Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3a30b0d-4aa7-3f42-a07a-e7086de1f1c0.roa
File: d3a30b0d-4aa7-3f42-a07a-e7086de1f1c0.roa (raw, json)
Hash identifier: 5t+Z+JTAazXZKD/L/x8DF1Mjx/RCgbGXVAM1pdtmT9k=
Subject key identifier: 08:9C:54:29:28:34:90:C3:55:9C:C5:43:41:BB:BB:B4:8D:87:B9:92
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B0E960C18E09301C159F3F0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3a30b0d-4aa7-3f42-a07a-e7086de1f1c0.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 855
IP address blocks: 70.26.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:0e:96:0c:18:e0:93:01:c1:59:f3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=88fb3d06-ca0e-4f52-af14-96457b1367a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:0e:2f:be:a0:d7:f8:e7:af:96:85:a8:8f:
96:c8:77:24:2c:d2:7c:3d:d7:a8:58:ea:6c:e3:42:
6a:16:c1:a7:eb:44:f6:61:f1:45:af:3f:f8:04:e8:
0e:90:c2:c8:2d:aa:02:12:94:29:9e:79:a7:58:88:
b1:be:ea:32:ac:9e:87:ae:a6:19:ba:92:ed:f8:12:
df:41:97:89:4a:63:19:82:67:a2:d4:26:b6:a0:37:
af:df:db:ac:be:e1:59:23:b6:d5:d0:6d:ea:bd:ee:
98:55:1f:49:ba:7b:15:d7:7a:6b:fb:03:6c:36:cc:
58:98:df:5f:23:4b:5a:3c:62:9b:6c:2f:4f:7f:8c:
df:a8:52:0b:7f:15:68:2e:5e:8b:4c:b5:13:96:2c:
26:43:b0:1c:ae:13:00:16:0d:6d:c5:d0:3a:cb:f0:
d7:f0:65:4f:0d:cd:de:cf:f2:55:35:27:52:80:00:
78:0e:6b:1b:48:e3:41:dd:2b:bb:ee:b3:ba:6a:f0:
7c:da:3f:a5:9c:a0:d8:1c:86:1e:4b:c9:6f:af:7f:
30:37:41:a6:32:b0:76:54:c8:77:d1:17:f0:8d:63:
c8:dc:48:08:33:78:ff:c2:73:8f:b8:c2:94:9e:a5:
b2:70:23:0b:8e:ab:88:13:22:0e:4c:65:e1:65:c8:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9C:54:29:28:34:90:C3:55:9C:C5:43:41:BB:BB:B4:8D:87:B9:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3a30b0d-4aa7-3f42-a07a-e7086de1f1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.26.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:47:79:4f:d0:de:f6:df:28:5b:1c:82:ac:cc:0b:0c:f2:c3:
5d:f0:21:73:76:75:c3:06:8a:30:58:7a:27:96:d1:4f:cc:46:
69:32:a8:47:e5:e6:09:12:65:0e:0e:b3:cc:a8:35:80:e3:5c:
f5:83:62:be:1f:03:7f:c6:7d:8d:de:61:09:27:4c:0b:9e:61:
65:05:64:eb:3a:e4:1f:40:49:e2:9e:66:a2:25:2e:6a:ea:61:
5f:e4:d4:05:de:f0:4b:43:70:19:c2:13:b4:26:ab:96:18:6b:
60:ae:a5:68:ad:f9:92:83:11:b3:56:df:d1:2b:bc:d8:74:23:
27:07:63:9f:60:cc:dc:7d:91:7f:42:88:30:3f:26:18:be:9e:
28:50:ac:fa:99:51:8e:9f:e7:85:fa:6e:3a:06:a0:14:55:9b:
6e:23:f4:ad:72:27:13:68:c4:0b:fe:eb:61:a0:cf:b1:57:3f:
e1:55:16:3f:8b:49:ef:91:b8:aa:e3:d4:56:fa:dc:57:6b:8e:
1e:17:66:ed:10:77:54:de:d5:9c:e3:bc:27:44:ef:03:81:18:
8f:7a:49:90:5e:5f:a0:8e:77:bd:d3:06:fe:70:f5:34:2f:74:
b8:0f:0d:0d:c0:1f:13:47:47:a1:fc:f9:a4:0d:cb:e9:5e:3e:
f3:5e:be:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:36 2025 by rpki-client