Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5f04e48-9ba8-31b7-b9b6-3da43a11767d.roa
File: f5f04e48-9ba8-31b7-b9b6-3da43a11767d.roa (raw, json)
Hash identifier: 24xgkM2nNBTZL7NiIi0dtGhvgHVzxjqjInaPs/VrKwQ=
Subject key identifier: EC:27:43:B4:15:DC:85:FB:FA:13:53:4D:70:AC:F0:8E:D1:84:D0:FD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B2FC9325C5255B97C61F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5f04e48-9ba8-31b7-b9b6-3da43a11767d.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 577
IP address blocks: 64.229.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b2:fc:93:25:c5:25:5b:97:c6:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=1603a9a4-f1fa-45af-9835-654561f30c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:5a:9e:13:26:dd:c3:a3:9e:b6:5c:1b:5b:
4a:59:50:3c:cc:90:41:8a:b4:ff:6f:8b:10:26:d3:
b6:7d:63:7a:bb:bb:d8:14:f5:28:a1:0a:dc:66:59:
07:3c:dd:b3:0a:36:68:63:ce:b6:f5:88:0b:5c:ff:
3c:2b:31:b8:17:8f:e5:ec:22:00:5f:47:f8:80:dc:
56:97:0e:72:4a:47:0d:2e:31:b7:57:16:7a:bb:e6:
84:29:72:c7:9f:04:fb:3e:30:67:93:31:9f:0e:2b:
3c:b3:74:9c:aa:85:6f:eb:51:50:e1:bc:5f:b4:0d:
b1:87:40:05:8a:c8:6d:36:1e:5c:e2:51:f0:20:5a:
2b:dc:3d:a4:0d:f0:ca:4e:05:a1:78:31:ac:29:86:
b3:6a:73:4f:ca:73:ad:47:f3:ca:8f:37:69:b8:dc:
66:60:04:8f:dd:5f:2d:ee:d3:cf:5a:63:f8:6a:f2:
ac:d1:bd:42:e4:b4:a7:37:1e:ae:54:64:5b:41:cf:
de:09:bb:89:fd:49:75:ac:94:82:24:c0:75:0f:aa:
09:21:10:30:26:32:38:ac:c3:6e:5e:dd:3f:04:37:
48:44:2d:98:b2:9d:5e:5c:d0:f8:52:88:ab:e9:12:
a9:03:ff:16:ee:cb:2f:ce:b5:e3:6f:b3:17:f8:df:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:27:43:B4:15:DC:85:FB:FA:13:53:4D:70:AC:F0:8E:D1:84:D0:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5f04e48-9ba8-31b7-b9b6-3da43a11767d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
64.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:2e:4a:5b:1e:a7:6a:3c:14:4e:7b:27:8e:dc:84:d4:13:06:
f1:47:a4:c4:ab:13:e6:f7:b6:4f:af:ed:ec:c9:7c:dc:85:67:
2e:ae:61:43:e9:18:e0:40:a2:d7:48:c6:e5:50:2c:12:fe:12:
f9:d4:83:68:e6:ba:8a:f4:a0:d2:ad:80:41:f7:e8:14:e4:6d:
49:10:81:6a:88:7c:a3:4b:c0:e5:6d:f0:73:78:ea:95:e7:c1:
4c:c4:d0:3d:9b:c9:c9:be:7f:b8:d1:99:ce:93:8a:de:b7:f5:
a9:d6:b8:eb:3d:f3:73:8b:e0:48:0d:5d:06:ce:6a:f4:c6:a1:
58:a2:d2:cf:25:f1:d9:56:5e:af:7e:cc:5d:e4:54:7a:70:3f:
b6:41:6a:ad:3e:71:88:80:b5:88:63:94:8e:29:72:5e:ec:7a:
6d:fd:39:41:80:fb:9d:5c:de:15:17:34:41:08:5f:d8:9e:d1:
44:ba:71:e4:d8:d1:26:a5:18:5e:5b:1b:c5:3b:30:00:33:38:
5d:e0:dd:05:6e:a2:4c:3d:b3:48:e1:5c:5a:d2:d7:a4:52:52:
74:cf:0a:11:40:fd:bf:6c:63:96:88:f9:bd:74:4d:98:09:10:
61:59:63:36:65:a6:ac:c9:48:e0:32:81:7a:08:70:20:28:7f:
ca:ab:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:24 2025 by rpki-client