Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd704264-11d1-3b1f-882b-51184c180581.roa
File: cd704264-11d1-3b1f-882b-51184c180581.roa (raw, json)
Hash identifier: IHFar3e+Pi+6hnZOf2F6IHka34B3o2IvHOezd9tdGtA=
Subject key identifier: EC:E5:E5:C0:2B:FA:00:C0:7F:FE:0B:2B:DD:C9:C7:80:85:63:C2:44
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B1DA496F087978EF83D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd704264-11d1-3b1f-882b-51184c180581.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 209.71.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:1d:a4:96:f0:87:97:8e:f8:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=3eac32f6-26f3-43bc-a6e4-27fc655d9621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0f:b8:65:ef:b5:6d:5e:95:cd:20:36:4c:3d:
08:e9:6a:22:a2:bc:00:16:eb:72:af:7f:2a:c5:0f:
07:45:7b:51:f4:a2:ca:72:38:b2:75:71:a8:6a:cd:
db:e0:43:13:d6:20:ef:1e:eb:2a:82:be:24:ac:69:
f1:15:28:13:56:72:76:33:65:69:93:a3:c1:c4:b1:
23:81:32:1a:89:ba:4d:a0:a3:4e:b9:ff:93:1d:eb:
26:64:98:e5:42:20:45:49:38:14:7e:03:9c:fb:db:
39:fc:77:b6:9b:f4:d6:d2:b2:dc:07:d7:5b:da:2c:
be:c7:2d:73:0d:c6:df:d8:d3:8f:9c:3f:01:47:00:
d3:6f:c8:8b:78:7c:4a:e2:53:65:9c:3e:8b:27:4d:
dd:89:44:8d:d9:45:26:02:f3:c6:83:87:8a:63:73:
a9:5d:76:94:1e:d2:21:7f:56:58:04:fb:af:4f:9e:
f6:ef:cf:a2:ba:6b:a4:47:28:fc:0a:ef:99:28:98:
fb:e0:74:bf:e5:29:92:22:49:33:6f:f2:86:02:14:
95:00:d6:ba:8e:d8:3a:7c:c8:b6:64:69:62:60:eb:
74:2a:88:32:f9:51:36:94:51:fb:46:2a:2f:1b:73:
80:f4:72:59:21:31:d3:d1:df:44:00:52:df:36:ce:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:E5:C0:2B:FA:00:C0:7F:FE:0B:2B:DD:C9:C7:80:85:63:C2:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd704264-11d1-3b1f-882b-51184c180581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:27:92:06:d3:93:09:09:d6:18:33:9f:3f:4b:14:62:fa:c4:
51:2a:90:d5:c6:35:2c:84:85:47:dd:63:fd:5d:63:8f:d7:71:
4c:b4:91:6b:7e:98:6d:6c:0b:74:ac:d4:aa:3b:24:fa:ba:e1:
a3:74:69:f0:2f:1d:bc:a0:b5:ee:6f:2d:c4:f9:52:95:fd:2f:
b1:7e:e8:2a:9b:8b:5f:41:76:07:b7:af:18:1c:d7:86:68:4c:
6c:d7:20:bf:14:2f:8a:f6:59:b6:3e:e7:aa:3d:ae:7b:db:8c:
db:8e:a6:02:3e:fa:43:47:19:3d:28:9b:59:e1:99:ad:34:07:
16:56:73:35:ba:ab:a1:e7:0d:ae:3a:0f:6f:67:5a:7f:53:54:
77:fe:66:34:65:d7:09:05:c0:2e:4e:f5:5c:4c:ed:6f:31:f2:
bb:58:14:d2:4c:27:83:6b:e5:2e:ad:d4:32:b5:b8:cd:60:b7:
42:72:5b:cc:85:57:c7:91:f5:36:8b:db:ed:d1:f8:cb:a2:2e:
f9:65:91:b7:08:4a:54:db:f7:06:5c:f6:75:00:49:22:3a:fa:
37:c4:55:34:eb:9b:a7:6d:f7:81:ec:87:12:5f:90:4d:d2:5e:
a9:4f:4b:28:80:ca:c8:67:1f:5a:50:de:6c:36:d1:24:a8:86:
be:31:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:52 2025 by rpki-client