Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdce3f72-500f-3345-bac2-e46cb70ea9d9.roa
File: cdce3f72-500f-3345-bac2-e46cb70ea9d9.roa (raw, json)
Hash identifier: tKJv8qFkZjPS92d14n8UGGBaelW7itzACoOpB/j80oQ=
Subject key identifier: D8:51:52:DF:6D:D9:DB:5D:8D:B4:10:3D:86:BB:9E:37:8D:8D:F1:C2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0755B580F9A02685A1080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdce3f72-500f-3345-bac2-e46cb70ea9d9.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 71.28.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:75:5b:58:0f:9a:02:68:5a:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=af49dcca-437b-4636-a1d2-d5f7fc0b0c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:78:7e:c1:5f:ab:47:c0:5a:b3:9f:b6:e9:
f6:9e:2a:c1:cc:31:bd:82:9b:17:e8:9f:1a:5d:66:
22:d1:ec:73:fc:ff:bc:c7:59:5e:6a:43:76:06:30:
4e:e5:8f:39:3d:79:92:87:1a:f3:9c:74:1a:05:1d:
47:cb:1f:8b:d7:de:d8:9b:ee:45:50:0a:59:40:61:
c8:0a:3a:b5:ea:65:eb:56:03:d8:7d:4e:d1:f8:08:
b3:1b:d5:e7:48:61:56:6f:72:21:d8:0f:c2:09:ca:
dc:f9:71:3d:6a:2b:95:d1:80:05:4d:43:7d:ad:40:
a9:e6:df:21:55:d4:da:5d:4b:a7:58:44:0e:63:12:
9a:e0:2d:f2:b3:9a:30:35:bc:13:35:08:65:c3:bf:
10:8a:6f:76:ac:b5:be:ef:63:b5:d6:6f:17:7f:b6:
a1:80:57:e0:be:00:26:8c:85:7d:a4:22:c5:83:a4:
75:5e:c3:23:41:08:c8:2f:67:79:22:3d:46:b6:2c:
85:ea:b0:d3:72:80:4c:e8:45:00:dc:eb:d3:45:a4:
9b:68:19:c7:94:a1:ff:b9:ed:fd:9d:18:0e:f7:0d:
fb:ea:01:99:77:2c:94:c9:ae:e7:48:fd:d9:1a:3f:
de:3d:c3:4c:e0:88:25:a5:cb:d9:ce:1c:c2:a0:5c:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:52:DF:6D:D9:DB:5D:8D:B4:10:3D:86:BB:9E:37:8D:8D:F1:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdce3f72-500f-3345-bac2-e46cb70ea9d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:4b:3d:fc:b3:e3:57:37:d2:9c:0a:80:a5:78:b4:66:dd:0d:
09:4e:2d:6d:4d:74:93:d0:27:53:26:5a:c9:38:71:8a:10:9d:
1c:d1:b7:37:e8:f6:ac:e6:e4:5a:cf:7e:95:d8:d5:e9:6b:78:
4c:36:89:f5:ed:9c:9e:32:95:04:43:84:a5:1a:fa:c9:87:ed:
fb:e9:48:f2:31:7f:05:61:e3:e9:3d:16:96:00:30:53:ca:37:
67:9f:be:fe:4d:c1:7e:85:74:1d:af:d1:53:4f:db:2a:d6:6f:
b6:35:3d:a3:ff:dd:77:34:17:c3:7b:a3:84:8f:6b:0a:84:bc:
02:19:97:18:fb:54:59:c1:00:14:56:09:8a:7a:e1:ac:3f:02:
bb:b7:81:26:4a:9b:0e:52:47:2f:89:1d:c0:dd:f4:9e:b1:6f:
3f:c7:9b:92:36:46:a9:c5:1d:7c:b2:72:99:6e:22:6a:d4:01:
fa:ab:95:d6:e1:4d:16:0a:fe:fb:dc:77:57:b4:96:8b:c7:7f:
25:da:1d:5d:7c:29:bd:5e:ef:3f:b1:14:d1:f0:e6:1c:97:5f:
28:f7:34:9e:4f:c3:60:dc:69:88:38:71:56:6f:c0:1f:53:f7:
34:5d:2f:0d:1d:8f:ad:6a:ac:10:cf:0f:ee:16:25:72:01:c9:
50:22:76:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:11 2025 by rpki-client