Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf6a1a9e-0948-3fee-a9d2-44a7309b0b7c.roa
File: bf6a1a9e-0948-3fee-a9d2-44a7309b0b7c.roa (raw, json)
Hash identifier: 50DVzc64LwItqotR4SQ0HOKZSrFgHBDvcBpRerJ2bbk=
Subject key identifier: ED:2D:BD:5E:0F:0B:F7:97:2F:36:C8:04:7D:D1:22:EB:B6:6E:46:6C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285842AA1203C1AC93794A2FBE1C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf6a1a9e-0948-3fee-a9d2-44a7309b0b7c.roa
Signing time: Mon 24 Jul 2023 12:00:00 +0000
ROA not before: Mon 24 Jul 2023 12:00:00 +0000
ROA not after: Tue 24 Oct 2023 04:00:00 +0000
asID: 36522
IP address blocks: 174.90.220.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:12:03:c1:ac:93:79:4a:2f:be:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jul 24 12:00:00 2023 GMT
Not After : Oct 24 04:00:00 2023 GMT
Subject: CN=6a9f4471-be39-44e6-80ce-0e90bddb34cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:98:60:ce:cb:b4:27:a5:4a:63:c4:e3:0f:
2d:81:7c:03:52:06:f5:eb:8c:e0:87:93:1d:7a:99:
32:a4:da:ad:0a:01:e2:7b:26:b5:fd:53:1a:7f:79:
08:e0:dc:a9:7a:de:5d:01:5a:e0:5a:ce:76:89:ad:
6e:57:9f:ab:32:2b:23:1c:f5:04:c3:18:2a:1f:e4:
3e:4b:43:47:06:a2:99:b8:e8:7d:61:57:25:c0:8a:
a8:33:7e:4d:74:17:82:12:43:d2:8a:8d:57:6d:84:
21:ed:c5:a1:8a:2c:43:bc:9e:bc:01:90:75:29:67:
bf:ed:df:84:07:53:02:26:bb:46:3d:5e:1a:d3:00:
f1:a4:3d:94:81:ed:11:27:fe:86:a5:4c:32:b7:85:
6e:ad:39:e3:58:dd:6a:04:c7:45:74:ae:47:4e:7e:
0e:fc:40:86:22:1c:5a:f7:8a:29:06:0f:4b:c3:14:
b9:48:80:cb:b3:06:68:7f:8c:7c:43:6f:c2:df:73:
0b:23:75:b8:17:72:a0:8a:90:32:1a:c6:46:ea:8a:
22:83:30:98:b8:37:b0:b8:1b:37:a6:4e:f4:44:b8:
3f:a7:c3:19:0b:20:25:81:4c:80:99:f2:8f:9a:f4:
1f:35:b6:1a:6d:af:30:20:3b:38:e3:18:37:cd:db:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2D:BD:5E:0F:0B:F7:97:2F:36:C8:04:7D:D1:22:EB:B6:6E:46:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf6a1a9e-0948-3fee-a9d2-44a7309b0b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.90.220.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c9:cf:13:ab:2f:dc:2a:8a:c0:ce:45:29:44:4a:56:be:5c:
68:8a:22:1e:f6:ce:26:78:2b:c9:74:91:3d:bb:81:fe:c1:09:
28:82:83:06:f8:2d:18:b0:aa:cf:7e:33:cf:03:c3:0d:d0:68:
ec:79:91:0a:67:11:10:05:1b:c6:7b:36:7d:12:eb:eb:2d:b8:
7d:c3:ac:f4:5d:b1:bd:a9:a2:2b:54:34:df:24:02:8d:33:db:
a5:c6:e9:86:53:ed:b0:c6:92:78:d8:e3:07:aa:63:4a:36:93:
a5:bf:4c:f0:d8:00:04:17:f3:f7:a1:a4:4f:cc:63:eb:bd:54:
7a:1d:98:56:ee:36:a9:60:45:19:70:f5:2c:7b:3c:55:9e:b9:
8f:0a:2b:74:fc:29:8f:df:f2:58:88:90:b5:0b:31:10:19:fc:
c8:ca:b1:32:13:8b:5d:33:f5:be:04:a1:2a:d4:89:ea:21:3e:
53:84:57:28:17:05:b8:00:ab:04:22:65:13:cc:f5:df:24:c9:
9f:bf:01:d4:5a:20:c1:92:8b:e3:b9:a0:fc:a1:bf:75:d8:e8:
e8:74:14:4d:12:08:ec:08:d0:73:2f:ff:04:5b:73:ed:24:ac:
92:32:f7:5d:ce:6e:fd:fb:da:18:4f:91:05:8e:cb:ae:9d:b5:
07:d1:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:23 2025 by rpki-client