Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f04895a0-e8aa-3dc5-9c70-c20c517ec837.roa
File: f04895a0-e8aa-3dc5-9c70-c20c517ec837.roa (raw, json)
Hash identifier: o5vG5PnYYRt8dp1gZNwMw6fsFehJNRfyCjA3uHMpUL0=
Subject key identifier: 57:C4:4A:B0:49:91:7E:A1:FD:76:CD:B9:D4:0F:C1:8E:88:F4:18:E0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B54C6C81D760C5B5EA6280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f04895a0-e8aa-3dc5-9c70-c20c517ec837.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 70.55.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:4c:6c:81:d7:60:c5:b5:ea:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=a8fa5110-41b9-41e8-a58d-f9582cf4a9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:51:50:ff:5b:08:29:2f:2d:1d:ac:9e:ea:
74:2e:fa:9a:6f:80:e5:6b:95:30:67:55:fb:eb:1b:
e6:e3:3b:6e:cf:08:09:2a:ac:1a:26:b9:42:d1:04:
86:28:d5:8f:2d:22:62:83:66:50:96:81:4d:4e:a7:
e9:3f:bd:2f:9f:fc:b2:c8:ae:65:5a:f8:7f:7a:0f:
5e:ba:5a:65:9c:a3:cc:54:f2:a2:d8:ab:00:d9:fc:
6f:1c:58:02:7b:5b:78:a2:48:43:ed:a7:73:ee:c7:
29:34:cf:d6:a8:f7:1c:4c:fc:6d:bf:78:c9:6b:cc:
81:b3:9f:21:05:00:46:d4:30:e4:7c:31:26:74:6f:
ea:db:6a:5e:ef:c0:01:ec:e2:75:35:f0:5a:4a:a3:
d4:b2:d1:ad:47:c9:92:bd:0c:16:1b:eb:84:6f:34:
6f:c7:0d:cc:1c:80:e9:ab:f8:1a:e3:14:95:f9:78:
bd:59:5a:ab:bf:96:ca:63:c4:42:7a:2c:47:2b:d7:
eb:03:85:cb:ab:60:0b:75:d7:d8:7e:8a:09:9b:3f:
60:ba:03:0b:3e:49:b5:6f:2c:c4:59:3d:72:aa:b6:
5a:6c:2d:a3:3e:41:26:ca:f4:43:db:fa:39:23:38:
75:68:35:ba:36:5a:fb:66:83:01:50:14:f6:ce:c4:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C4:4A:B0:49:91:7E:A1:FD:76:CD:B9:D4:0F:C1:8E:88:F4:18:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f04895a0-e8aa-3dc5-9c70-c20c517ec837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:d2:60:1f:71:71:b6:af:e6:89:88:7d:96:e2:cb:f1:e9:2d:
de:81:e3:5d:f5:d6:c5:e6:10:a6:fd:ee:8e:23:2a:9d:b1:9f:
d7:f6:64:d9:bb:7d:60:d4:00:4b:06:93:eb:19:98:9b:a0:28:
fe:7c:e9:b1:87:fd:c6:77:d8:e0:b3:a1:9c:a9:a9:b4:74:2e:
2b:1d:3b:eb:2b:d1:78:f9:d9:44:a6:a6:5c:c3:d0:c3:23:3e:
f7:b5:1a:be:23:12:e1:97:0f:4d:77:f5:c4:39:1c:a3:b1:7d:
a3:7b:88:7a:9c:a5:a0:2c:79:08:5d:ba:70:5b:db:e5:26:ce:
11:c0:0b:a4:2c:a9:02:3f:1e:70:5c:32:55:eb:34:99:9e:5a:
43:94:c3:80:d0:9e:fc:cb:d1:b7:b3:30:e8:c5:0f:85:13:27:
37:77:98:65:83:5e:db:9a:2d:20:c4:bf:76:cd:03:74:1e:d6:
d1:6c:87:c1:39:76:7b:11:84:1e:87:58:f2:fc:a3:47:4e:25:
cf:34:bd:bf:7c:50:2d:cb:2f:0f:86:e6:e3:2e:7c:6b:d5:f4:
09:41:4c:2e:0e:c1:4f:ed:0f:0c:c5:79:8a:e9:3a:36:38:db:
da:8a:7c:d2:e2:ac:40:51:e5:c0:a3:e2:3a:19:7e:35:09:0b:
7c:1d:3a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:46:36 2025 by rpki-client