Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4ec5a00-bbe1-35f8-a7f6-f05c8aabe20d.roa
File: f4ec5a00-bbe1-35f8-a7f6-f05c8aabe20d.roa (raw, json)
Hash identifier: 9RGguhajrmwni5UvAS7I3KjS452Re+7lJiT17W0tjYk=
Subject key identifier: 9F:4D:FE:33:E2:1A:74:0F:8B:CE:18:55:E1:F7:47:97:C8:70:A6:29
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5AF005FF466AF03701CC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4ec5a00-bbe1-35f8-a7f6-f05c8aabe20d.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 174.90.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:af:00:5f:f4:66:af:03:70:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=109daede-0a04-4134-b6df-5d54d8ea41da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:a8:f0:e1:8e:9c:f4:29:61:7f:bc:54:18:
5c:05:2a:5a:ce:33:c0:c4:d3:09:52:90:15:72:20:
1f:9c:ad:3d:14:8d:d3:cb:42:e3:c2:04:35:b0:d1:
4f:15:9f:31:4c:a6:c4:3f:7b:bf:29:5a:a3:42:4a:
1f:f6:63:c8:9f:67:37:50:b8:5c:b7:21:e2:7c:ac:
13:a1:53:66:8a:3a:ce:66:9a:98:73:81:db:3f:af:
0b:00:93:b8:b7:9d:a2:30:05:3d:8d:5b:b1:16:1f:
6e:18:bf:66:22:1f:73:30:38:bd:a2:08:c1:1a:84:
cb:8e:c4:68:2a:17:af:9d:21:55:bd:0d:fc:81:43:
77:93:a8:b7:e2:95:b2:f9:ba:eb:05:53:b7:1e:74:
f9:86:aa:ed:5d:a6:13:64:53:61:fb:15:52:fc:89:
c4:e4:0b:c9:79:2f:d0:b0:7d:e8:4b:f3:b7:33:12:
e4:cf:78:e5:be:e6:78:6e:8f:57:82:80:80:85:5b:
a8:a1:aa:a3:34:55:9b:e0:76:59:8c:3e:68:34:aa:
99:b3:b3:fb:ce:b4:2d:7d:9c:5e:d7:93:53:ed:75:
c5:04:78:c2:64:13:be:b3:9a:df:73:bf:e7:64:46:
eb:7d:3a:82:00:c2:e1:be:7f:6c:00:d9:fa:43:ec:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:FE:33:E2:1A:74:0F:8B:CE:18:55:E1:F7:47:97:C8:70:A6:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4ec5a00-bbe1-35f8-a7f6-f05c8aabe20d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.90.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:54:b6:c6:44:0d:09:69:c5:be:dc:15:69:17:1a:27:f6:5a:
e4:02:93:d2:8a:30:21:8f:5d:87:a0:cf:9e:52:e1:cc:ea:a1:
71:8a:2c:97:18:a1:fd:70:f6:e5:64:e9:91:71:53:44:10:60:
ff:63:a3:da:00:83:95:e4:e1:93:24:31:5c:e0:55:1e:2d:ae:
48:54:e4:13:bd:fb:5f:ea:31:5c:51:28:3a:4a:8c:41:56:6d:
c7:09:8a:17:f9:cd:05:e3:8b:50:11:8b:e4:dc:93:d2:d7:54:
fa:f7:6a:de:d2:ff:80:54:f9:73:f1:76:7a:03:a0:8b:c4:81:
59:78:64:8b:fb:9a:cb:5b:fc:41:97:42:fd:a9:41:4b:7e:59:
dd:b6:96:f3:7a:e4:4e:ee:59:94:0a:90:35:f6:ba:12:f0:48:
1f:38:81:29:4d:0c:dd:20:65:d5:10:c8:c7:19:48:36:56:d9:
3e:73:47:a9:5c:84:70:99:39:89:ef:32:33:46:42:b6:d5:3d:
4a:15:61:61:57:f8:24:a9:09:01:ef:e8:d8:67:1f:27:58:ed:
dc:92:7a:5c:be:82:1d:8e:a1:c4:74:2e:48:30:78:71:fa:62:
b3:13:09:ad:c8:f0:a8:ed:39:cb:55:59:6f:28:c1:cf:8d:18:
9f:de:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:28 2025 by rpki-client