Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a855da1c-3469-32e7-a604-bf6f6ba11200.roa
File: a855da1c-3469-32e7-a604-bf6f6ba11200.roa (raw, json)
Hash identifier: N8oN1qzKeg+8APrvpMIw3H2ooOqc1GBeJi63FAY+KqM=
Subject key identifier: E1:FA:F6:78:47:84:60:4C:1A:87:B4:CF:8F:C3:AF:98:3B:8F:65:55
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584632899FC1A5572DBA0BC0C800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a855da1c-3469-32e7-a604-bf6f6ba11200.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 71.28.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:9f:c1:a5:57:2d:ba:0b:c0:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=045adcc2-7f5b-4676-ac44-a92eca4ee647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:4e:76:04:a5:7a:f8:92:7f:87:5f:97:72:
15:ab:ce:29:87:6c:36:05:9f:eb:3f:d8:aa:5a:87:
cc:a7:d2:b9:43:65:76:b9:db:95:ef:29:aa:e0:03:
85:0a:54:fa:b8:ad:d3:22:86:77:4c:7f:f0:05:91:
0b:e6:bc:31:11:7d:2d:86:bd:84:d3:d8:f6:45:cf:
e0:24:83:c6:bd:61:10:99:61:3b:04:db:69:31:1b:
03:40:19:b4:1e:e4:30:02:be:fd:de:e7:a8:e9:b6:
8d:1b:ed:3e:2e:62:f8:80:27:9c:5d:2e:f4:97:cf:
67:1c:f8:42:f2:0c:bd:9b:b1:55:52:3e:fc:64:04:
f9:c3:50:b3:8b:6f:3f:83:69:8c:c9:d7:f8:f3:f4:
60:30:a4:f2:3b:4c:67:e1:8b:c4:41:19:3e:58:41:
13:32:0a:33:c2:22:cb:11:c8:8a:cc:31:82:4b:f8:
cf:d3:75:48:7b:16:22:75:af:ce:a0:2e:66:47:34:
a7:0b:d4:71:9f:01:97:0b:54:a7:52:09:6c:54:43:
0d:09:2f:d1:ac:c6:24:20:77:7f:2f:b6:ce:73:35:
8c:8f:a9:31:88:65:46:9c:02:04:43:47:64:4b:74:
6e:4d:c2:41:7b:c1:b2:d5:53:74:15:82:ba:ae:04:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:F6:78:47:84:60:4C:1A:87:B4:CF:8F:C3:AF:98:3B:8F:65:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a855da1c-3469-32e7-a604-bf6f6ba11200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:8a:c4:7c:91:a4:13:db:ec:b6:50:d9:c7:8d:4c:81:e5:45:
7e:c2:29:9c:6f:ca:5d:69:e2:77:95:f7:dc:57:fc:25:cd:77:
4e:96:4d:26:08:2e:9c:4b:90:c4:84:6d:fa:e7:69:6e:d1:2f:
12:d7:20:37:27:f9:95:0c:3a:28:ca:8b:2a:45:d2:77:bf:f1:
a3:5a:a2:7e:59:69:c8:cd:7b:cf:6e:f5:22:6c:14:31:92:88:
43:ea:62:57:05:0d:e0:3d:f4:bd:9e:b0:c6:b7:14:25:5f:49:
7d:96:a2:c8:d0:c3:35:82:86:61:f7:c3:db:70:56:51:93:1e:
d2:7c:d2:c5:38:e3:57:d0:86:25:51:1c:7b:af:02:3d:d0:42:
29:57:ec:5b:09:54:d4:ca:37:ae:7b:2f:40:e7:58:26:d6:32:
2a:66:ba:0d:3e:62:65:c4:3b:ff:59:7e:d9:2e:07:c1:76:f9:
40:7e:b5:6f:50:77:09:43:4e:b5:35:d0:06:c7:68:f7:fd:7b:
dd:41:0c:3b:23:6a:1b:ff:e9:23:45:b8:fa:79:61:c9:68:8b:
a9:14:59:e9:b0:51:13:15:9f:38:c4:70:dd:26:a1:7e:6a:65:
15:b6:25:14:79:07:50:12:7c:5f:dd:29:a9:44:c8:53:90:3c:
a1:c9:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:58 2025 by rpki-client