Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5de1a55-61e9-3522-907c-fdfea71c3170.roa
File: d5de1a55-61e9-3522-907c-fdfea71c3170.roa (raw, json)
Hash identifier: 40QOsoQEn+Qj/5Q7ZWnpm2PLTK5oUmT6JROOK18Jk24=
Subject key identifier: EE:79:6F:38:45:94:C7:6F:B1:B4:A9:F7:FE:B6:E1:FB:35:B8:C3:53
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858468C6CAB33F4379996A2997300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5de1a55-61e9-3522-907c-fdfea71c3170.roa
Signing time: Mon 15 Jul 2024 17:45:08 +0000
ROA not before: Mon 15 Jul 2024 17:45:08 +0000
ROA not after: Sun 13 Oct 2024 17:45:08 +0000
asID: 7029
IP address blocks: 67.141.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8c:6c:ab:33:f4:37:99:96:a2:99:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 15 17:45:08 2024 GMT
Not After : Oct 13 17:45:08 2024 GMT
Subject: CN=58b75c77-379b-405b-ae2b-45e96163a0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:ac:06:3f:ff:95:64:de:a1:d2:9e:6b:94:
ca:7f:c1:ed:20:0d:38:17:44:7d:57:b7:d4:dc:04:
50:03:bc:5b:d6:e1:18:ca:a7:85:ea:34:fd:1f:fe:
92:2c:7e:b3:0e:04:ea:68:29:0a:d1:21:16:ad:4f:
1c:e8:d1:cf:6d:ba:7b:85:ea:dd:22:cd:6d:45:98:
52:ff:91:6d:17:ed:f0:96:a0:7b:0b:c4:c3:6d:26:
ca:de:e3:b0:80:70:be:b3:84:92:77:dc:58:86:3d:
82:9d:dc:c6:75:91:c2:c9:bd:d7:9c:6b:35:a8:5e:
d9:ba:e3:0a:5c:f6:47:79:a5:24:c7:59:64:61:90:
29:c5:a1:f4:e2:f5:d8:77:d0:63:a3:f5:a0:9d:3c:
61:e6:03:50:7e:70:b2:28:57:41:cd:cf:6a:a4:50:
2a:36:43:83:9a:a5:98:b2:9a:35:48:3f:01:d0:e6:
1f:d8:f6:ce:6d:f5:a1:c4:ef:da:4d:e3:f1:3e:81:
0f:3d:03:b4:87:80:b5:23:7d:57:54:74:e7:a8:5a:
38:b1:5f:f1:c3:a5:f3:85:1b:7d:95:96:c0:b3:4a:
8f:23:15:b9:00:f2:8f:db:92:83:d6:28:01:f1:da:
a2:d9:07:05:cd:cd:84:be:b7:b5:cc:71:c1:7b:53:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:6F:38:45:94:C7:6F:B1:B4:A9:F7:FE:B6:E1:FB:35:B8:C3:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5de1a55-61e9-3522-907c-fdfea71c3170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:d5:f3:b3:dc:b2:03:0a:ae:36:bd:58:7f:c0:97:6e:16:7a:
0d:fe:ae:f0:15:39:de:39:34:f7:ee:48:cf:0c:92:03:af:ae:
eb:f7:e8:2e:e2:64:9c:23:e7:5a:40:78:4f:cc:0f:36:d4:60:
5b:ed:6b:e2:31:19:5d:ca:3b:ac:34:01:a8:c1:5f:bc:71:92:
ce:5c:c3:03:8d:34:53:71:f6:62:ec:80:a3:a4:07:41:38:9c:
38:43:c3:3c:91:80:d6:68:6c:a0:33:71:3f:8a:05:5a:96:ec:
35:85:aa:5d:69:a5:c0:06:46:98:d8:ae:42:7b:03:5a:68:73:
0b:af:81:ef:86:e0:c9:9c:3c:68:ff:78:ab:df:45:8f:5c:75:
25:e4:ed:35:d8:c9:65:16:03:8d:64:eb:f8:79:8e:e2:46:26:
e6:16:e6:df:7a:0b:0f:a1:1a:b5:b9:63:98:cd:40:48:01:5b:
9b:a0:7e:b0:50:e5:80:13:e7:3d:04:16:d2:6d:09:7a:3a:27:
ad:f5:b4:73:fe:4a:92:91:ec:9c:aa:ad:18:9d:25:2e:f0:82:
53:cc:37:71:7b:fe:96:6c:51:71:18:cb:c1:34:d4:2e:30:21:
86:18:16:d9:f5:6b:28:1a:06:72:5d:97:74:6b:52:2b:20:de:
c2:a6:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:30 2025 by rpki-client