Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3fa0d38-5353-3494-8874-bc6cdfe323dd.roa
File: e3fa0d38-5353-3494-8874-bc6cdfe323dd.roa (raw, json)
Hash identifier: gPyXtOsO3/9dTIhesQacC/IcA2BQzA0b4zXE0I1TNMQ=
Subject key identifier: 0D:76:71:E0:7C:3C:BB:80:EC:2D:35:84:42:FB:A6:4D:42:1E:35:9D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289A31771F2AC4679AFCF80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3fa0d38-5353-3494-8874-bc6cdfe323dd.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 75.88.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:a3:17:71:f2:ac:46:79:af:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=fc83d57b-617b-4194-9e30-3a59b5828d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:8e:67:40:56:8f:78:10:a1:9e:aa:a6:fc:
53:a4:25:4c:eb:d9:f3:90:a0:5f:9b:51:0c:f9:ac:
0c:3b:2f:29:cb:4d:fb:e7:38:ea:cc:a5:a6:4d:39:
b6:e8:05:00:fa:70:0f:15:d4:fd:ee:1a:68:5e:d7:
57:a1:6a:5d:a0:fa:f9:29:27:f2:80:65:52:be:15:
b2:4f:3f:d5:a5:3a:19:56:59:4b:a7:63:d0:b5:28:
6a:69:74:b9:dd:84:96:39:6c:f2:cb:cd:eb:fd:d1:
bc:c8:00:50:65:59:e1:d5:45:46:64:76:b3:dd:38:
29:ec:54:d1:df:25:d5:dd:b2:bc:a8:88:ff:28:be:
09:5f:b8:c7:95:09:2e:08:a9:eb:40:1c:9f:5e:2e:
30:6a:8b:c3:b4:db:93:28:09:7e:8b:13:c6:31:11:
98:a2:ba:0e:0e:33:65:2f:c7:94:52:da:85:28:0e:
bc:54:d0:95:fa:9c:53:cf:e7:f0:c6:6c:d0:6e:66:
f9:98:57:4e:0e:6a:40:4f:40:66:e5:97:7c:b2:78:
7d:d0:d2:b6:8c:b4:c4:a1:de:59:0e:90:47:cb:10:
89:36:5a:2e:29:f2:54:66:4e:ea:cd:c7:60:95:8b:
af:38:7f:c0:e4:35:b2:13:7b:5f:5f:32:82:d4:e9:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:71:E0:7C:3C:BB:80:EC:2D:35:84:42:FB:A6:4D:42:1E:35:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3fa0d38-5353-3494-8874-bc6cdfe323dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:2d:b2:1a:d8:51:65:a9:34:95:8c:23:01:54:22:57:65:33:
f8:c3:e3:bb:1c:82:e4:13:e9:ec:5c:aa:4d:71:5d:27:09:23:
39:8c:fa:cc:16:f2:76:4c:df:b7:a1:3e:ab:6e:8e:b9:fd:0a:
67:8f:56:b0:f8:4f:47:81:de:c9:68:21:c1:20:0a:59:4d:7c:
90:87:33:95:8e:38:68:a6:f4:e8:08:2e:02:5a:5f:38:b9:14:
bd:67:d9:f0:ef:42:32:1f:38:dc:bd:48:8d:31:bf:8b:20:1c:
99:c9:4d:d9:15:e7:49:1e:33:5e:94:a2:1b:c9:43:de:94:d3:
f3:db:82:d9:d1:70:ae:9a:0a:07:dd:6f:ac:fa:e6:87:28:3f:
3c:fd:27:61:e7:98:2c:d7:66:fa:83:67:8e:0a:07:51:53:de:
a1:35:dc:81:5b:d3:b7:de:c6:b1:db:bd:27:b9:fb:5b:6e:aa:
29:52:8c:cd:98:bc:17:0a:1c:24:21:67:ef:9b:76:5d:cc:f6:
6e:08:64:60:9b:22:69:bb:09:27:dd:7c:fc:f5:1d:ea:96:48:
9a:4c:db:b4:cd:33:68:99:2d:56:a9:6a:55:35:03:d0:70:72:
20:ed:08:70:3c:bf:d5:c4:04:33:28:f8:06:d0:7a:41:c5:28:
be:b0:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:40 2025 by rpki-client