Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dba0c61b-c2f1-370a-9c33-e023559f6f98.roa
File: dba0c61b-c2f1-370a-9c33-e023559f6f98.roa (raw, json)
Hash identifier: QYeCRPCYnMvN1PRZcnNfhBO+0NY1SacGL2FhERrs9ek=
Subject key identifier: 9C:44:F8:43:6F:D0:C0:46:FF:39:4B:01:75:F0:12:F3:FD:8A:1D:D8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5577A4317CA38C3B64200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dba0c61b-c2f1-370a-9c33-e023559f6f98.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 76.66.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:57:7a:43:17:ca:38:c3:b6:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f10db3e1-ca41-4cf1-9851-ecdedf9c5bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:36:8c:ff:ff:d9:db:99:9b:a3:63:78:a6:
2a:df:0e:d8:55:66:a5:d2:10:3a:55:e6:41:59:6c:
d5:51:f5:0d:a8:09:0d:a0:2c:46:a3:0d:f3:cf:ee:
a2:87:0e:2c:df:52:8e:8c:3c:b9:ed:f4:1b:24:c0:
d1:5f:ce:8b:1b:86:3f:f9:89:85:18:5b:3e:d4:06:
93:fb:db:c6:99:2b:b7:f7:54:0c:5b:04:b9:37:73:
70:4e:65:0f:1a:eb:6c:18:dc:6a:81:56:68:4a:a2:
65:fb:bb:a7:00:0a:5c:41:f8:e2:b6:e5:ae:9b:ad:
56:8e:5b:62:27:95:0b:5f:37:67:76:43:72:2a:f5:
74:8b:d4:dd:db:3c:fc:3b:4a:9d:25:24:ba:65:34:
92:f6:7f:d7:5f:a7:60:21:b2:e4:e6:e4:72:aa:f5:
cf:76:66:51:fc:fb:51:67:0e:c3:49:e0:8d:ff:bf:
00:a8:06:65:06:aa:be:bb:3f:a7:7d:d3:7f:82:1f:
00:11:fa:f4:84:93:62:ea:0e:34:16:50:6d:ef:9d:
95:c9:35:74:a8:ae:1a:af:c9:d0:95:02:9f:62:9d:
84:56:f3:17:7d:b8:33:5d:1d:af:0b:8c:68:38:23:
19:a9:2d:de:94:2b:bb:af:7b:b1:15:42:28:d7:65:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:44:F8:43:6F:D0:C0:46:FF:39:4B:01:75:F0:12:F3:FD:8A:1D:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dba0c61b-c2f1-370a-9c33-e023559f6f98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.66.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:5a:d6:ef:d0:6d:c8:7c:0b:83:f8:f9:bb:5b:6e:7a:62:9a:
de:ce:4b:62:14:6b:df:b0:0e:04:20:d5:1e:96:7a:b9:70:3c:
cf:01:e8:4a:1b:52:5e:65:78:48:39:87:10:89:12:66:f0:6f:
db:e3:e4:77:d0:4b:1a:48:26:5c:b9:83:fa:0c:f5:51:d0:4e:
72:53:01:76:fd:2e:5f:f4:72:49:a5:2c:33:64:2f:12:42:19:
ec:c5:02:1f:de:90:8d:de:96:e3:40:78:e3:05:24:a5:3c:f0:
8e:9a:ea:70:c1:d1:e3:73:86:4a:05:0c:15:7e:57:b6:80:c5:
b9:d6:c1:ed:f4:f2:c9:b4:a7:87:3a:aa:1e:68:a4:3d:29:7e:
c1:2e:68:9d:cf:74:bb:1a:4d:32:10:0b:b7:d9:5b:87:0a:a3:
0e:21:79:85:8e:d6:98:b2:a6:1b:55:18:d5:56:4e:5c:8b:1e:
6e:cb:9f:94:c0:c3:22:65:77:ea:97:3d:f0:26:ab:9c:5d:61:
a4:4a:f1:97:a0:48:ac:5e:4f:0a:15:5f:28:98:21:f1:ba:fa:
1a:bc:6a:02:30:37:7a:a8:55:44:24:34:d7:9d:72:07:bf:67:
d2:a9:5c:89:07:79:c9:78:69:30:18:cb:11:94:7c:cf:df:a8:
6f:ea:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:19 2025 by rpki-client