Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25b07d95-d7b6-3ba1-b55f-cfe4d13a06d7.roa
File: 25b07d95-d7b6-3ba1-b55f-cfe4d13a06d7.roa (raw, json)
Hash identifier: tr7qATLjouAMxgqb6IQaFCNA5XJJVAxSczyk+oXrT7k=
Subject key identifier: 29:EA:FC:D8:06:38:C6:93:1B:BF:09:D2:5B:B7:F4:7A:78:4E:1F:AB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289D93D82D4F69B48290A40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25b07d95-d7b6-3ba1-b55f-cfe4d13a06d7.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 75.91.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:d9:3d:82:d4:f6:9b:48:29:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=a28cb980-79a5-45eb-ab17-95b46ca1b7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:6f:9f:dd:5f:53:3e:1d:0a:ce:ec:92:65:
e8:f7:3e:c9:dd:6e:d5:d8:5d:37:36:95:39:59:31:
d0:5c:96:35:6a:c1:50:a9:8a:ad:57:55:0b:c7:30:
6c:53:4a:d5:6f:46:f7:93:2f:2e:b3:76:a6:4e:35:
f4:1f:0c:ef:23:6e:5e:7f:1a:a3:a2:16:40:86:59:
80:4e:ea:9f:76:8e:38:3b:ab:50:22:9f:74:68:ed:
d0:56:fd:2b:02:b6:cc:e4:68:6e:fa:f9:30:3c:e2:
19:df:15:87:e4:7a:8b:84:93:0d:82:61:2e:1b:4b:
ab:83:ec:f3:44:0b:ec:85:c7:52:a0:25:45:c8:d3:
aa:b7:00:68:66:07:87:2c:2c:b2:71:93:8c:a6:38:
8b:79:ce:52:cd:55:22:e3:61:0a:82:0f:76:0d:04:
e0:c9:bf:5e:e9:77:91:6e:56:b1:1d:32:0a:20:6c:
ac:2a:80:26:79:f5:94:8d:94:2b:61:65:ec:6a:40:
2a:d4:3d:df:74:70:47:27:87:b7:d2:b8:15:69:af:
99:0c:18:71:99:ca:a0:4d:ed:cf:9e:14:67:f5:c2:
ae:d9:e0:c9:99:c0:fe:de:c1:be:fc:61:a6:7d:c7:
bc:bf:75:b0:a5:19:86:f7:69:c3:d1:d2:aa:cb:6a:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EA:FC:D8:06:38:C6:93:1B:BF:09:D2:5B:B7:F4:7A:78:4E:1F:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25b07d95-d7b6-3ba1-b55f-cfe4d13a06d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.91.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:20:7a:6e:b9:a8:ed:af:1f:ff:c8:bb:99:de:62:38:b6:69:
58:43:24:9a:52:92:b6:06:0b:e4:76:52:62:bd:05:ad:fd:40:
6c:6d:87:89:5d:12:8d:70:b5:6d:2b:8a:de:e9:12:95:16:a3:
67:d8:ac:7d:f3:e1:15:96:02:ec:1c:f1:3e:44:37:ac:ee:57:
67:34:a9:55:85:54:f7:58:28:e0:36:2a:87:ee:98:22:35:dc:
8b:37:b1:03:35:b5:7c:41:0b:01:d7:c4:16:cf:ab:10:2c:4b:
d2:ef:76:45:ea:d3:0e:d6:79:a3:fb:59:41:1d:8f:1a:bc:d5:
26:d5:04:b9:ea:2d:c0:23:bc:7f:63:08:a2:97:dc:bf:a1:70:
eb:eb:77:62:95:0c:94:02:40:9a:0c:51:9f:c8:87:cb:4a:54:
04:0f:29:e8:d6:8f:c8:29:10:3f:d1:01:af:31:1e:51:5d:5f:
06:65:5f:e6:81:da:1a:41:4e:fd:2a:fd:3f:9b:da:9a:da:28:
7b:1c:91:96:fe:0d:a0:11:18:61:21:38:d8:cc:b0:7d:51:d6:
1a:de:82:44:3b:b7:4b:d2:ce:ba:eb:de:30:8d:f5:1c:d3:51:
40:0e:39:8a:44:7e:5f:3d:ae:04:03:7d:40:ec:46:4d:14:9b:
af:b6:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:45:07 2025 by rpki-client