Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf47fc41-42fd-35db-be92-4ab0dd3c53bd.roa
File: bf47fc41-42fd-35db-be92-4ab0dd3c53bd.roa (raw, json)
Hash identifier: TZBj5hpCcMOU3N/xXc094EZmm/371UOA0E1ew4TnEyA=
Subject key identifier: 31:04:B2:80:52:08:A4:29:C1:0D:50:27:72:5B:CB:B2:FC:22:8A:74
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2947699ADDFA653F7DAB40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf47fc41-42fd-35db-be92-4ab0dd3c53bd.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 174.90.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:47:69:9a:dd:fa:65:3f:7d:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=0cd08176-4e2e-440c-881d-0ac06fa34f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:d0:2a:86:c3:1e:ab:61:78:f8:ca:4d:44:
79:d3:2f:9b:06:39:fe:d2:cd:62:77:e0:e3:2b:66:
7d:79:5d:88:cb:56:79:3b:2e:45:1b:01:f1:85:52:
a7:50:69:05:3c:b9:a0:91:9a:7b:88:4b:dd:9e:1e:
ad:d0:c5:d8:af:0e:33:7f:e3:a1:c1:21:23:53:1a:
59:b0:b8:43:5f:1f:da:96:07:7a:25:17:28:b4:1d:
a7:6a:30:70:e6:4e:32:ce:40:bd:9a:07:bf:07:95:
71:12:a2:98:36:e8:a9:0e:83:33:ba:35:33:2e:95:
70:e7:0d:06:f2:7c:17:88:a2:ee:76:9f:75:50:b8:
dc:ec:f0:57:1a:87:ad:93:7f:18:7f:f2:11:25:17:
0b:64:51:66:1d:56:67:8e:7b:26:7c:26:db:22:27:
28:a6:57:ff:84:18:b1:39:96:e9:7d:0e:cd:67:53:
8f:aa:27:d5:89:4a:f8:6e:63:14:87:66:f7:7b:61:
11:4a:f0:74:51:7c:54:ed:36:78:bc:ad:ff:ac:a5:
e9:fd:fb:31:50:0e:4f:95:df:d9:ec:45:97:02:43:
86:8c:64:c0:a0:51:d2:3d:95:ff:bf:06:78:e8:4b:
79:28:ef:ae:c9:c3:a9:b5:6c:78:2d:90:1d:8e:3b:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:04:B2:80:52:08:A4:29:C1:0D:50:27:72:5B:CB:B2:FC:22:8A:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf47fc41-42fd-35db-be92-4ab0dd3c53bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.90.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:3a:c2:f4:77:07:4b:1d:db:97:10:35:66:b8:09:92:db:ae:
8a:66:b7:aa:14:48:13:d1:ab:bd:00:56:e9:70:ff:f8:39:3a:
2a:11:b5:d4:59:d9:3c:b8:f4:38:ac:8e:9e:b4:d4:12:f2:94:
28:49:a0:80:01:db:2e:38:51:c0:87:5f:c0:17:8e:82:38:28:
6b:ad:e8:d9:be:be:7b:b1:1a:36:ae:ed:48:9b:42:35:a6:19:
c3:0e:f1:85:a0:b1:cc:0c:2e:88:dd:df:e3:db:f4:16:49:f6:
76:b3:58:05:29:5a:8c:6f:9f:96:2f:e8:1c:13:07:7d:a8:b0:
15:b2:2b:d8:cd:de:b7:30:2b:8c:0e:97:77:3f:ff:2f:6b:58:
a0:ce:a1:b8:5c:26:6f:4e:6e:bc:3b:72:5e:d0:79:da:6f:71:
ef:49:ca:b5:d3:7d:56:df:f7:42:35:dd:e4:bf:a2:10:14:f7:
13:2b:7d:47:68:d5:fc:61:38:02:83:e5:6f:41:d2:f1:fa:02:
53:1c:70:ca:75:f2:43:dc:0d:9d:67:9c:2a:39:78:77:64:c7:
b7:16:be:89:e6:19:9d:a0:51:42:51:eb:46:ee:72:75:36:04:
53:12:57:ab:43:0c:ff:a1:4e:c7:54:ae:5c:b9:3d:fa:9f:76:
18:5d:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:15 2025 by rpki-client