Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b81e91f8-2644-3774-bc92-26629950866c.roa
File: b81e91f8-2644-3774-bc92-26629950866c.roa (raw, json)
Hash identifier: UDy6ej90jjn2RhagX54deSrKOo7GA0KAhqGJ0VPAfWc=
Subject key identifier: FA:77:53:E1:CF:25:1E:5D:C8:00:5D:00:56:91:21:AA:D1:66:3A:A0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D294C7D07A45EC7DD547780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b81e91f8-2644-3774-bc92-26629950866c.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 174.95.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:4c:7d:07:a4:5e:c7:dd:54:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=e80f7251-acad-4116-82b1-6f4b9d4229b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:1a:4f:1e:ab:95:58:c1:1c:20:ec:73:94:
bf:d8:b8:eb:68:e5:97:a0:6b:9f:0b:d3:83:a5:29:
be:14:f9:c1:53:1b:15:e8:fd:1c:0d:0f:e7:57:13:
69:61:0d:ee:c9:fd:b5:9d:b1:17:15:a3:23:00:55:
a0:bd:4c:dd:bc:c6:d6:53:e6:ec:87:2a:c3:ee:ca:
01:5b:c7:17:e6:3f:2d:4e:74:c0:80:0b:b8:03:ec:
2d:33:97:7a:69:00:a5:de:43:e6:76:d7:b2:03:11:
49:77:d6:fa:40:0e:97:66:f7:c1:8f:02:47:c1:bc:
61:72:48:ed:94:00:f1:5d:9d:b3:fb:80:d1:be:d6:
cf:6c:8d:de:56:93:0b:94:50:7a:3b:31:3d:b1:27:
6e:47:09:af:0a:62:ea:da:de:17:42:67:27:1c:6f:
ef:d5:43:73:b8:af:8f:30:01:97:50:a1:9a:12:c5:
6b:93:16:31:80:6a:04:b9:3b:00:2c:ab:c4:7a:d4:
89:2d:88:7e:23:c9:ff:41:94:29:91:28:25:06:1d:
fc:30:17:d6:41:5f:f9:50:88:d9:dd:6a:26:67:0f:
2d:47:8f:79:ea:e3:be:a5:07:5e:0d:61:3f:93:bf:
97:7b:6a:39:e1:0f:2b:aa:d2:1a:e1:19:c1:01:b3:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:77:53:E1:CF:25:1E:5D:C8:00:5D:00:56:91:21:AA:D1:66:3A:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b81e91f8-2644-3774-bc92-26629950866c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:84:97:ee:44:4c:84:84:7b:81:32:e8:e4:04:f9:94:d7:36:
5b:c6:9f:0a:50:60:b5:18:c8:76:df:53:9b:93:93:b8:bc:91:
c2:e8:4d:7e:77:ad:73:16:3e:40:81:92:17:3c:a8:b3:28:6e:
be:0d:f7:70:c8:03:99:09:8d:0d:cd:04:06:a7:d2:27:f4:35:
52:33:07:ee:a3:0e:89:59:7f:aa:fc:4a:d6:3f:eb:8e:2a:de:
e2:d9:43:37:b1:4c:5c:81:fe:44:71:81:d1:98:cf:0b:36:19:
c8:83:a5:18:40:d9:f2:ff:77:35:bc:40:11:8b:d8:63:b2:21:
b5:43:8e:88:f5:36:9b:aa:a5:b7:92:4f:d1:df:5a:78:12:a1:
35:1d:28:48:0e:5c:69:c3:8b:85:22:80:46:0a:ed:b1:b3:bf:
5f:88:74:09:fc:f4:22:30:29:b3:cf:a6:f9:4f:96:a9:b8:63:
8a:d8:da:4c:96:a3:4a:31:97:13:15:d6:47:39:48:9f:f7:4e:
b9:5e:d1:25:1a:67:7b:f5:cb:25:cd:9f:8a:07:e0:80:23:11:
9d:ae:1c:55:d9:16:e9:f6:bb:a9:e6:34:be:9d:72:e0:17:4f:
f1:24:32:d8:63:72:df:43:ef:d1:60:78:9c:c7:3b:cc:96:ce:
a7:1c:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:27:12 2025 by rpki-client