Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4018cb2-5248-31b2-baec-0ff4a618333b.roa
File: f4018cb2-5248-31b2-baec-0ff4a618333b.roa (raw, json)
Hash identifier: 8SVMjirpZE7Qv6+kaks/hBqnn+0FI/FnLmtNxaXpGlA=
Subject key identifier: FF:F3:62:73:CC:56:67:D2:E4:41:36:ED:67:9E:A8:19:E5:BE:6E:E8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B562C4C4B86A4B39CCF000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4018cb2-5248-31b2-baec-0ff4a618333b.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 76.70.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:62:c4:c4:b8:6a:4b:39:cc:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=d7f0f6c0-a920-45d4-9f3a-e80de52d66a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:e9:ac:df:14:2e:60:08:d1:a7:84:51:db:
e5:2d:96:92:b1:58:53:7e:d0:5e:dc:f3:26:1b:24:
28:2c:0d:23:e0:4a:61:33:37:fa:6a:a0:ec:9b:b1:
36:3b:78:ef:6f:34:24:3d:7b:50:37:50:c3:0a:fa:
99:a5:35:ca:f2:b8:7c:72:6c:b8:a5:10:3f:bc:67:
90:1f:3a:f1:36:7d:ca:80:46:46:b6:24:29:cb:86:
a2:53:2a:0d:aa:fd:59:92:15:6d:0a:51:94:da:5a:
27:4b:45:4f:04:61:11:01:23:6c:76:a8:5e:70:f2:
60:bc:ff:69:8c:91:85:72:10:62:9e:4c:08:f2:95:
c4:04:db:f5:eb:0b:90:89:8e:3e:b4:89:76:3e:cd:
8a:a6:d9:48:6d:5b:95:c2:ed:1d:6f:f8:ed:4c:78:
e3:79:9e:9d:f7:9a:97:4a:02:83:e5:57:c6:38:ed:
98:91:43:53:96:0b:4c:cf:d2:f3:59:7c:f5:16:1e:
06:2c:52:35:3e:36:78:3c:53:84:79:6d:06:6e:d5:
ac:8d:e7:b0:b4:b3:75:e0:31:94:fc:6a:e9:4d:1f:
af:b2:86:58:d3:fe:59:5e:b6:c0:f9:20:d3:43:48:
de:92:54:32:9f:52:2b:b1:51:c9:79:fc:a6:d0:7d:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:62:73:CC:56:67:D2:E4:41:36:ED:67:9E:A8:19:E5:BE:6E:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4018cb2-5248-31b2-baec-0ff4a618333b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:1e:a9:97:78:bc:77:39:1e:30:54:30:b8:f8:94:7d:8f:88:
67:47:f2:fe:57:dc:fd:b5:00:37:99:bf:d7:53:81:8e:72:82:
f5:29:b8:7e:9e:2a:5f:ef:ad:fe:2f:10:b6:36:40:76:ba:38:
32:82:ac:dc:49:26:ab:b4:58:db:67:27:97:1c:14:76:80:45:
c7:1d:36:01:64:21:08:9a:9e:56:ca:03:4a:2f:6f:7f:c1:59:
41:01:87:59:d1:cb:74:a6:71:f5:0f:fc:e5:08:64:e1:b4:4e:
ed:9e:6f:88:0c:e7:01:c8:5f:26:c4:d1:6e:ad:a2:0f:a8:05:
8a:f4:3c:a3:da:48:56:bc:9d:4c:a6:4a:b3:63:3b:b4:f2:72:
43:c0:79:c2:74:6a:d4:7f:e1:68:e9:57:4e:c6:8d:61:ac:98:
74:3d:2e:9f:e8:d0:7d:5d:87:f9:39:9b:e0:e8:e6:8d:b4:01:
05:ac:88:0b:39:31:e7:c1:27:aa:55:1b:49:5d:3d:9c:fd:9f:
d1:10:64:5a:4f:9f:1f:64:ed:ba:1c:9d:92:51:1c:24:61:42:
f2:24:a7:8e:26:8d:53:ee:a7:5a:0a:c4:e2:b4:f2:de:c7:8f:
5c:f0:45:90:ef:d9:b8:a8:96:1d:2f:9a:d3:5d:7c:d7:43:fe:
c6:27:62:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:18 2025 by rpki-client