Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10aad3e4-4596-3b98-bcdd-3945b3e6289e.roa
File: 10aad3e4-4596-3b98-bcdd-3945b3e6289e.roa (raw, json)
Hash identifier: RS+h8v+OUF0tliklL2D28QnjyZ/Ku8KKKrqV8y7Swyo=
Subject key identifier: 36:C9:B5:09:C2:8F:E1:E6:B7:9C:AF:2A:DF:D1:B0:AC:73:48:3F:CF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285846434A52F76D944A24B1C69180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10aad3e4-4596-3b98-bcdd-3945b3e6289e.roa
Signing time: Wed 19 Jun 2024 13:00:34 +0000
ROA not before: Wed 19 Jun 2024 13:00:34 +0000
ROA not after: Tue 17 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 75.88.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:43:4a:52:f7:6d:94:4a:24:b1:c6:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 19 13:00:34 2024 GMT
Not After : Sep 17 13:00:34 2024 GMT
Subject: CN=a173f636-7313-4bd6-a8c5-8cf4a7e37bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:c3:20:92:52:ce:ac:09:02:c1:c6:a6:09:
26:25:b8:eb:ed:22:3f:da:e1:9c:46:a4:26:12:9f:
f0:87:72:73:d3:19:08:a4:81:a4:2f:eb:c7:b9:66:
06:cc:5a:a5:fe:98:34:a1:72:08:f3:c5:bc:0b:a8:
03:e9:bc:96:2c:7c:bf:22:06:e6:c5:61:8b:6d:d8:
73:82:73:0b:1f:6c:47:a2:e6:f0:04:67:f1:9f:7f:
ff:e4:b5:0d:0c:91:b1:7b:ee:6f:59:76:88:32:39:
51:93:75:43:7f:a9:97:60:8e:a5:85:7b:16:51:19:
82:d3:3f:ad:ab:df:29:db:a2:7d:e3:b1:8f:5a:c0:
f8:e8:c2:08:db:78:c9:24:db:2a:42:c1:71:c8:4b:
0a:a9:c7:d5:81:ad:09:28:f6:47:49:b0:e4:59:48:
bb:57:dc:05:38:4a:90:cf:1e:8d:39:e3:4b:54:15:
70:d3:77:57:54:45:fb:52:b2:7c:81:b5:20:f7:96:
85:41:99:26:57:38:33:64:61:e2:a9:b8:ae:5a:3b:
70:91:76:2f:2d:92:1e:43:53:32:6b:2f:ac:9b:7b:
f4:95:62:6a:bb:47:58:72:4a:83:d5:5b:05:90:42:
26:71:a6:ef:f9:b7:7a:a3:e9:4d:3e:34:e5:f3:d3:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C9:B5:09:C2:8F:E1:E6:B7:9C:AF:2A:DF:D1:B0:AC:73:48:3F:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10aad3e4-4596-3b98-bcdd-3945b3e6289e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:d4:c4:87:83:98:04:6d:8c:6e:30:94:73:fc:31:40:87:3d:
a4:f4:a4:14:54:9f:9b:9b:4a:c9:40:ab:89:14:20:e3:7e:9a:
2d:8c:4c:92:52:bf:9d:1f:47:ad:27:79:53:16:28:93:1c:cd:
13:d7:30:c3:c0:78:d2:44:fc:bb:7f:65:96:71:1c:86:4a:31:
55:d4:07:5d:cc:fe:88:96:d6:88:51:a3:7f:a4:5a:bf:5a:81:
56:80:8e:a2:bc:c2:a9:53:96:45:19:89:68:52:5b:2f:21:33:
4a:0a:03:9f:92:44:ed:3d:56:69:3c:d2:09:9c:2a:51:ce:9f:
eb:bc:91:7a:01:81:0f:83:9a:87:49:a5:e4:6c:5f:8a:a6:fc:
4c:fb:3d:a3:92:b4:3b:6d:56:6e:53:a3:ca:d3:cb:20:4b:97:
01:4d:05:31:1a:c7:6d:f6:45:55:e1:73:5e:6f:70:2b:22:83:
80:0b:6d:43:5a:f4:90:ec:60:3a:11:e0:dc:f6:c9:b1:0d:9f:
91:d6:e4:75:d7:68:a2:c0:e5:13:38:9e:ce:89:48:2b:d0:8e:
81:fd:4e:2b:77:24:0a:d3:d5:78:44:23:60:8f:41:ba:1a:48:
9a:78:b4:c4:b4:bc:85:90:bc:32:6a:37:5c:c0:89:d2:a7:ab:
10:c5:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:03:06 2025 by rpki-client