Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f507e119-d53e-3e89-961e-ebb81998b684.roa
File: f507e119-d53e-3e89-961e-ebb81998b684.roa (raw, json)
Hash identifier: SzVC96k3duNWruiCrzxcYroLJ5tshMyGutjdTKLDWbM=
Subject key identifier: FA:C9:96:00:7C:24:53:97:99:6D:50:0C:F5:B6:45:C9:9B:6C:9F:F8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5B0F6EB6D89474EABA6C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f507e119-d53e-3e89-961e-ebb81998b684.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 174.92.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:b0:f6:eb:6d:89:47:4e:ab:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=9adbcf32-c79b-46f3-b1ed-1324a099ca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:38:c4:9a:8b:86:a7:8d:97:f1:c9:a9:10:
49:43:4a:8c:76:de:56:5f:20:bc:6a:9a:d2:e5:68:
73:13:38:ff:a8:09:0e:48:64:37:60:c2:0b:0a:2d:
1b:a5:0a:13:6a:91:4e:8e:58:0d:9b:dc:c9:6c:e7:
4b:31:85:f4:82:26:7c:d2:5e:3a:8b:df:1f:30:6d:
b6:65:7a:06:08:41:1e:9c:60:67:81:89:15:32:0b:
4c:ac:0d:8c:ef:58:8a:d6:15:e4:9c:70:19:30:48:
3a:fd:30:84:a0:48:73:00:b9:b1:8c:d2:e6:3b:2f:
f1:2a:08:01:c4:c3:5f:45:a0:d9:49:e3:c4:59:f4:
c4:5f:b5:84:94:b9:61:91:fe:64:a5:9f:85:e2:15:
7a:9b:08:d8:9f:88:a2:68:c3:2a:25:64:e1:78:b3:
ab:30:87:5f:30:14:8b:b8:e2:8e:84:8f:6d:28:b6:
c6:06:84:47:63:dd:fa:81:9c:48:75:1b:a9:8d:aa:
3b:6d:b4:a3:e4:80:38:48:13:77:cb:11:1a:89:ce:
fb:57:88:29:4e:ac:1a:10:58:6c:e6:a6:bd:25:c0:
6a:a7:59:f3:32:14:9c:ae:11:05:bf:41:53:6c:3a:
f5:0f:38:74:03:64:b8:e1:cb:f5:34:d2:47:df:90:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:96:00:7C:24:53:97:99:6D:50:0C:F5:B6:45:C9:9B:6C:9F:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f507e119-d53e-3e89-961e-ebb81998b684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a4:17:aa:c8:13:58:51:4f:42:e8:f3:43:83:d8:4f:43:78:
b7:35:87:11:06:7e:94:ee:9a:88:0e:ca:17:d2:8d:7e:52:0e:
05:53:df:16:cb:e3:fb:27:d1:f2:53:48:ac:e2:76:27:af:92:
3a:14:84:55:41:7e:16:2e:7e:cf:c1:c0:0a:80:1d:1f:8c:f9:
79:73:13:9d:68:6f:a2:e1:3f:ec:ca:46:59:fa:17:4d:4d:a1:
12:68:e5:a0:a2:c0:00:8f:ca:0c:1d:c1:c5:f6:eb:80:aa:64:
bd:1d:e1:7d:9c:65:d4:c5:93:5c:9d:0c:04:d3:0f:4b:41:2e:
d8:6f:bd:5c:b0:ca:ea:46:2a:d2:d1:29:1d:2e:d4:c1:f7:2b:
dc:ca:c9:d6:77:f9:8f:1c:4a:51:68:92:24:98:35:8c:5b:4d:
09:62:27:6f:20:91:21:c1:23:0a:5a:ce:d4:53:f7:cd:2b:67:
cd:03:d5:ee:c9:03:84:39:05:14:33:f3:52:e0:16:1a:e9:f0:
6f:d1:d5:cb:f8:61:11:c2:80:40:ca:27:8c:57:d0:e2:d6:5e:
22:df:50:cc:9e:ae:0e:87:7f:af:bc:7a:d7:6e:e7:90:22:e1:
46:df:1a:18:8e:39:d1:0f:3d:01:82:81:9f:45:91:30:dd:c9:
6f:78:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:36 2025 by rpki-client