Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71e6725d-07e2-3b6e-88f1-429eb428bc4c.roa
File: 71e6725d-07e2-3b6e-88f1-429eb428bc4c.roa (raw, json)
Hash identifier: DsuO1GppSAAyT6XpOof6oml72dC9KGyExRCtLempY1Y=
Subject key identifier: 21:64:E0:C8:6D:53:39:1A:47:F5:A8:5B:93:AF:26:4B:29:D1:27:DA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B0E9AF6E70A7E56E4EFA080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71e6725d-07e2-3b6e-88f1-429eb428bc4c.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 398721
IP address blocks: 70.28.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:0e:9a:f6:e7:0a:7e:56:e4:ef:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=e0436ca9-9858-4c87-a3af-91ba121a7c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:54:53:b2:f6:4f:a4:62:4e:22:33:12:16:0e:
e5:d6:b4:bd:bc:88:c5:f5:e7:c8:4f:06:83:84:6d:
b1:69:e0:37:16:ee:06:f0:d9:38:0f:1f:00:c1:88:
df:74:ed:7d:93:0c:f3:fe:f1:c1:f7:b0:c2:c1:14:
20:aa:5e:56:9e:8b:75:85:17:58:f3:06:f1:9c:4a:
75:46:3b:b5:84:1a:0a:f0:ba:70:0f:32:57:59:04:
94:3d:ae:7d:ac:f7:50:8a:af:e1:79:fd:6a:5d:55:
d0:b9:80:9f:0d:0a:ab:b8:b6:14:f3:ce:02:e5:3b:
1b:aa:54:b2:7c:3d:d7:3b:be:ed:c8:9c:aa:46:0b:
af:36:80:92:7e:05:f5:62:58:c7:04:e9:97:48:98:
a3:47:19:5b:06:fc:f7:ce:b1:e5:c5:62:ac:f4:87:
e4:af:ea:81:37:16:a3:e2:59:14:2c:f9:49:6b:b9:
9c:a0:12:c8:af:81:ec:74:0c:b7:fa:dc:6d:31:c2:
e8:e0:26:4b:e2:b4:f7:b5:15:10:e9:03:86:23:21:
6d:04:86:8a:b1:f9:92:63:cd:84:87:3a:98:a8:f7:
1f:cd:b7:d1:4b:a7:5d:40:ac:26:53:b6:1f:11:aa:
39:be:ee:ba:0e:ae:8d:86:f4:73:37:d2:17:67:6b:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:E0:C8:6D:53:39:1A:47:F5:A8:5B:93:AF:26:4B:29:D1:27:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71e6725d-07e2-3b6e-88f1-429eb428bc4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:a5:78:fd:94:a3:0e:fb:51:ad:f3:08:f2:0d:d2:72:34:52:
51:96:07:c6:39:28:b0:5e:4c:8f:c6:8f:84:e2:c0:8a:04:92:
b0:85:22:df:57:c6:8b:ed:b5:3a:db:43:03:6c:8d:81:41:5b:
b6:c2:4a:a6:f8:ab:07:5d:ad:33:3c:0f:56:c5:e3:48:f0:99:
b5:c7:ee:e5:c3:21:04:3c:53:c9:78:f8:aa:16:4e:1b:fc:79:
42:88:78:48:e1:42:97:06:c7:58:c1:9f:a7:c3:f9:37:c1:e6:
78:e3:94:99:d4:2a:93:26:d7:b7:26:23:02:5c:a6:2d:48:97:
b3:1f:a4:65:e3:60:fb:85:e5:54:ad:83:c6:30:98:1e:fe:10:
39:6d:22:0f:18:30:c6:94:e6:2c:f0:71:a0:ef:3c:72:e4:48:
69:3d:30:41:6a:bf:ca:2e:35:c3:a1:4d:00:d6:2a:a8:0f:da:
ed:01:8a:39:61:ba:31:ca:70:c1:85:f6:58:ff:29:16:0d:aa:
bb:37:ef:30:c2:9c:2a:84:bd:27:b2:f9:66:90:ca:e5:cf:80:
c9:ce:69:bb:5c:e8:42:75:81:8c:b1:8c:df:98:74:3b:c6:d6:
8e:a7:52:b4:11:36:3a:b7:76:2a:30:ee:bd:73:a1:a6:9a:5c:
40:39:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:53:26 2025 by rpki-client