Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b475f5bd-0677-383c-b203-4044eb74563c.roa
File: b475f5bd-0677-383c-b203-4044eb74563c.roa (raw, json)
Hash identifier: uSst5VwHuReeGXjSMFvrwOabrpiqFSnluwVvhIHkjwk=
Subject key identifier: 55:32:E0:A3:76:57:5A:F8:7F:99:D7:3B:A3:77:59:56:8C:BB:E8:B4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF752F2AA6E4915772466200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b475f5bd-0677-383c-b203-4044eb74563c.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 577
IP address blocks: 76.70.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:2f:2a:a6:e4:91:57:72:46:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=72c0b3fd-348f-45ef-8b1a-0614e6d4b5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:e4:01:7e:2d:80:65:2e:1f:ce:fd:a6:1e:
e1:83:d6:ec:c6:d6:c8:17:2b:b7:75:df:19:20:f1:
44:40:31:34:26:c8:8c:0e:bf:62:fe:4c:34:e3:b3:
a6:9d:bf:f2:6b:01:ed:10:38:3a:7a:ba:1d:68:57:
7a:40:2e:21:fe:73:cb:26:fc:45:55:13:fd:15:9a:
49:3e:29:3a:e5:e0:53:ff:fd:1e:88:af:e2:d3:d8:
22:22:5e:db:c8:1c:28:0f:dc:3a:64:48:9b:bf:dd:
6e:8b:64:af:13:fd:e7:f8:70:b1:20:77:e9:1c:dc:
ee:ed:17:66:52:58:86:0a:b4:02:f3:48:ab:dc:cb:
3e:9d:2c:59:72:0b:95:37:31:c6:9a:b8:40:f1:96:
6f:24:c4:94:fe:d2:ea:0f:45:5b:da:2d:0e:15:1e:
cf:c4:ad:0f:3b:67:f4:c8:39:fb:b2:9c:48:4f:f5:
72:48:eb:5b:56:33:af:03:eb:93:50:dc:5e:03:5d:
5c:d8:20:e2:12:e1:93:fb:e5:60:c2:7f:08:17:4e:
b5:99:9d:bb:94:14:c9:2e:ec:c1:6f:20:76:f9:4a:
e4:a9:52:bd:14:94:5c:5f:5d:29:cf:90:3f:1d:84:
7c:72:62:ed:e9:87:fd:be:55:20:79:10:c9:cb:b2:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:32:E0:A3:76:57:5A:F8:7F:99:D7:3B:A3:77:59:56:8C:BB:E8:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b475f5bd-0677-383c-b203-4044eb74563c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:60:9a:bd:ec:8c:c7:e7:07:b4:ae:73:eb:15:17:e3:18:0f:
3e:af:09:97:fa:60:bb:fc:79:d3:05:f2:fa:71:89:13:a8:8d:
9a:31:60:88:75:b6:a7:80:0a:df:a0:a5:13:87:3d:00:b2:6e:
cc:38:f5:2a:67:0b:e3:26:55:9a:92:de:9e:d5:ec:ac:07:21:
8e:bd:52:23:54:91:ea:42:11:bf:a1:8b:b0:ce:91:48:5a:ea:
39:0f:9a:94:18:aa:dc:7f:af:68:9d:82:9a:96:3e:5c:10:7c:
2a:94:b1:04:b5:11:d2:4a:65:e8:2a:6d:7b:a3:6a:8b:bc:fc:
7d:03:03:7b:a8:9c:32:a6:af:8b:9e:77:65:d4:fe:2c:c3:55:
6b:44:b8:bf:d3:82:3e:c7:85:81:97:22:a9:1c:e7:94:a4:b7:
f0:09:ca:3e:8d:7a:ad:d7:82:59:1d:6c:88:c5:f0:f7:2c:62:
d0:74:68:d5:63:70:9a:65:6d:e3:8e:70:df:6c:46:70:2d:14:
34:cc:21:30:55:2b:57:d9:a5:53:a1:9f:d4:60:5b:11:41:bb:
0b:13:1d:bb:8f:a8:9d:c2:de:c2:ad:94:ea:4f:70:74:09:b8:
90:fb:18:d0:e8:6e:67:8f:fc:3d:63:f9:a0:4a:c8:e3:0e:3f:
e7:6d:d8:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGvdS8qpuSRV3JGYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NzJjMGIzZmQtMzQ4Zi00NWVmLThiMWEtMDYxNGU2ZDRiNWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9PkAX4tgGUuH879ph7hg9bsxtbIFyu3dd8Z
IPFEQDE0JsiMDr9i/kw047Omnb/yawHtEDg6erodaFd6QC4h/nPLJvxFVRP9FZpJ
Pik65eBT//0eiK/i09giIl7byBwoD9w6ZEibv91ui2SvE/3n+HCxIHfpHNzu7Rdm
UliGCrQC80ir3Ms+nSxZcguVNzHGmrhA8ZZvJMSU/tLqD0Vb2i0OFR7PxK0PO2f0
yDn7spxIT/VySOtbVjOvA+uTUNxeA11c2CDiEuGT++Vgwn8IF061mZ27lBTJLuzB
byB2+UrkqVK9FJRcX10pz5A/HYR8cmLt6Yf9vlUgeRDJy7KB/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUy4KN2V1r4f5nXO6N3WVaMu+i0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjQ3NWY1YmQtMDY3Ny0z
ODNjLWIyMDMtNDA0NGViNzQ1NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTEbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlgmr3sjMfnB7Suc+sVF+MYDz6vCZf6YLv8edMF8vpxiROojZoxYIh1
tqeACt+gpROHPQCybsw49SpnC+MmVZqS3p7V7KwHIY69UiNUkepCEb+hi7DOkUha
6jkPmpQYqtx/r2idgpqWPlwQfCqUsQS1EdJKZegqbXujaou8/H0DA3uonDKmr4ue
d2XU/izDVWtEuL/Tgj7HhYGXIqkc55Skt/AJyj6Neq3XglkdbIjF8PcsYtB0aNVj
cJplbeOOcN9sRnAtFDTMITBVK1fZpVOhn9RgWxFBuwsTHbuPqJ3C3sKtlOpPcHQJ
uJD7GNDobmeP/D1j+aBKyOMOP+dt2Gw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:43 2025 by rpki-client