Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0e2981b-2116-3fa8-95ae-e5693980d3b9.roa
File: c0e2981b-2116-3fa8-95ae-e5693980d3b9.roa (raw, json)
Hash identifier: ueRG7/xf0w3KS/Pble5K01sG1paTNUxKzL3oFsVsags=
Subject key identifier: 78:F3:9B:D5:73:F3:50:73:C7:9E:C4:6C:F4:FE:74:E1:AF:86:E2:10
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858455332FD35FA791C3D9775ACE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0e2981b-2116-3fa8-95ae-e5693980d3b9.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 75.117.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:32:fd:35:fa:79:1c:3d:97:75:ac:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=afbf36a4-b46b-4a20-992e-3ea7318343c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:37:c2:6f:45:25:66:b2:eb:f2:26:dd:8e:
a3:8c:1e:d2:88:f3:e9:06:46:d9:c3:fb:d3:cf:b5:
d3:c9:41:5d:71:d8:21:3b:e4:fa:e8:3b:a5:e9:9c:
ad:5a:0b:2f:e5:e8:48:60:ba:7a:bf:ea:44:e0:e6:
f5:67:a1:23:3c:89:6f:d2:0a:6a:2e:17:a1:33:7a:
b9:0b:95:10:38:e2:a9:11:b4:4a:51:e0:ba:7c:49:
d1:a7:bc:e6:e0:b7:9b:2c:d6:07:d1:d0:af:a6:8d:
ba:a8:8a:ef:9a:fc:a4:46:5c:64:92:a4:a6:54:6e:
e9:fa:47:4a:f6:bd:07:8c:63:4d:86:c3:9c:77:15:
48:4c:78:ff:39:be:46:03:18:8b:84:28:a8:a0:24:
56:c2:69:56:1e:95:b0:19:7c:30:00:b5:1f:63:ef:
8c:1f:ae:b2:9c:7e:69:49:50:ab:c6:65:14:a0:e9:
3d:37:6f:6f:0d:de:3a:b8:14:78:1a:6c:7d:28:98:
cf:cd:ca:31:aa:18:8b:ac:fb:8e:95:90:4b:97:3c:
a5:69:ab:bb:66:50:67:21:19:05:dd:c6:9c:97:3b:
3a:d4:89:f9:6d:0a:3c:2b:cc:32:5e:80:6c:77:ad:
4d:cf:74:73:24:fe:0c:2f:0a:51:3d:9f:f0:02:8e:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F3:9B:D5:73:F3:50:73:C7:9E:C4:6C:F4:FE:74:E1:AF:86:E2:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0e2981b-2116-3fa8-95ae-e5693980d3b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.117.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:a4:03:c6:f3:a9:30:ac:cd:fe:04:46:a4:50:7b:2f:cc:fd:
fa:41:80:6c:59:16:f4:41:4f:52:74:11:05:3d:ac:0b:d9:7c:
c9:ff:51:bc:fc:ad:87:af:15:3d:cb:a4:e4:cc:a3:e0:0d:2e:
15:95:8c:9c:c2:43:89:14:e7:dc:d0:54:61:29:4e:df:ff:4c:
63:3d:34:f6:7f:ec:d1:d4:c8:b3:5b:32:ba:a2:c2:3b:8d:59:
f8:5e:4c:14:ad:a9:08:41:e5:85:01:d2:41:ce:32:34:4b:7b:
03:0c:cb:38:d2:b8:47:bf:bb:99:0f:eb:cb:da:5e:7a:b1:3e:
22:54:d3:d9:79:c9:81:04:92:2f:1e:e1:69:84:3a:b1:ed:85:
81:ac:5c:2b:f5:c2:69:2a:1f:14:ea:72:34:46:1c:ce:ef:5e:
96:bd:b6:af:cf:c9:99:b8:ff:98:7a:d1:07:2a:e1:ce:b4:4d:
6a:67:58:d3:b8:41:33:df:5e:e9:71:7a:f2:75:aa:59:3c:95:
58:2d:4a:f3:c4:17:dd:81:86:ed:02:88:f2:79:dc:9c:4b:70:
7b:0d:0b:38:fa:c8:9c:52:58:57:10:11:79:f4:7f:72:cf:49:
63:98:3e:6f:80:76:d6:88:fb:1a:cc:37:d3:c7:b9:98:18:1b:
fe:14:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:48 2025 by rpki-client