Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df5967b4-20c0-3ee2-9cd9-a43447484acc.roa
File: df5967b4-20c0-3ee2-9cd9-a43447484acc.roa (raw, json)
Hash identifier: 2D+/t1ImtMNKHOlA0MZefyVOXN6+KQ0QGdE0nTRAcy4=
Subject key identifier: 68:24:63:C5:71:56:6D:61:76:90:6C:37:FF:B2:A3:45:F2:64:45:3E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5A5B380A78CF5DC7CF380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df5967b4-20c0-3ee2-9cd9-a43447484acc.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 156.57.0.0/16 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:a5:b3:80:a7:8c:f5:dc:7c:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c2f2f732-4df4-4d3d-9fa5-710edc817858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:f5:ed:cf:56:b1:26:5e:1c:7f:e0:b4:c4:
92:e3:63:5a:56:ef:7e:68:f0:5f:46:70:9b:a7:ef:
71:ce:20:fd:ce:98:15:ad:b5:ee:c8:7c:bd:75:c6:
e4:2d:c6:a3:8d:30:c9:1a:db:55:7a:b1:70:8f:94:
8b:8a:40:95:49:a6:c4:4c:93:61:64:ff:a9:0e:86:
23:7a:ef:af:f1:62:32:52:ee:f8:ae:37:f0:c8:3d:
45:bf:5d:0b:a9:7f:62:9e:0e:54:ca:25:86:9b:02:
6b:0a:ca:9d:05:ea:1c:ab:93:bc:16:04:39:fc:b1:
d4:67:a6:74:47:a2:90:a2:49:6f:f8:17:ab:5c:97:
f2:bd:78:36:37:e0:7f:ab:83:c9:23:75:4f:4f:45:
c5:2f:e2:08:38:ae:4a:43:a7:66:63:14:d0:ba:13:
2f:07:25:a4:24:f7:56:b7:39:92:c2:29:31:42:fe:
c1:39:36:60:42:6b:77:58:30:40:32:43:f2:42:e1:
b4:f2:92:d2:6b:39:9a:75:35:94:05:b8:d6:fc:7b:
7b:9e:08:a4:ad:3c:70:d7:35:e4:47:f4:10:f9:18:
4f:57:f3:49:b2:87:85:e9:21:5d:d9:cf:f7:db:9b:
c3:ee:55:f0:d2:85:3d:dc:63:15:50:bd:73:fb:3f:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:24:63:C5:71:56:6D:61:76:90:6C:37:FF:B2:A3:45:F2:64:45:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df5967b4-20c0-3ee2-9cd9-a43447484acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
156.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:0e:bb:30:b0:6c:39:38:c7:a1:69:31:95:f6:c4:7f:21:c0:
a6:36:5d:23:3e:95:63:af:6e:15:0e:71:99:7d:47:59:6f:7f:
80:8c:57:88:74:dd:67:18:1c:76:63:09:68:96:05:88:3e:e3:
e8:2e:cc:d8:45:78:84:7a:56:d4:48:7f:ed:6c:b4:74:3f:b4:
33:be:85:6a:ec:c4:c0:11:64:69:cc:5d:8d:ff:0f:c7:fa:4c:
65:e5:26:80:92:b1:8b:f9:28:d6:61:f5:61:15:6c:a6:8c:e8:
1c:df:a8:2a:97:ef:b7:90:8b:30:16:ed:22:e7:f6:e5:a2:2d:
f1:c5:28:d5:99:7e:ec:71:ac:5a:2c:da:52:4a:e9:e5:02:35:
25:0b:25:58:3e:31:45:76:73:49:65:7d:0a:ec:8a:69:ec:1b:
fb:d1:90:a8:fc:e2:db:e8:25:ce:87:c6:02:30:4c:c0:7e:16:
25:6a:71:a6:e7:1a:7b:49:7f:4b:da:de:fe:c0:87:7d:87:5c:
33:a0:44:b4:6b:fc:aa:54:04:08:11:db:a3:d9:1f:40:83:75:
b5:fc:9f:91:ce:f6:df:2b:9a:66:a3:b3:4c:bd:4a:3a:b7:4f:
88:a1:5c:7c:f3:ab:24:4c:59:fb:70:45:7f:a5:c6:df:88:90:
fe:82:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:42 2025 by rpki-client