Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/79b4b773-e0b1-3d07-8c91-e9458b90e34c.roa
File: 79b4b773-e0b1-3d07-8c91-e9458b90e34c.roa (raw, json)
Hash identifier: RoV3WWWAoLvwQI27HSBK5C4m61sHTabL3Or/Qglgq+M=
Subject key identifier: 4B:E3:27:13:0D:51:57:6F:2A:92:8C:64:63:ED:61:7A:20:35:3D:30
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28E8D053E33E3B86BFF780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/79b4b773-e0b1-3d07-8c91-e9458b90e34c.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 72.28.80.0/20 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:e8:d0:53:e3:3e:3b:86:bf:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=eefabbf1-343b-4b11-80c3-4df64f175366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7b:f4:aa:0e:ed:ce:cb:ec:0e:a7:8f:4c:13:
b0:d1:66:a4:86:bb:df:14:89:6e:e9:f9:42:18:61:
8c:f7:0b:55:0f:43:91:d0:39:9c:ff:2e:b1:6d:11:
90:48:b1:73:40:11:b2:21:9a:e4:47:d3:49:fd:48:
2a:bb:07:ad:24:2b:56:ce:8d:f2:a3:8a:a2:d9:4d:
6f:55:b6:8e:63:be:c6:57:5c:e9:3a:4c:98:ed:39:
dd:cd:01:a6:61:28:ec:a2:2e:5d:e6:e2:c1:b2:4d:
0e:cc:2b:24:da:cd:4c:68:65:fe:d1:f8:d2:d5:e6:
79:36:e2:e7:61:43:17:67:bd:0a:a6:08:20:39:00:
1f:4d:e3:aa:53:f3:65:95:30:f2:73:7a:34:0b:98:
e6:c1:f3:2a:50:d0:c1:0d:7b:d6:01:54:42:ce:92:
e5:09:9a:c6:78:f6:ad:89:c7:8d:42:7b:61:e1:b2:
1b:33:c7:74:8e:13:c5:33:7d:85:d2:1e:dc:d9:78:
2c:26:c2:67:83:6f:06:9c:72:ea:6d:c6:16:1a:93:
64:a5:ec:e0:3b:83:09:4a:0f:30:7c:e2:86:3c:e0:
01:f9:1c:79:0c:9c:1f:f7:02:7f:1e:79:e3:d5:93:
53:07:e6:ff:ff:94:43:85:1e:af:91:18:bb:f8:ba:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E3:27:13:0D:51:57:6F:2A:92:8C:64:63:ED:61:7A:20:35:3D:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/79b4b773-e0b1-3d07-8c91-e9458b90e34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
72.28.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:80:9b:0c:52:3e:16:af:c3:e6:e9:01:8a:60:40:69:a6:f7:
0a:2a:e4:3e:7a:66:2f:3a:61:9d:59:11:65:9d:2a:61:49:c5:
29:e3:be:79:d7:9e:27:82:81:27:df:9e:cc:05:b4:a7:89:20:
4f:3f:64:dc:77:d2:c5:e1:ea:85:4a:fc:d3:36:08:d2:2c:06:
8f:d1:88:25:4c:9b:27:c4:a0:8f:ac:5a:73:3b:92:d3:e3:e5:
58:63:02:0a:25:30:7d:e3:76:1a:0c:5d:e9:78:07:c9:e0:ce:
15:91:5b:70:d7:c9:44:2e:fc:8c:0f:31:f7:f8:3c:93:c3:b0:
aa:b8:79:ca:b3:8b:9f:cb:fb:aa:63:cc:06:61:3e:ec:73:7b:
98:49:55:b1:36:35:c3:f5:58:8a:e9:91:2d:5d:38:d8:58:49:
f0:48:27:e2:fc:17:09:2a:15:d5:cd:b3:a3:6a:78:19:38:3d:
87:34:de:40:00:54:84:e7:d1:fb:db:3f:34:d0:6a:87:f2:12:
10:8d:25:41:c2:e4:57:a8:e7:97:09:a4:bc:52:08:a8:0a:e2:
22:7c:89:96:6b:0f:e0:f9:5e:4f:d5:e8:c1:92:29:0a:1a:5e:
e7:a9:f8:f9:69:8b:cb:49:9f:5b:8f:cf:6a:60:87:c5:df:39:
ab:13:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:35 2025 by rpki-client