Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be5523f8-8986-33aa-a044-d5fc702b3288.roa
File: be5523f8-8986-33aa-a044-d5fc702b3288.roa (raw, json)
Hash identifier: fqi5luGRpEugF0mTc2S9GvG7ruYtrswlRiuqdZUVDfk=
Subject key identifier: 0D:82:DD:11:D1:B8:86:62:4F:F6:DE:F8:AE:0D:2C:57:FE:C6:42:02
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285842AA11F6154C398D9572EC2800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be5523f8-8986-33aa-a044-d5fc702b3288.roa
Signing time: Mon 24 Jul 2023 12:00:00 +0000
ROA not before: Mon 24 Jul 2023 12:00:00 +0000
ROA not after: Tue 24 Oct 2023 04:00:00 +0000
asID: 855
IP address blocks: 156.57.0.0/16 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:11:f6:15:4c:39:8d:95:72:ec:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jul 24 12:00:00 2023 GMT
Not After : Oct 24 04:00:00 2023 GMT
Subject: CN=add94b49-8db9-4b15-a80c-ed09d880c177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7a:08:d7:59:cb:4f:7f:2e:00:90:5a:7d:85:
85:aa:01:b3:1f:26:c4:63:48:e5:24:d5:a7:34:24:
39:5a:9d:33:13:7b:f3:e8:13:d9:6d:d7:79:06:ca:
b8:62:16:bd:cb:94:0c:50:ea:11:9a:58:d1:6a:29:
98:63:9c:4f:6e:3d:22:7f:2f:c1:e0:4a:29:3d:8e:
99:2e:a6:ea:a7:22:e7:28:f6:4d:6a:50:22:24:df:
59:22:60:4f:db:3e:82:70:97:95:22:6d:d2:6e:98:
f4:a0:61:02:4f:09:0f:cc:06:cd:36:a9:bf:bf:92:
0a:09:b8:d9:bf:f1:ae:23:7d:55:26:f0:2d:da:ab:
cf:f0:bf:e3:1a:1f:d9:8c:62:c5:eb:4a:03:ab:8c:
2b:3e:db:8b:b2:24:a4:4f:3b:bf:72:3a:d8:6a:06:
ea:b6:5e:3a:f2:2f:3d:79:c5:dd:4b:9f:73:97:20:
a6:69:67:c8:d8:d3:39:45:66:72:85:a5:ab:19:17:
54:e8:95:eb:01:d4:c5:dd:a9:1d:35:75:36:9a:81:
16:5b:b3:d6:45:e7:03:ad:4e:d7:dd:24:38:e5:29:
7d:d3:ca:d4:8d:7f:2a:59:1a:d9:9a:17:37:ab:26:
2c:04:d9:ff:3a:88:8b:23:71:10:a4:02:e4:9f:d7:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:82:DD:11:D1:B8:86:62:4F:F6:DE:F8:AE:0D:2C:57:FE:C6:42:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be5523f8-8986-33aa-a044-d5fc702b3288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
156.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:5f:1f:c6:65:2f:bf:02:d5:9a:50:b9:45:49:cc:3b:a3:96:
87:e1:7b:3a:f8:a8:99:89:5e:4d:7f:ba:79:59:83:b4:c2:90:
3d:5b:79:2c:eb:27:cc:34:65:6d:09:af:0a:0a:86:6a:07:24:
99:dc:b0:0e:3d:ba:8c:54:d1:2a:6e:da:c7:e5:a4:db:85:12:
05:38:55:26:54:1f:2c:a7:ce:9e:30:2b:a5:a0:49:4c:14:db:
dd:56:5f:67:ef:43:09:39:e3:d3:fd:e7:4d:f3:31:3d:2d:58:
e7:03:16:5b:87:19:78:e7:bd:f6:dc:8c:23:f8:d5:e0:e8:68:
eb:30:d1:72:23:41:be:13:f5:14:dd:ee:be:44:cb:d1:0f:be:
77:a8:da:7f:58:93:d1:44:49:d5:6e:67:8e:53:ad:a8:83:6f:
70:f1:b7:09:ec:f9:c1:84:5a:5b:17:c6:3e:9f:63:41:d7:a9:
dc:48:94:36:90:3e:a4:da:2f:2f:01:c9:74:c6:31:37:fb:76:
e8:bc:12:69:6d:8c:69:ba:c7:18:52:24:e9:e7:91:6a:b5:a1:
c0:b7:1e:c0:61:45:4e:6d:eb:87:7f:e2:04:6c:06:3d:ea:97:
c1:92:1a:dd:97:77:cc:48:ed:e7:08:89:c1:c6:13:96:c5:09:
70:09:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:23 2025 by rpki-client