Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bdb78869-9a3e-3602-946e-a7e6c7d21f2b.roa
File: bdb78869-9a3e-3602-946e-a7e6c7d21f2b.roa (raw, json)
Hash identifier: SiQ4/W+jz693MjYfvXPD7B1p5ONQx4cgEgsF+Fkch8U=
Subject key identifier: 58:7E:37:49:25:1D:F3:72:8F:BF:37:0D:19:00:DE:EF:2D:C7:68:14
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2BC6D9269A2DDAC4BE69C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bdb78869-9a3e-3602-946e-a7e6c7d21f2b.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 15290
IP address blocks: 2607:ca00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:c6:d9:26:9a:2d:da:c4:be:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=0849e3de-8821-42cd-8daa-204dc579df4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:17:9c:e6:d2:e2:b2:73:2a:e1:c8:db:78:69:
e9:a0:70:9f:80:58:ae:aa:c6:70:59:fa:95:41:f3:
09:97:65:00:16:64:2c:5f:c4:a9:6e:1c:f3:38:9c:
ec:7b:55:40:e4:1f:d0:60:84:f9:ac:e7:77:d6:4b:
74:73:05:d5:6c:1e:34:c4:a9:ea:8c:c1:60:b1:c7:
96:e4:1a:90:c5:55:65:b0:d9:b3:56:30:52:ac:19:
b9:e1:a1:7f:a8:c0:d3:50:d8:8b:47:d4:3b:25:cb:
79:08:00:2d:d8:23:a1:41:62:f3:7e:14:4b:56:9a:
5c:3d:11:9e:a6:82:84:8c:d8:b1:39:05:88:52:eb:
3a:a8:69:b8:aa:22:84:b9:ff:f6:b7:95:9d:e2:7c:
bb:ec:34:0a:18:4c:15:8e:44:f2:73:8d:b3:fc:2c:
16:5f:15:9b:25:4e:fe:1a:ac:88:3a:7e:5d:2d:88:
e5:ae:ae:8a:3d:9d:e2:3a:bd:f5:fb:8c:40:a8:41:
bf:53:53:a0:fb:99:e6:00:e9:54:36:e2:3a:7c:f1:
cb:aa:76:0d:02:01:4b:91:74:87:60:0c:e5:91:4c:
4d:b5:9e:f2:78:a1:23:e6:74:9e:8a:73:e7:cc:11:
9d:55:d0:e3:16:4a:6c:d0:aa:d3:dc:51:dc:33:fc:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7E:37:49:25:1D:F3:72:8F:BF:37:0D:19:00:DE:EF:2D:C7:68:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bdb78869-9a3e-3602-946e-a7e6c7d21f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:ca00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:51:bf:d5:9e:b6:39:fd:7a:93:43:3b:cd:0d:37:0d:46:e2:
52:d0:48:e1:f4:56:76:01:23:78:87:60:63:b7:ce:3f:80:b5:
c9:c8:27:93:90:89:46:99:b1:64:e1:33:67:7f:9c:34:8e:d4:
d3:7e:31:42:04:92:dc:8e:95:7d:c8:fd:31:1d:c9:dd:8b:fa:
34:71:eb:bb:0e:a7:d0:f6:31:d6:6a:75:b4:68:58:9b:7d:62:
df:9e:f1:fc:fb:88:da:5b:3c:ce:6d:64:1a:af:88:46:09:6c:
ad:aa:d6:63:f1:be:c1:88:f4:c4:79:ae:e4:c5:48:28:55:04:
a6:d7:24:4c:cd:cd:9f:a8:e0:f8:d6:52:09:3e:92:75:75:a9:
52:c4:8b:5c:32:48:d5:a7:ed:9c:1c:d4:50:8a:23:e8:c2:02:
e5:1a:f9:e1:22:a0:83:de:46:be:17:66:cd:4d:f6:c8:71:48:
73:ef:ee:77:84:d6:96:5b:fd:1d:e5:28:4a:e4:c9:9f:19:f3:
6c:fe:21:2d:59:a1:2d:1b:3c:98:a4:6b:6d:d6:a6:7c:50:f5:
6b:fb:3a:42:78:d8:c7:95:77:23:90:46:3d:12:8f:a1:fe:38:
33:08:28:ec:ff:40:81:3f:f2:dc:be:8a:23:f5:8f:85:0c:ca:
03:f9:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:33 2025 by rpki-client