Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f321cac-516e-3ba9-b42c-9bd5f62b0446.roa
File: 9f321cac-516e-3ba9-b42c-9bd5f62b0446.roa (raw, json)
Hash identifier: v3vktrNb5uqEL4GrmEZYQvdi4xH/DjPaWdxRyABPVHg=
Subject key identifier: 88:CF:88:A3:20:52:F4:67:3F:DB:23:52:70:A6:97:E7:15:70:F2:99
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E1F451E8BC0CC02667E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f321cac-516e-3ba9-b42c-9bd5f62b0446.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 36103
IP address blocks: 72.52.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:1f:45:1e:8b:c0:cc:02:66:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=284c170d-7f96-4af5-aecd-be7d9eaf30b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:1f:88:a7:2f:99:03:1e:f0:4e:a5:5c:02:
20:f2:44:c7:f1:85:36:d5:af:ce:23:93:96:89:3e:
21:92:95:67:c4:4e:e7:10:66:25:8d:ab:cd:08:4c:
18:72:71:5c:09:11:78:6b:f9:8d:42:d1:64:cb:b0:
7a:ed:2c:df:ac:48:ac:8f:8d:61:51:80:a3:19:f6:
1d:5f:76:38:fb:15:85:20:97:01:a3:5e:1c:f4:3f:
01:d7:7d:5e:88:6c:dc:7f:5a:60:3a:95:76:fe:38:
36:1f:ba:7e:ba:22:a9:47:72:59:dc:75:27:2e:d6:
5b:01:6c:48:af:2d:5d:9f:1c:95:b9:5b:9b:e8:9f:
bc:e8:14:93:2a:36:5c:26:a8:8a:dd:f3:a8:30:9e:
b5:9a:84:39:c1:e4:15:11:0e:a0:bc:ae:40:9d:87:
3e:7f:eb:db:65:ac:0c:63:1c:57:96:4b:aa:90:c3:
4a:e2:68:2b:1a:af:4c:5d:84:a5:7f:6c:4e:1e:d2:
fa:a3:c2:91:48:71:fb:e6:c9:78:37:7c:83:ab:88:
fe:da:e0:12:73:a3:1b:a5:8e:f4:ea:ea:2a:a6:fc:
fa:6c:c0:c2:5a:47:ef:de:21:a1:1f:a6:1a:c7:7a:
f4:cb:5b:61:14:f9:00:db:90:22:8e:ab:c4:eb:4a:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:88:A3:20:52:F4:67:3F:DB:23:52:70:A6:97:E7:15:70:F2:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f321cac-516e-3ba9-b42c-9bd5f62b0446.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:22:ce:fe:0e:76:8b:7f:60:e0:d9:17:fd:0b:66:8a:03:41:
81:c8:38:9c:44:ad:07:f3:dd:f2:2e:a2:48:f0:17:b9:a0:4b:
92:7f:47:ab:01:c1:2b:d5:36:9a:94:e6:f4:b9:f6:d4:a1:4e:
cd:84:15:9c:42:22:54:dd:12:d8:83:f3:d2:cd:09:74:0c:24:
a9:44:ba:07:37:bf:6f:33:7c:fa:2d:00:95:bf:fb:56:28:56:
e3:78:ea:c5:34:6b:7c:84:d0:c8:a7:62:e7:e0:09:e9:6d:d6:
e5:3b:b6:bb:c0:ee:53:9a:52:cf:71:1d:a3:f3:09:da:2c:61:
a9:78:98:c1:f6:cc:62:5c:ad:ca:d4:56:0a:a2:b5:31:48:9e:
65:9e:9d:d5:53:cd:81:60:8e:0f:06:48:c6:ea:92:98:71:63:
5c:ad:b7:8e:04:d5:3d:f4:46:e5:f1:7d:43:3c:51:6b:28:08:
55:4b:e6:8a:c0:4d:39:d7:61:5f:7b:43:6b:3d:dd:95:19:48:
26:d6:fe:dc:f8:05:50:de:6a:3a:af:56:4f:e9:eb:85:02:fb:
f9:11:66:7b:23:a1:e0:41:19:dc:61:b2:da:e8:3d:8b:32:de:
44:22:83:3b:7e:87:68:42:ae:42:9f:96:94:06:29:bd:8c:a5:
8e:95:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:32 2025 by rpki-client