Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca566e50-349c-32a5-a320-11278c76165a.roa
File: ca566e50-349c-32a5-a320-11278c76165a.roa (raw, json)
Hash identifier: cLrLuzekBK0SSfsmgFcbE1R6QWwmt67waUgAtT8h3Gs=
Subject key identifier: 6F:F7:8A:FA:E6:FF:A7:C8:6D:AB:0A:0F:99:CE:8A:B0:7F:57:13:D6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5494077FCDA66E2ACF480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca566e50-349c-32a5-a320-11278c76165a.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 70.52.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:49:40:77:fc:da:66:e2:ac:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=24363457-533a-4dac-b46f-ccea38324900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:4c:5f:2d:26:df:27:d8:48:1b:10:2d:9a:
07:f8:fd:6a:64:1a:6c:78:9f:c0:06:61:89:ab:71:
a2:6c:71:93:df:f3:9a:9f:69:bd:04:ea:00:c9:4c:
dd:50:03:ee:e1:4b:56:a5:3d:f7:d7:3c:05:71:48:
61:28:91:d5:a0:70:ba:69:ad:98:ac:77:d4:e8:e4:
ec:8c:76:c5:a3:95:34:ad:41:b3:48:e7:7e:96:58:
0f:34:32:04:94:30:20:22:f3:d6:bb:24:26:aa:8f:
cf:56:45:74:d2:e5:8a:a5:5a:52:e9:e3:4f:76:b6:
e2:33:bc:bb:1b:b8:e1:9b:b8:ce:15:f5:12:47:3b:
34:82:b1:c9:31:18:52:c8:6e:92:53:69:79:7b:10:
81:93:10:0a:73:2b:4d:10:6b:4d:39:f5:21:0d:19:
46:e0:2d:fb:99:ec:ed:c3:15:8c:6d:a4:f0:f0:10:
27:af:3b:35:ef:b7:3c:21:86:f8:51:b8:b2:d1:3a:
3e:83:3d:05:98:66:91:99:8d:ea:e2:41:28:ab:4a:
e7:f7:1a:ac:e6:5e:ea:6b:5c:51:5e:3f:89:ab:29:
36:7c:a5:4f:24:1c:d0:1a:a8:ba:80:00:ab:95:79:
d1:91:e1:10:f8:ba:72:bf:f1:c7:6e:98:ee:e6:f7:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F7:8A:FA:E6:FF:A7:C8:6D:AB:0A:0F:99:CE:8A:B0:7F:57:13:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca566e50-349c-32a5-a320-11278c76165a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:5f:19:2e:e2:fe:5d:ba:3b:cc:3f:76:9a:b1:17:5f:99:3a:
d3:41:6f:82:44:f9:02:68:bc:91:05:28:28:44:4e:eb:f2:e7:
06:0e:8e:15:8c:ff:b3:fc:97:6a:e6:ab:e8:55:1f:ca:71:96:
3f:cd:a7:f8:ed:65:56:59:45:12:9c:60:bd:ff:6c:bb:a4:43:
ad:09:7f:82:9b:bd:ff:7f:00:48:d0:f6:df:24:d0:7c:8a:9d:
0a:d6:38:81:ad:6d:5c:e0:c7:46:4c:60:52:bf:cc:cd:7d:81:
f9:c8:79:04:b1:bd:0a:32:34:85:b8:a5:17:cb:4b:51:3d:a7:
49:81:56:b6:93:aa:51:a8:3b:15:bd:1b:d5:3c:db:74:b6:7c:
ca:e3:ba:d6:0f:82:fa:1b:63:1b:38:d6:40:d9:54:56:74:2f:
c9:14:46:12:99:68:b2:5b:5f:36:54:64:97:d4:72:37:fe:67:
6a:9c:45:5f:9d:ce:d2:c4:cb:f6:a2:c7:0c:f4:a4:54:29:e9:
02:84:16:3a:a4:31:c2:3f:84:af:ed:ef:63:3e:37:3e:7a:37:
18:d7:b6:cf:81:d5:1a:63:8c:4a:9d:c6:33:a5:d2:0a:fd:23:
c0:c1:a9:1f:b2:4d:5c:c1:4e:6b:8c:a9:b5:3d:bc:3d:14:ff:
85:be:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:57 2025 by rpki-client