Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b9c08d8c-3e91-34f1-85a6-7dbde5b8320d.roa
File: b9c08d8c-3e91-34f1-85a6-7dbde5b8320d.roa (raw, json)
Hash identifier: KBAzZ7zVfLM7B8IeM3jsSGDG6IQ+2DlyB6nE2/MqVJ4=
Subject key identifier: 88:0F:E7:2C:01:0A:14:90:6A:F1:1F:11:13:1B:0C:3A:17:D1:21:F2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29410D1F24B9EA17687040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b9c08d8c-3e91-34f1-85a6-7dbde5b8320d.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 174.88.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:41:0d:1f:24:b9:ea:17:68:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=0942dc35-0672-4d62-9616-b24346be2c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:b5:4b:26:76:f3:9f:84:d1:92:e3:a2:3d:
ca:9a:6a:df:8e:88:a3:87:c3:51:f6:13:42:f9:d5:
67:7c:af:ae:30:59:30:68:a4:e1:84:5b:ac:32:06:
5e:fc:60:46:08:ab:2d:fc:46:c4:91:f0:95:d8:83:
e5:46:bc:23:f0:d7:9b:9b:6c:ab:91:7b:c0:0a:0c:
dc:24:de:d8:cd:17:c0:0d:08:a2:fb:a0:fe:d2:f7:
dc:d5:f2:31:c1:c7:02:69:60:07:5b:75:34:03:0c:
23:cb:c4:c7:3f:37:fa:ce:1d:e9:c8:39:1f:06:82:
e8:6b:57:e0:fb:8f:9b:72:9e:36:2f:51:39:ce:1b:
b7:20:a4:64:36:0b:8d:2c:ed:1e:7a:7f:b3:89:ed:
4e:86:93:a2:cb:d8:4f:b7:6f:65:7f:e4:33:c3:bd:
fa:f9:49:84:68:ed:9d:4b:54:43:72:f1:69:fc:5e:
44:4e:61:d8:2b:9b:f8:b9:14:ff:e1:5d:11:e4:30:
e8:8d:95:f4:d7:52:f3:4c:a8:61:21:fc:07:7a:8a:
77:22:78:b0:85:8b:93:5e:5a:22:29:97:22:7f:8d:
45:48:ac:a6:ee:81:ab:92:cc:a8:83:59:74:ee:1a:
a5:23:d0:17:32:3c:c2:47:6e:45:44:0e:2e:b4:13:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0F:E7:2C:01:0A:14:90:6A:F1:1F:11:13:1B:0C:3A:17:D1:21:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b9c08d8c-3e91-34f1-85a6-7dbde5b8320d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:4e:35:92:96:73:8b:5a:6c:0c:35:17:2b:18:5e:e6:c5:56:
65:a0:ab:40:1d:c7:6d:47:f7:23:6e:ea:70:3d:b3:59:74:33:
6d:25:ce:9f:47:17:28:84:6c:cf:26:8f:95:ad:b4:96:26:6e:
78:cb:c6:17:b7:28:e9:94:cf:58:6e:34:75:50:96:6b:bb:24:
77:93:09:1c:8f:38:73:5e:a2:00:85:a6:d9:16:bc:6c:f3:25:
04:18:b4:22:61:2a:ae:6b:78:31:a7:b7:4e:8e:38:2e:30:2e:
44:65:58:5a:bc:ba:c1:25:9a:26:2a:95:6f:f1:0f:16:56:5d:
d7:b3:cb:46:d6:79:94:45:a5:06:7f:1b:91:ac:9d:c1:01:ec:
b2:0b:6d:49:b9:9f:c5:19:de:a8:41:36:97:6b:4d:6f:8d:35:
82:78:8c:27:35:c8:68:d4:9b:4d:7e:c7:a3:bc:8a:09:0d:18:
d9:88:ca:3d:a5:ef:83:43:ea:67:73:f5:d8:e3:90:65:d7:27:
7f:e5:0e:1d:06:2c:07:7f:82:f7:1f:ff:99:3d:d0:6f:b3:97:
c4:a6:be:70:8d:e4:fc:e1:70:f9:e0:70:10:cd:5d:c4:fb:57:
41:7e:18:ea:60:c8:24:51:8f:c2:43:cc:d0:96:86:ab:da:22:
bb:9a:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:30 2025 by rpki-client