Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/442ce7be-73af-31b7-8180-d7fdd25d9579.roa
File: 442ce7be-73af-31b7-8180-d7fdd25d9579.roa (raw, json)
Hash identifier: x+kKIIRWtwCduInQD760/nNvEp3IXJCbqulxCumDR6s=
Subject key identifier: 7A:E4:E7:77:AC:9B:5A:E9:6D:E5:EE:54:FB:8B:87:F3:A6:2D:38:AC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289A07DBFCE07C77E3C9F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/442ce7be-73af-31b7-8180-d7fdd25d9579.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 71.29.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:a0:7d:bf:ce:07:c7:7e:3c:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=c5479538-76e3-4912-aa9f-cd04b469a935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:4c:63:91:d7:fc:59:3a:13:f8:7e:e0:2c:
a4:f9:57:bd:8c:2e:84:7a:b3:f4:ba:a5:01:ca:b7:
10:99:19:02:1d:e0:2b:b6:c4:5b:78:7e:6a:d7:75:
a1:35:38:21:22:47:19:d2:1b:ce:f0:72:6e:d1:0f:
f2:6b:b5:b0:a2:31:50:f2:e3:27:9d:de:0d:96:81:
41:50:cc:71:de:ae:54:6c:63:e7:0e:e6:c6:05:1d:
ff:0e:cd:a3:7e:f7:21:bf:f6:3f:ec:09:4c:53:96:
4f:dd:6c:a2:43:8b:8b:ed:42:ce:9a:3e:c2:30:2f:
b6:a9:ad:ab:cb:de:74:a9:e9:89:d1:a4:e6:38:8e:
89:fb:f2:27:70:51:25:e9:53:05:60:db:26:42:44:
20:49:58:bc:b9:a2:20:03:5b:b0:8a:7a:21:4f:02:
ce:ca:80:f9:dc:fa:9a:04:93:f1:cc:ad:27:1b:02:
32:a5:ca:65:e0:21:aa:59:06:be:04:0c:1e:a9:78:
ba:f1:ff:8b:62:cd:07:61:7b:8c:fd:8f:0c:0f:49:
e4:50:bc:78:65:09:c3:f1:7b:a7:4b:1e:67:f4:d1:
06:30:f0:47:90:bc:7e:4c:41:49:6a:b6:2e:a2:4a:
81:ce:20:b2:49:dd:fc:71:91:cf:bd:55:48:43:78:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E4:E7:77:AC:9B:5A:E9:6D:E5:EE:54:FB:8B:87:F3:A6:2D:38:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/442ce7be-73af-31b7-8180-d7fdd25d9579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:fb:a9:6d:db:e7:e5:38:8f:eb:18:2a:20:d3:1f:ec:09:8e:
ee:16:e3:63:83:44:d6:82:f1:d6:89:1b:b2:ba:2a:be:f7:41:
79:58:b8:49:60:ff:ea:0e:2c:60:43:fd:51:bb:44:ee:09:2b:
8f:a8:b2:e4:d0:c9:21:ae:18:a9:79:0e:41:ea:7c:b7:3c:2b:
d5:6b:7f:1a:9b:45:cc:5e:7d:62:92:67:7c:58:17:44:0e:c1:
87:47:5d:ee:1f:a8:5b:66:89:44:3c:3f:38:1b:0b:e2:15:34:
23:9d:a5:57:b2:4c:9b:83:11:de:f2:1b:5c:6b:aa:c6:da:e3:
e1:56:ed:c0:23:74:fa:b1:3b:48:c5:c2:a7:48:fb:06:a6:17:
81:1a:26:73:69:3f:70:81:0d:52:5a:7e:19:99:12:79:1f:e0:
8a:12:ad:cd:c4:b1:05:2a:d3:d5:59:5e:8c:c6:7f:35:d0:68:
69:dd:a3:61:1e:0a:cc:8d:85:13:a8:14:a0:8f:a1:fe:50:81:
99:b2:f0:c7:37:95:00:19:55:a4:39:56:53:6d:dc:ad:99:ad:
2f:75:64:08:b5:ed:c2:4d:c4:6b:ee:5c:cb:da:ed:ba:cd:7b:
d7:27:ea:c9:f3:a2:cf:bb:e6:86:a8:95:e6:d1:c6:a4:1c:c2:
f2:d5:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:19 2025 by rpki-client