Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd4cdfee-16aa-3b6c-916c-b5eae1491efa.roa
File: bd4cdfee-16aa-3b6c-916c-b5eae1491efa.roa (raw, json)
Hash identifier: 3bWjOHVlJJ8QM5NascVNY+lhA+gJT6a5zr8c8oJ167o=
Subject key identifier: D4:32:1C:5F:2C:C5:45:70:7D:81:F5:9F:EC:96:A2:55:1F:2A:BF:19
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B566BD32E054775B214B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd4cdfee-16aa-3b6c-916c-b5eae1491efa.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 76.71.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:66:bd:32:e0:54:77:5b:21:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=367b8956-25f6-4d04-9cf9-98415be088c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:4f:75:eb:7b:95:f8:02:a4:64:18:d3:c3:
1a:f0:ec:f2:87:ac:52:61:e1:9a:d2:a6:93:50:5d:
d5:58:4d:72:55:01:c3:8d:a7:a6:21:4a:7c:48:92:
22:a6:2d:4a:59:55:85:64:92:d5:2c:34:a6:31:27:
18:ab:35:10:1c:de:df:c4:89:f6:06:b4:55:ff:54:
2c:d3:94:de:60:b1:d4:a3:0a:8f:75:df:99:99:58:
d4:3f:a9:0c:b9:8c:97:89:d7:64:58:e9:e8:88:16:
27:1f:bf:ce:43:4e:c6:b7:7f:0c:bc:3e:84:e2:02:
44:0c:be:c1:0e:f3:6b:af:9d:c2:d3:ad:84:fc:d4:
a5:da:23:2d:1a:f0:d9:a1:8d:ac:2b:5f:50:95:d4:
ce:dd:ba:78:3d:27:64:12:19:6f:c3:10:8e:de:3f:
94:d0:ee:83:3c:dd:5d:a9:23:a9:03:51:1d:c7:bb:
10:3c:3d:43:39:03:84:38:c4:29:5f:f2:32:cd:57:
2c:14:ad:e4:8f:d9:50:ce:31:3f:8b:6c:26:af:15:
52:2f:c7:9c:88:16:50:07:71:9f:a3:ce:f6:7a:76:
9b:85:a2:fe:ba:45:e7:67:48:fe:34:4f:f8:60:9a:
e3:02:a9:0f:df:b5:7a:b8:d3:02:b2:2c:6e:7e:12:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:1C:5F:2C:C5:45:70:7D:81:F5:9F:EC:96:A2:55:1F:2A:BF:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd4cdfee-16aa-3b6c-916c-b5eae1491efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:6a:91:c9:80:31:de:b2:71:12:85:fa:09:c1:1d:c2:53:86:
27:93:88:33:de:79:a3:4d:b7:ec:a9:55:62:cc:0f:10:45:d2:
b8:13:58:d7:be:a4:2d:03:7a:86:a9:37:1a:8a:25:2f:f5:a7:
95:3d:0a:2c:ff:23:69:f9:4c:f8:11:0b:8b:b2:5f:8d:77:da:
0d:49:30:2c:39:7b:94:f1:3b:79:68:f6:a6:6c:77:90:ae:d0:
12:3a:93:df:43:c2:bb:df:52:f0:62:29:f4:e5:34:d0:1b:c6:
b9:bf:51:9d:3a:82:ab:39:e4:80:70:f3:03:6e:3e:44:53:3e:
b2:ac:79:2a:05:91:a0:1b:81:db:d7:d4:e1:40:ca:b7:bf:9c:
06:ae:1f:74:38:a8:b4:33:98:cc:37:52:b8:fc:31:1d:2a:a4:
0d:6a:e9:90:a2:1c:58:78:68:0d:f9:45:04:b2:3c:f2:b3:60:
4b:3a:41:2f:aa:3d:36:b3:2c:33:37:2f:f0:af:46:3c:a5:5b:
ae:a9:6f:63:5f:54:b5:a8:78:b5:87:de:7d:4c:f0:1e:ce:00:
ea:06:d3:d5:56:7e:ad:20:bb:bc:e0:c0:87:f9:53:83:05:4e:
da:2f:22:90:42:23:e1:d1:53:91:64:db:29:15:77:37:19:9c:
5c:0a:f0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:26 2025 by rpki-client