Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd19889d-bee5-3bec-a537-36ed43f63f2b.roa
File: cd19889d-bee5-3bec-a537-36ed43f63f2b.roa (raw, json)
Hash identifier: KL0kcdXiVZe36abx2K25Y15f8mlIiQITdSsYrj0q2x0=
Subject key identifier: A2:9A:C7:51:A0:51:29:A9:93:66:A4:22:6D:7F:84:6C:31:7A:4A:2C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B517EEED9DC9D118F05780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd19889d-bee5-3bec-a537-36ed43f63f2b.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 67.70.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:17:ee:ed:9d:c9:d1:18:f0:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=65f84e09-546e-4eba-994a-fd21ba205c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:31:6b:f0:22:6e:a5:b1:6f:97:ae:80:ec:
ad:dd:63:b4:c0:4b:30:bf:ac:39:14:ea:c9:19:09:
47:98:00:e8:ac:f6:c5:b8:9c:f9:93:56:72:fc:b5:
6d:69:3f:95:0e:45:6d:61:98:e4:79:6b:2c:4e:96:
a0:f4:7e:66:b6:4d:85:54:ef:12:ef:9f:c5:0b:b5:
05:79:83:42:0f:7a:d3:8d:a0:07:3f:05:44:e1:ea:
81:ce:d1:d4:60:f6:be:97:95:f0:16:4e:98:c6:67:
59:66:2f:6b:6b:6c:84:f6:eb:88:3d:d2:07:39:87:
10:e5:5c:c0:d3:ec:8b:a6:97:19:0b:48:14:77:34:
8a:0b:70:7b:cf:69:70:0d:be:4a:17:ac:83:8a:e1:
53:1d:ca:a4:dd:a0:01:c4:b7:4a:43:fa:22:0f:25:
ec:90:39:ff:15:54:c2:b6:af:b2:99:40:cf:aa:a3:
69:5c:4b:69:05:cc:f5:f8:cd:72:3d:dc:e8:24:f9:
17:28:06:79:5e:0f:14:1c:41:7c:3b:c6:23:83:37:
74:2f:a6:cb:30:8b:8f:56:03:f7:5c:36:06:8e:34:
27:57:94:a1:a8:35:e5:0c:0f:88:e5:75:7c:f9:40:
e2:8f:ba:37:d3:52:12:c1:94:f8:13:7d:13:b3:44:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:C7:51:A0:51:29:A9:93:66:A4:22:6D:7F:84:6C:31:7A:4A:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd19889d-bee5-3bec-a537-36ed43f63f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:b6:9d:a5:9c:9e:6c:a5:71:60:d2:12:bc:3d:80:fa:5a:ef:
54:71:61:fb:fa:22:3b:41:ec:a3:40:6e:f2:8d:9b:44:be:69:
a5:60:99:9a:65:60:ed:74:ec:ee:a0:71:aa:18:df:96:be:ae:
67:f9:36:32:08:94:e5:c2:99:8d:bf:89:dd:d1:2a:90:b3:ba:
64:c5:b8:87:89:c0:0a:9f:2f:e8:a8:10:56:e2:08:8a:cd:2a:
ac:9f:32:7c:fd:f4:3c:7f:d2:eb:85:fa:36:f8:77:6d:40:7f:
e8:37:c0:0a:82:af:23:8a:a7:73:c2:4e:23:b8:b7:d8:cf:b1:
42:3b:9b:36:83:68:ac:ec:f8:b8:29:1d:25:a0:7e:24:ed:58:
53:84:6b:65:48:67:ed:98:c7:e6:67:38:c1:11:7a:2a:c5:ce:
29:9c:bf:a1:96:d8:28:44:b3:e0:e2:78:9a:9d:44:cc:d4:55:
5d:2a:a7:57:24:4a:4e:67:86:22:4c:f3:06:08:9f:ff:07:d3:
e9:ab:be:3d:5d:18:b9:7d:1f:9d:1a:d8:78:9d:f6:97:7e:10:
f5:b2:22:be:7b:fc:c2:d4:51:8c:42:07:97:08:27:02:1a:d3:
e8:a4:84:c8:74:5d:8c:e5:51:bb:ca:59:d2:44:4e:f5:26:87:
a9:d3:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:27 2025 by rpki-client