Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/717f5c75-ab24-3a35-bdbb-816edc21e82c.roa
File: 717f5c75-ab24-3a35-bdbb-816edc21e82c.roa (raw, json)
Hash identifier: KR8u5GR9AtPQzECH6/gsA9rWw8Rrz4D0imCFq2sGdNw=
Subject key identifier: 96:60:7B:B4:C8:F6:E8:8E:13:0F:CD:0A:39:B5:BE:0C:21:CB:E7:9C
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F4328584863126734FA89B55325F8E580
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/717f5c75-ab24-3a35-bdbb-816edc21e82c.roa
Signing time: Tue 31 Dec 2024 07:49:00 +0000
ROA not before: Tue 31 Dec 2024 07:49:00 +0000
ROA not after: Mon 31 Mar 2025 06:49:00 +0000
asID: 834
IP address blocks: 72.9.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:12:67:34:fa:89:b5:53:25:f8:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Dec 31 07:49:00 2024 GMT
Not After : Mar 31 06:49:00 2025 GMT
Subject: CN=1f1f9d59-57e4-4713-8c80-0198672e96ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:7b:f2:74:f2:c9:38:e4:a7:1c:3d:ca:f1:
09:81:82:69:e0:a5:a1:99:f8:79:f7:59:1c:0a:c9:
c8:7e:33:dd:40:90:e7:2c:88:16:27:2c:34:97:ad:
d1:29:70:7c:a4:f7:02:37:42:06:6e:96:e7:89:47:
a1:f6:de:6c:4c:03:78:f5:38:18:2b:b6:27:17:85:
5c:8b:f7:24:5a:c0:92:71:d1:29:ba:42:7d:fc:21:
29:aa:a4:54:74:5f:65:78:c1:e9:d3:00:b2:59:0a:
32:1b:83:b2:b3:4a:76:59:8e:c0:0a:48:31:bc:23:
3c:eb:bf:2e:fb:36:c8:5e:ca:3b:58:81:07:29:57:
36:ab:21:ab:f8:b4:63:29:35:42:1c:ee:66:15:dc:
4a:bb:22:34:b5:61:47:b7:50:ac:2f:40:ca:c9:ad:
1c:21:45:02:67:e7:cc:0d:04:06:12:2d:51:94:06:
06:b0:1e:11:ac:03:67:fd:98:9b:d9:9b:bd:93:0d:
ea:ff:9c:41:b9:16:87:a5:5f:7b:df:08:68:2a:e5:
14:45:69:d8:8f:72:ff:e0:fe:0e:32:a8:84:8c:46:
b3:9f:40:9b:b2:b6:70:f9:03:01:d2:b2:3d:d5:71:
36:f5:44:ae:65:0d:9b:b6:4a:cb:eb:5e:83:e9:e3:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:7B:B4:C8:F6:E8:8E:13:0F:CD:0A:39:B5:BE:0C:21:CB:E7:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/717f5c75-ab24-3a35-bdbb-816edc21e82c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:4d:4a:0a:0c:de:4e:32:a9:e3:df:3e:d2:9b:26:35:c6:97:
8f:2d:63:e6:e2:19:f5:14:5c:be:f4:92:23:35:21:a3:3e:57:
27:61:a5:d0:a0:49:26:b3:71:0c:7c:90:d0:97:f8:b6:fc:d6:
cc:c5:cd:fc:69:de:6d:5a:26:be:98:87:a5:d5:f2:79:14:25:
a6:ac:db:65:39:45:58:c9:d7:ba:ec:dd:b9:92:3c:34:d5:86:
ce:32:95:61:66:b8:82:ff:e3:94:bb:65:09:a8:4d:dd:75:a8:
21:6a:5d:62:f6:6a:5d:84:b7:c6:39:ad:d6:c4:b2:7a:22:4a:
55:8f:6a:a4:88:60:02:a8:8c:7e:48:ac:8c:9f:85:40:8e:35:
e5:0e:a8:48:77:6f:69:27:1f:10:13:62:c8:eb:d4:eb:f0:33:
d1:65:c0:1f:ff:ea:04:ab:7b:24:1e:08:ad:cf:12:31:85:19:
6b:9c:38:7b:73:25:8a:32:c6:84:ff:fa:9c:28:7a:f4:63:ba:
d3:a4:4a:dd:d4:7a:3b:c6:cf:0b:90:31:ba:27:76:ab:28:5a:
69:76:53:f3:f2:35:f9:f5:c3:63:a3:9c:6a:4a:95:25:e4:85:
db:39:db:29:81:40:db:0d:9c:8e:6e:8b:d4:d0:69:16:f0:73:
44:d1:60:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:14 2025 by rpki-client