Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c137272f-5f4f-363a-951e-327fd861559d.roa
File: c137272f-5f4f-363a-951e-327fd861559d.roa (raw, json)
Hash identifier: Qt3G2IyCyhfEv+EN4AfkvEps69dgBHP/qvsj4wcbmvs=
Subject key identifier: 40:04:BB:5A:B0:FF:1C:DF:4D:3F:0D:2D:F0:D7:4E:C3:B2:47:4B:F5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2BC584BBFEE6C05E3C1B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c137272f-5f4f-363a-951e-327fd861559d.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 2001:4958:1829::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:c5:84:bb:fe:e6:c0:5e:3c:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=5f60c0c1-9cdc-4b6f-a78f-d2015cd94954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dc:11:96:7b:c3:49:57:bf:56:f0:bd:33:25:
71:69:e6:a8:28:60:95:94:b3:9d:6f:ee:1d:81:9e:
d4:76:a8:6d:62:74:6b:1d:f7:01:1d:e1:5c:c8:b2:
38:29:7b:4c:da:3b:25:75:4b:4e:1b:43:df:cc:ea:
ae:bb:7b:d7:10:13:dd:f5:aa:94:65:29:58:1e:d0:
ca:0a:5a:a8:62:f6:a6:e6:43:b0:99:f8:46:c9:b3:
8e:34:b1:93:77:8e:48:4d:b3:ab:83:9a:99:d4:f9:
48:55:58:44:a6:c4:d5:6b:86:af:ce:ca:e1:e8:6c:
65:02:08:de:38:eb:54:ee:7e:4a:12:ff:4a:fc:34:
62:e0:33:f4:95:3a:66:99:07:46:6b:22:40:03:83:
32:70:cf:20:ae:c0:88:0c:0c:a8:07:0c:75:dd:70:
70:2f:0a:18:f5:6d:a4:da:f8:40:5a:36:59:86:04:
56:d1:8e:83:bc:37:6b:c7:b6:fd:d6:13:5a:b2:43:
0c:40:98:d6:fc:19:db:66:9d:14:4f:75:8f:10:a4:
6e:45:a8:fa:41:75:1a:54:9a:ae:bb:07:2c:32:63:
28:10:8b:46:b4:dc:a9:78:ea:7c:43:30:5d:bc:10:
44:1f:6e:9c:db:a6:f9:76:5c:92:09:fa:4c:e8:2a:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:BB:5A:B0:FF:1C:DF:4D:3F:0D:2D:F0:D7:4E:C3:B2:47:4B:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c137272f-5f4f-363a-951e-327fd861559d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4958:1829::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:07:c0:6a:ee:03:64:a4:fa:0f:5f:f0:20:3c:09:f8:86:c3:
c5:5d:27:6d:57:cf:4b:12:a1:bb:ea:dd:3c:76:e9:e4:0d:3c:
1c:c1:95:0e:ba:a5:af:28:3f:39:7c:76:27:82:b2:5f:a3:29:
f5:3e:a1:48:ca:bc:7f:00:3b:f0:3b:72:44:f0:ba:91:47:fb:
1b:d5:20:86:76:a6:5b:b8:3b:ba:01:6b:0a:40:6a:d4:50:bb:
40:6c:b2:f7:92:43:0a:79:18:f9:6d:ed:81:5c:5f:b7:41:e4:
50:18:ea:20:47:1c:af:4a:a2:60:a9:90:b4:ab:f1:73:7b:88:
a7:fc:d5:51:2a:6c:7a:4f:43:26:c3:49:25:67:d9:7d:ee:ff:
b8:43:b6:20:15:0b:28:f4:f2:1d:bd:ab:95:2f:1b:0b:f2:40:
1c:22:2f:55:87:1f:21:5a:ba:fb:7c:dd:e4:fb:e1:53:cd:b8:
79:6d:13:b7:0c:27:38:7d:90:12:31:8b:cd:fa:36:f7:27:b8:
55:84:10:f3:98:ee:af:60:0a:54:6b:e7:a6:a1:73:5a:63:c8:
94:55:89:ea:9c:6a:fe:8f:f6:a8:5b:b7:6a:c3:59:74:2f:a3:
0d:d3:6c:8a:9b:a9:6c:b8:37:e1:90:64:c5:05:45:94:94:76:
6a:1d:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:36 2025 by rpki-client