Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec3162c1-1677-3f0d-9d93-ac4881729c82.roa
File: ec3162c1-1677-3f0d-9d93-ac4881729c82.roa (raw, json)
Hash identifier: ltdTFlZNN5oJlZcdu5r5is/VJ/Jq+CK8WOiDfRNMacI=
Subject key identifier: D4:09:C2:72:1B:98:36:79:9A:6E:A4:0A:D1:11:37:F7:94:C9:D4:7F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B6F2016ECC2D4E22CC880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec3162c1-1677-3f0d-9d93-ac4881729c82.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 3848
IP address blocks: 216.18.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:6f:20:16:ec:c2:d4:e2:2c:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=e7e3c40f-faf1-4460-9ccf-4fab8f99fe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:e7:88:5a:93:23:2f:c1:be:d3:0a:12:34:
7b:4a:6a:87:04:b2:46:ba:4e:d1:b7:5c:97:30:06:
f6:02:67:9a:5b:19:d3:f8:db:6d:60:a2:bc:7a:a9:
34:d1:fd:9f:17:63:a9:01:8f:56:bd:6a:93:48:9c:
a1:8b:54:1f:1e:7b:62:3a:1f:6b:9b:92:f9:94:84:
bc:0d:ee:54:45:3c:4e:b6:c0:20:40:fd:21:60:ad:
d9:b2:38:54:6b:09:57:0f:f4:ff:fd:17:f6:55:2a:
ce:3b:4a:3b:9f:ca:32:38:f3:2b:08:fc:80:13:cb:
0e:98:1d:12:15:ec:93:d8:f3:59:7a:56:a4:42:c5:
ee:93:53:72:b8:db:1f:01:5c:47:4c:b5:25:60:13:
a2:8c:b6:8d:5d:98:8a:56:e5:4f:a7:ab:f4:d4:cb:
8e:42:15:12:29:c1:6b:11:e0:da:73:28:7f:1b:e9:
f6:2d:ae:54:a3:f3:c5:2e:ea:ea:a4:9c:68:90:02:
99:25:81:a5:78:cf:73:14:fa:d7:9f:26:98:44:57:
06:2a:72:14:0d:11:5b:75:56:e3:b3:c3:c3:77:a1:
a4:7a:90:52:34:4f:9b:ae:e8:10:39:b9:70:15:1b:
f4:69:34:4d:57:d5:6a:de:a2:db:e2:8a:71:d0:1e:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:09:C2:72:1B:98:36:79:9A:6E:A4:0A:D1:11:37:F7:94:C9:D4:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec3162c1-1677-3f0d-9d93-ac4881729c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.18.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:2f:40:4b:08:1f:3a:3d:01:5b:a2:d4:e6:11:78:71:99:7a:
5c:76:e1:50:0c:a9:13:d3:30:61:bf:cf:0e:0d:7e:76:b9:d9:
66:8b:4c:dd:2c:f4:54:db:28:f9:9e:9c:84:5d:a1:b6:0b:e3:
fb:ae:5c:0e:2b:c5:31:5a:bf:a0:5b:1d:d4:84:53:f1:a0:2c:
93:5e:60:72:44:1a:a2:da:01:77:8a:55:af:52:f4:86:68:8e:
50:d8:5f:bc:38:4f:8d:37:68:96:1b:8d:57:33:19:c9:9e:fe:
a7:a5:57:65:94:dd:0b:f8:df:19:1b:53:6c:a7:e5:6f:8c:d1:
af:f5:61:d6:fd:85:50:90:68:97:ed:1b:8e:41:12:2f:22:93:
27:03:d0:7a:39:0f:bf:e1:bd:5c:b5:8a:d9:ee:26:4d:91:2b:
5e:cb:f5:a9:a5:0d:26:95:e0:77:16:54:1c:ab:42:12:a7:90:
95:5e:bc:0a:da:af:70:f8:0a:4e:e4:5e:b2:89:be:79:fc:3a:
fd:a3:e4:c8:19:c9:7b:c1:b1:37:b7:0c:d0:9d:ee:2b:04:de:
57:e0:88:1e:ab:a3:73:f9:ea:62:7d:40:8f:53:4c:8a:2a:2b:
56:6d:f5:ad:cd:76:78:6e:aa:3e:51:db:a4:25:fa:c3:4c:c5:
81:c1:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:04 2025 by rpki-client