Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d276501-c7cd-3811-a4e1-8c0072f8b1a4.roa
File: 3d276501-c7cd-3811-a4e1-8c0072f8b1a4.roa (raw, json)
Hash identifier: HxTfrnOj0eU13T9RgLnyGiccOSPpMOy3+n0Y+W/FwCI=
Subject key identifier: CB:C0:CA:87:B4:39:94:7B:84:4C:33:61:25:68:E5:15:21:E6:11:C0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289D999245A6B493DD9BA00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d276501-c7cd-3811-a4e1-8c0072f8b1a4.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 75.117.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:d9:99:24:5a:6b:49:3d:d9:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=5846d23e-4b5e-47b3-802c-91c3ae84e9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:5f:4d:47:7f:8c:ee:53:fe:37:0b:68:d7:
e3:55:9b:ab:2b:4c:06:c5:ac:3a:ba:07:76:b3:e4:
cf:d8:67:76:97:39:c7:eb:e3:46:ff:b0:e5:9f:a3:
ff:48:cd:f6:be:ad:dd:9b:a3:78:db:cb:c3:e3:d7:
24:51:06:bb:0b:05:f0:77:43:95:a2:68:bc:1f:d9:
25:a2:9d:24:ae:6f:eb:01:65:44:57:ef:da:21:23:
e8:8d:2d:c2:15:3e:66:66:4d:df:c9:dd:3c:31:c9:
5e:fb:12:8a:e6:b6:7e:4d:d9:2b:b4:b0:9a:d5:7c:
e3:47:7f:fb:a5:05:16:c3:6b:63:c4:8c:55:5c:45:
5a:89:67:9d:f4:d0:e0:c7:fd:40:43:d9:55:13:ff:
cf:fb:37:13:a7:b2:51:1d:08:83:7d:c5:4f:1a:64:
ab:97:a5:74:4c:77:a1:02:25:38:24:54:ef:fe:ef:
05:9c:42:4f:c3:51:94:c0:3b:10:0f:fd:23:8f:3a:
f3:03:dd:08:bb:f6:e1:04:98:ae:33:96:75:59:5f:
c3:8e:e7:45:33:3c:ac:7f:4f:79:35:76:c1:9e:30:
a2:be:37:09:f5:dd:21:2b:4e:27:26:0e:7f:4d:b5:
1b:83:08:7f:4c:fe:ab:6f:26:91:7b:1c:fa:2a:61:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C0:CA:87:B4:39:94:7B:84:4C:33:61:25:68:E5:15:21:E6:11:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d276501-c7cd-3811-a4e1-8c0072f8b1a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.117.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:43:ca:77:85:53:68:30:23:53:11:d1:d6:e5:a6:e7:ca:ec:
da:16:2e:d9:2d:95:18:3a:ef:9f:68:dd:19:83:bc:15:b5:48:
26:c6:bb:fb:ab:7a:68:30:52:83:8b:3e:ef:a4:74:c3:4d:17:
d1:e2:0d:8a:e4:0c:e6:03:09:5c:85:3a:f2:14:70:f8:f3:31:
6f:83:48:d7:07:1d:24:9b:c8:6a:fd:f0:80:9e:e8:77:ea:28:
9f:b4:26:6d:a6:cb:e8:eb:ea:5a:11:f0:7e:10:95:b2:f1:44:
dd:1e:00:6f:56:95:3d:c4:14:06:2d:73:26:18:70:b7:a1:56:
51:36:23:2f:67:2c:60:78:3a:c6:b6:0a:7f:e1:61:c7:ba:cc:
90:dc:d7:29:02:ae:77:ad:a4:f9:cd:67:bb:d0:59:7e:0d:86:
50:60:69:b2:84:70:6f:c3:97:d0:67:c2:6d:bc:1c:46:a8:b1:
47:38:31:ce:d3:87:cb:a1:87:0d:e0:57:41:1e:71:df:ac:a4:
d6:fc:ab:d8:62:f2:4f:4c:a1:84:0d:9c:f8:d0:20:38:1d:b0:
52:0b:56:14:f6:38:8d:d6:ff:65:0c:64:ee:af:1d:11:ca:02:
b9:6d:1c:a0:e4:49:86:12:01:0a:0c:71:3f:9c:98:7c:48:00:
65:64:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:51:30 2025 by rpki-client