Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4455c543-bdf2-3da3-a9d9-b4605ea3ab0d.roa
File: 4455c543-bdf2-3da3-a9d9-b4605ea3ab0d.roa (raw, json)
Hash identifier: fGADIJb1xGEqanq13hINU1oPtYWHQM2dR6/A5/g8ByE=
Subject key identifier: 52:81:39:5D:3F:5D:08:13:3D:A6:3E:98:58:D3:D1:62:64:37:5B:F5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858455332E93B408200809FAECC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4455c543-bdf2-3da3-a9d9-b4605ea3ab0d.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 67.224.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:32:e9:3b:40:82:00:80:9f:ae:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=b6591996-57de-49fd-847a-ae91c6213bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:7f:5a:a2:b0:fc:f1:c0:f2:4c:97:d3:8c:
19:3c:19:dd:5a:68:cd:cf:2e:0b:11:f5:aa:ab:a4:
4b:9a:4d:c7:9c:d2:41:89:1d:38:a3:0b:ae:da:97:
57:7d:88:30:07:5a:fd:d8:4d:66:a0:58:06:56:40:
1a:1e:57:c5:56:a2:a3:9f:68:e7:be:2b:03:2d:2e:
1f:95:e3:2f:c6:47:55:3b:be:e1:f7:00:ac:22:79:
5d:c6:87:75:89:9f:6d:e0:2f:56:91:ce:73:af:d1:
3e:6a:3c:d9:33:a9:cd:f4:6f:ac:d8:e0:21:aa:e2:
91:4e:11:73:65:36:9a:11:46:f9:63:47:88:43:ec:
7c:d9:bb:09:38:02:59:cd:0b:4b:b4:15:6d:e8:55:
bd:c0:a0:b1:73:fd:70:62:d8:41:6e:c9:4e:22:2f:
ec:6f:4d:97:63:36:7c:62:89:1f:9e:2c:73:4c:99:
2b:5a:69:1b:e6:71:1f:10:67:2b:bb:44:fc:cd:8c:
da:31:46:08:e0:52:be:94:6c:96:7f:5b:60:05:27:
7e:67:ca:5d:3e:0e:31:3b:0e:fc:ee:75:95:70:44:
72:76:f2:41:06:29:56:9a:f6:c6:ef:f1:b3:53:9a:
02:f1:cf:95:97:19:b7:24:69:39:8c:4d:6d:60:76:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:81:39:5D:3F:5D:08:13:3D:A6:3E:98:58:D3:D1:62:64:37:5B:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4455c543-bdf2-3da3-a9d9-b4605ea3ab0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.224.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:09:72:38:e8:c2:2b:bb:25:a0:19:5e:de:99:60:58:64:1f:
95:fe:87:03:d4:85:87:60:11:ae:50:2c:25:81:24:80:90:69:
a3:e6:b6:94:6a:77:ef:a8:11:b5:46:83:f7:2c:9c:57:08:1c:
99:df:d0:07:ea:99:24:56:f1:e8:2e:a6:b9:6d:5e:18:d8:0a:
05:46:3d:2d:61:c9:04:7c:c4:51:db:b9:eb:af:49:37:6f:c6:
c3:58:56:8d:99:0c:83:4e:37:23:40:35:53:ce:01:72:39:1b:
14:e3:34:0b:84:e0:21:82:ea:82:bc:26:23:82:e6:a0:55:83:
39:8c:19:bd:23:43:7b:e2:ca:48:4a:92:d8:d7:72:59:13:9e:
7b:bb:08:35:31:c0:a3:46:fc:e2:8b:d8:87:44:ba:70:61:36:
e3:f3:20:e5:e8:57:65:37:2c:61:b1:04:a8:dc:0e:d7:9c:93:
bc:eb:a0:f5:34:6a:8f:92:79:23:e7:3c:b4:1f:8b:12:15:df:
07:ca:5c:92:c7:91:ca:05:c9:8e:f5:98:f0:cd:37:1c:d5:10:
1b:9a:4f:de:dd:5d:50:42:6b:e0:e2:75:ed:00:d3:ac:88:07:
b9:19:ce:1d:a4:d7:c7:41:c2:e4:5e:7a:54:a8:9b:bd:17:5f:
20:d6:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:16 2025 by rpki-client