Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/49b173d6-1608-396a-859c-e2e5fd2b7aad.roa
File: 49b173d6-1608-396a-859c-e2e5fd2b7aad.roa (raw, json)
Hash identifier: +PR8yJnYmnlaGCnn/cPA3tVoVqbiw3pTHlUdh3Skaes=
Subject key identifier: 3D:71:D4:5F:F7:54:46:59:96:C4:26:82:76:32:6A:AC:72:A8:D3:D7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328583FED26E5FD7BADFBBF65CDA500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/49b173d6-1608-396a-859c-e2e5fd2b7aad.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 577
IP address blocks: 70.27.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ed:26:e5:fd:7b:ad:fb:bf:65:cd:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=459f215b-d6bf-4a88-ace1-96853a5f3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:c2:1a:d1:2e:1c:97:bb:35:d2:51:ec:07:
d3:bf:65:4c:dc:02:c4:03:ac:63:15:d3:9e:74:cd:
e2:4f:73:85:a0:e2:98:85:fb:7b:73:47:17:43:d9:
c3:cd:6b:93:c1:65:72:4e:05:f8:60:c0:8d:14:0d:
85:1d:b7:b4:a1:14:38:7e:ee:11:7f:ed:07:ec:85:
7e:1e:ca:2d:da:73:c0:77:b0:93:62:0e:90:59:2e:
bc:3f:a5:33:01:77:38:7b:e7:01:1e:d2:fb:31:4a:
ad:fc:c3:46:92:fe:de:97:ca:5d:ea:8f:70:46:06:
97:d7:33:bf:bd:76:1a:67:7d:8c:a9:4b:19:50:87:
58:ba:b9:45:69:85:83:78:62:69:c0:8f:c4:a4:5d:
5d:80:ac:f7:04:6a:ef:1c:7f:9f:ad:07:c2:40:76:
aa:6b:cf:f3:c8:59:77:c4:48:be:53:93:b5:aa:a5:
dd:89:a6:93:d1:0a:c4:f4:87:c0:08:49:0f:52:0d:
fb:ed:67:aa:03:1e:2b:5b:c9:52:02:cb:b9:1b:2e:
80:99:28:dc:14:18:83:84:a4:2e:a1:33:d5:15:14:
a6:27:39:eb:ad:4f:ad:6b:59:68:de:6f:21:e7:8c:
da:ab:e5:31:5f:6b:e2:d3:04:d6:d2:50:58:23:68:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:71:D4:5F:F7:54:46:59:96:C4:26:82:76:32:6A:AC:72:A8:D3:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/49b173d6-1608-396a-859c-e2e5fd2b7aad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.27.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:4a:c3:5c:c3:2d:6f:77:23:e6:96:bc:62:f1:4b:db:9c:1c:
41:3f:25:2e:66:fd:d3:c9:04:3f:cd:17:83:ea:17:99:c6:2e:
9c:8c:41:f9:91:d2:5e:f8:5a:c0:cc:21:e2:98:5e:fc:17:d0:
13:4a:45:0d:28:96:81:61:ea:a9:65:c2:02:dd:52:26:61:29:
9e:26:c7:dd:36:f9:f8:b3:6b:54:79:29:c4:dc:5e:60:f9:6b:
d7:bd:a7:f5:09:74:be:c6:d2:1f:52:7d:72:c2:3e:3c:cf:aa:
a8:a0:19:35:5e:47:43:79:ba:42:9e:ed:07:3d:2f:7c:f0:d0:
e0:03:94:50:98:a9:ea:81:42:c9:a6:24:c0:d9:c6:d1:a3:e9:
fc:91:af:19:bc:45:29:86:95:7b:a8:6e:cf:33:2e:45:58:bd:
48:ee:64:04:af:41:c4:02:1d:5a:65:5b:e6:78:22:23:25:67:
f5:3c:67:8d:ea:9e:ae:57:c5:3a:ed:01:ab:0f:55:be:33:d6:
59:60:69:6e:d7:e2:e9:0a:17:30:d7:49:84:81:e9:ae:1d:08:
72:13:aa:e6:0b:f5:6f:29:b0:0c:39:3a:0c:62:36:7c:9d:24:
ad:df:a3:b3:cf:0c:a6:0d:bd:c0:2f:eb:0f:c0:60:5d:54:e3:
83:91:43:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:42:16 2025 by rpki-client