Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad528fc9-1828-3b48-8223-bdfbc68eb351.roa
File: ad528fc9-1828-3b48-8223-bdfbc68eb351.roa (raw, json)
Hash identifier: jG784DiKkbtBrCUcD87lodAodCoSBDd280lCmoyldis=
Subject key identifier: E0:25:B9:0C:E4:85:30:2B:64:68:DA:CC:4C:74:B8:C6:64:B1:CB:07
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B506E52315AF0C0866296A
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad528fc9-1828-3b48-8223-bdfbc68eb351.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 14112
IP address blocks: 66.38.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:06:e5:23:15:af:0c:08:66:29:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=a63998a0-b78e-455b-b2b5-68a69a1729c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:44:00:be:1e:07:dd:b0:b5:08:36:03:a5:
38:d7:22:3a:7e:0e:b7:10:88:af:de:4b:84:89:f4:
30:2e:f1:4e:5c:a8:6c:ea:37:19:60:f8:0b:f2:17:
a4:14:23:a3:e5:fe:da:30:7b:ef:05:c6:0a:39:b4:
3d:f5:50:64:3e:c8:ac:63:85:c6:d0:dd:8b:46:b8:
16:af:57:a4:c6:48:7d:f9:5a:8f:62:98:b8:88:0d:
69:17:33:2a:93:a2:71:ab:a4:f8:7f:5f:f7:e0:1e:
27:11:a4:0d:02:e2:6e:3c:af:55:65:d9:ad:00:46:
33:d4:c3:81:c4:43:db:9c:86:ee:83:4b:1a:44:6c:
98:71:c6:d1:e5:84:bf:44:da:89:7d:af:7b:13:70:
96:fd:79:15:ef:12:51:02:c9:db:0a:04:4f:24:9e:
73:90:63:55:45:65:dc:37:fa:5e:4e:47:1b:8a:8b:
fc:89:f0:4b:a9:66:af:02:da:a9:c0:5f:57:92:a2:
fd:97:71:2f:50:69:81:4a:5c:53:df:74:29:71:8e:
e5:e0:58:54:08:c7:fd:ed:d9:89:07:da:70:77:2e:
3b:ca:c0:ac:34:1a:ef:08:c6:0e:9d:c3:cf:a6:0f:
3b:0e:cd:96:a5:2d:e6:4b:27:06:2a:0d:d8:68:bc:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:B9:0C:E4:85:30:2B:64:68:DA:CC:4C:74:B8:C6:64:B1:CB:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad528fc9-1828-3b48-8223-bdfbc68eb351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
66.38.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:bd:d6:bf:64:53:e3:12:1c:9b:e5:89:1e:54:1f:71:fe:b2:
b3:55:c2:f6:bf:b1:1b:91:6b:07:63:4c:76:59:61:9d:18:94:
cb:9e:10:13:f7:b3:bf:67:78:57:d1:75:34:8b:85:67:13:20:
a3:04:8d:95:3f:0b:75:f7:f8:2a:a8:8b:e5:6a:c0:96:c8:3e:
b7:9f:ec:73:bd:c1:43:fb:8d:33:2d:d4:5d:f8:f2:6d:71:7c:
f4:af:41:64:30:5d:19:c7:1f:65:ca:31:49:59:39:bb:07:34:
ba:9b:f4:7f:79:77:f6:a3:ce:8c:64:33:68:d5:f7:30:58:88:
2e:a3:d8:8e:ac:4b:7a:37:7a:c8:c0:15:6b:7a:cc:8f:68:6e:
20:df:ba:f5:54:ad:1f:12:1b:f8:08:f8:7e:a4:bb:93:6b:fe:
19:50:a4:11:2f:db:ec:5c:8c:19:46:19:c4:31:23:62:01:47:
af:25:85:ec:f8:32:10:6b:40:f2:da:f7:37:4b:5a:de:f8:ea:
e9:6e:a1:af:6d:d0:60:c5:20:f8:9f:f8:4e:29:87:68:b0:20:
4c:bd:91:93:64:93:7c:54:b2:0c:dc:9e:99:48:cd:91:b3:40:
3c:b0:13:9a:c1:ef:34:d3:e1:ce:5b:68:61:1d:29:5a:57:a7:
b1:81:66:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:34 2025 by rpki-client