Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c9eafb1a-2790-3dcc-949f-bf3458b7168f.roa
File: c9eafb1a-2790-3dcc-949f-bf3458b7168f.roa (raw, json)
Hash identifier: FgccxTtCTIlkwjo2ZFNiukzyig0fvCgrtH7ohVeEZdY=
Subject key identifier: B0:11:31:2C:C4:5B:41:88:04:F3:07:F6:52:5E:21:6A:A4:E6:54:B9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5504693AB1A99EDFE37A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c9eafb1a-2790-3dcc-949f-bf3458b7168f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 46959
IP address blocks: 72.28.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:50:46:93:ab:1a:99:ed:fe:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=eaee3bfe-27a4-4f53-9fb8-94c3049c7338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:32:14:8c:30:a5:df:82:fa:77:77:63:eb:
c2:15:6d:f7:c6:d6:11:1d:a3:c8:f5:ab:d0:7e:2a:
4c:0b:0c:12:0b:a0:bd:f0:00:51:04:2c:57:99:57:
35:1a:41:78:b4:cd:a4:aa:15:60:28:15:1d:93:33:
39:f2:7e:d4:06:48:02:41:5a:0c:f8:87:de:ea:9c:
ab:a7:98:86:49:b7:24:d6:0c:f4:5b:b2:a7:84:72:
b4:6a:9e:43:ab:e3:d9:52:c3:c7:db:c7:cc:c1:5b:
41:4e:02:90:90:fd:46:da:3e:2f:ab:b5:5e:2e:7c:
1c:4d:4e:8e:15:a5:78:73:13:39:f9:cd:4e:a3:b1:
a5:24:b1:e0:09:b4:d7:04:4d:9a:80:e4:c2:e6:60:
a2:b7:cf:cb:98:f9:ba:27:c1:7c:37:8c:e3:35:33:
0e:89:d1:c6:39:34:3f:68:98:50:70:65:53:06:b2:
9c:74:06:9f:54:5d:94:3a:55:b0:5c:39:40:69:20:
38:c1:35:3a:0c:c7:6e:78:12:a6:63:d5:db:b2:7c:
5d:c4:78:d1:04:52:f8:65:71:f6:4b:4b:aa:8b:61:
03:c7:eb:67:58:cc:c6:71:2f:a1:fc:1d:58:98:ad:
15:14:71:5b:9b:a2:0e:c2:91:6c:e3:8f:eb:d9:9d:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:11:31:2C:C4:5B:41:88:04:F3:07:F6:52:5E:21:6A:A4:E6:54:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c9eafb1a-2790-3dcc-949f-bf3458b7168f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
72.28.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:7b:b1:1c:f8:8f:00:76:87:ce:43:c6:46:b9:50:4c:b9:1c:
34:ff:16:33:8a:32:fa:7c:c2:a7:2e:aa:12:c7:97:a4:da:00:
a2:7f:a6:eb:05:a2:8a:a5:d8:73:c1:93:46:24:73:a7:5b:8b:
5c:c0:15:5d:82:36:9d:18:a4:bf:17:6a:de:2e:c6:3c:0f:06:
76:5f:71:14:0d:b9:a6:56:6a:70:ff:d0:ef:66:49:83:79:d6:
2e:6a:03:92:8e:14:27:44:14:6b:98:dd:3f:de:38:37:61:81:
c5:03:a3:9c:17:db:13:69:1e:a8:b8:4b:b9:e6:66:b6:6e:86:
9e:29:45:74:fd:f5:38:9b:3e:9b:3a:72:1e:b4:66:6c:8c:59:
cc:a6:0b:fd:06:4e:c3:59:90:f7:8a:1a:ed:8a:13:ee:22:b4:
a6:80:4c:b8:77:38:f0:4c:da:b4:bd:11:f8:8d:3f:a4:9d:a5:
81:c4:ba:32:0b:78:2d:1c:7b:d0:e4:4b:0f:53:41:99:7b:53:
29:e2:00:36:1c:0b:37:ab:f3:7e:fb:99:61:e5:48:16:b1:eb:
fb:e5:52:ec:64:4d:fd:d2:c0:0d:b0:bd:f8:bd:40:33:b7:67:
60:a4:18:27:33:eb:2a:dc:dd:1c:78:56:f9:14:c0:1d:a2:24:
51:6a:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:23 2025 by rpki-client