Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7813b835-e4f2-3f75-bf4d-9413273046a2.roa
File: 7813b835-e4f2-3f75-bf4d-9413273046a2.roa (raw, json)
Hash identifier: Wty8AH0+asIU21V3mIsP2SyZN4pxQT7S8fOycqqZtD0=
Subject key identifier: 50:FC:7D:DD:76:98:2D:06:28:1F:CD:F0:89:2A:D6:09:76:CD:BB:C8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E077892B133D05461BE000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7813b835-e4f2-3f75-bf4d-9413273046a2.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 72.172.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:77:89:2b:13:3d:05:46:1b:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=9ff0cb74-4286-45de-aa7c-5d74972e2db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:be:20:bb:e7:c9:0f:42:2e:2a:21:35:96:
fc:2d:82:a9:19:88:e3:2d:5f:53:a4:e0:d9:ed:bb:
37:7d:74:67:34:30:a1:ba:17:e1:00:e1:0a:9c:ae:
fa:2a:6c:17:fd:85:61:f4:cc:b5:3c:4b:75:4d:f2:
c5:80:d9:00:61:4b:29:38:1c:dc:48:4b:8b:72:d3:
46:6e:ca:21:42:34:c7:35:7e:a6:3c:f8:58:fd:9c:
12:96:fc:f2:73:e9:57:4b:00:fa:f3:0c:66:2b:68:
51:90:4b:27:db:00:cb:8c:dc:1c:c3:2e:9b:fb:de:
01:23:91:d5:b7:31:be:01:19:19:ab:2a:c6:e4:62:
95:7f:5c:90:b5:94:63:11:1f:d4:f9:57:ab:09:47:
54:5b:15:2e:f8:78:ad:bc:d9:93:6f:8f:cf:82:78:
d1:b5:25:1e:c9:57:c8:fb:a0:57:b5:23:01:18:48:
13:e8:40:08:1f:bc:6f:b9:e2:96:56:eb:7e:c4:b5:
e1:1b:09:64:d7:94:2f:5b:40:48:b9:b2:70:b5:32:
48:7e:2b:62:21:7d:49:76:65:56:31:d3:ee:93:7d:
02:a7:36:f3:73:47:33:ef:ea:4f:25:9a:48:d7:23:
d1:39:fa:d6:1a:0c:d1:35:05:e5:93:8d:53:09:1b:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FC:7D:DD:76:98:2D:06:28:1F:CD:F0:89:2A:D6:09:76:CD:BB:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7813b835-e4f2-3f75-bf4d-9413273046a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:5f:6f:97:1f:ab:b4:0b:c7:8c:8d:7b:5a:54:4b:46:45:e9:
aa:9f:f1:d2:22:b9:64:e2:67:a3:87:4c:62:29:c9:d9:6d:8c:
22:d0:01:4f:a4:03:72:a4:c9:63:71:45:eb:8b:8c:e8:30:f3:
d9:cd:a2:22:93:2c:86:5f:75:0e:56:2b:64:dc:8e:40:5a:5a:
f4:ee:e0:50:d2:ed:c7:c8:e3:70:6c:c5:0e:ff:4f:6e:63:12:
fb:50:a1:ac:c2:13:e1:8c:c9:09:e0:21:62:58:f2:c3:96:73:
a3:65:07:80:14:cb:3e:44:f3:af:15:27:6d:15:a5:78:5a:5f:
ed:07:60:b2:d0:dd:41:10:3b:ca:d4:bd:c5:52:7d:f2:18:94:
48:c1:40:04:a1:4b:05:93:8a:6e:6b:ec:43:e4:76:20:77:7f:
2a:83:47:27:44:71:68:e0:d9:fb:8c:46:9c:97:7d:49:6c:cc:
87:71:34:0b:50:61:11:4c:3e:31:41:ec:3b:e0:e0:d1:ba:82:
2b:31:6e:10:3f:78:69:77:46:e8:72:f2:40:07:6f:2d:0e:c7:
a8:ee:d4:ab:17:7f:1e:47:55:b6:0c:4e:66:85:8e:4b:f5:22:
92:db:0c:a7:a6:97:ef:ab:c0:35:4d:83:a9:42:03:38:ee:9f:
8d:cc:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:02 2025 by rpki-client