0b:0d:a4:c5:
bd:91:6c:eb:e5:3d:cb:f0:8d:0a:0c:32:57:7b:69:
40:ec:28:fd:87:72:a2:aa:1a:42:95:d2:cc:10:aa:
e4:38:c1:76:41:bf:ba:18:0a:ab:e1:1b:b2:71:7e:
11:f3:f5:2f:94:6a:58:e9:94:a8:72:e4:0c:09:ce:
d6:bd:e6:55:41:2e:56:8e:02:de:45:68:fe:d8:4c:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:89:07:82:9F:92:9E:B6:32:FD:E3:31:C4:DB:EE:35:EF:0B:89:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a90bfbdb-7da8-37d6-aa38-5d84a40cdd08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b6:fc:8b:06:c1:ad:53:c1:a9:4a:fd:52:06:fe:52:ea:34:
ec:ae:2a:ad:90:4b:42:9d:f1:f2:9b:e8:d1:37:1e:2e:f8:29:
45:06:6d:8e:3c:8d:3a:48:88:49:dd:31:0a:7d:41:73:93:40:
84:9c:22:82:ef:bc:ec:39:f6:48:0e:87:53:01:f1:a0:f7:e0:
3c:04:c7:79:a1:01:53:25:61:9a:62:5a:e1:e8:9e:3b:25:0c:
20:e1:01:d1:7e:60:2e:d1:71:8e:fd:24:09:72:18:72:aa:04:
0f:36:02:92:e3:fe:42:ac:7f:0b:b3:85:1d:5e:4e:bc:52:43:
12:5b:02:46:a9:94:ed:71:44:f4:2f:cd:91:fb:9d:71:bf:36:
0b:d8:b4:b2:a0:55:c9:fc:87:0b:07:47:58:33:f2:29:70:87:
0c:af:1e:b6:e3:c7:04:bd:0e:b2:b4:2b:77:8e:b0:c7:c4:ee:
14:f3:0d:ff:e9:a3:d3:a8:de:f9:a2:48:98:58:26:bb:a3:a0:
99:48:c6:b3:c1:75:50:ce:dc:54:22:53:72:b9:0e:e9:bc:b7:
5f:57:98:f8:64:45:e4:f8:73:8b:39:e2:b5:33:29:33:69:e9:
e4:b3:82:41:89:5d:7b:3f:d0:b8:86:bf:22:8f:6a:4b:52:f4:
b4:56:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:25 2025 by rpki-client