Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af4b6e78-db46-3e5c-8250-2bd5f9d5a658.roa
File: af4b6e78-db46-3e5c-8250-2bd5f9d5a658.roa (raw, json)
Hash identifier: OgTKCq7QQFNI5PYpexnbw5utCMBa8j08ikIu/qrdEGs=
Subject key identifier: D2:49:BA:3F:9F:A2:1B:05:18:AD:6B:0C:32:4E:1D:50:85:C8:85:BB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28D9D57E4BAD6446B69F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af4b6e78-db46-3e5c-8250-2bd5f9d5a658.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.29.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:d9:d5:7e:4b:ad:64:46:b6:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=d119484c-8280-473e-93bd-ee237fe1cf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:b8:16:9e:96:05:a7:2c:68:7e:02:2c:79:
cb:97:1b:ad:db:90:01:20:38:40:a8:f1:c0:5e:a0:
32:dc:df:20:fa:ce:e2:eb:a5:7e:a6:20:63:ce:76:
ee:43:aa:bd:03:b0:a5:42:7b:98:0b:97:fb:51:58:
6b:8c:f5:7d:69:d7:09:f0:a3:47:22:ab:fc:ef:8a:
e4:5f:bf:48:93:bf:c0:ee:3f:2e:ab:72:4a:33:4d:
82:1e:82:f7:f7:46:00:d2:91:8e:16:b4:79:ba:27:
1c:18:09:58:19:96:26:e3:fd:76:fc:f6:52:c8:83:
4f:9d:59:86:56:87:6a:85:75:6e:fe:31:08:bd:52:
48:bb:9d:49:31:cd:27:e5:4c:56:e5:eb:b9:3e:e4:
a4:99:bd:20:3a:9c:90:f1:de:7a:6c:da:9a:8a:22:
d9:94:c6:86:ad:10:22:16:97:aa:ee:28:68:20:76:
40:8f:91:c7:2a:46:a6:64:07:d0:1c:3d:9c:d4:01:
7c:44:0a:d3:e0:c8:54:1f:9e:b1:9b:87:10:28:f0:
4a:a0:d7:95:66:08:4e:9f:16:18:60:67:8d:07:95:
39:1f:2e:ad:30:a6:6b:31:0e:7d:35:6f:53:8d:59:
eb:28:e8:9e:6e:d6:d3:cd:12:bc:a1:bd:23:1c:a1:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:49:BA:3F:9F:A2:1B:05:18:AD:6B:0C:32:4E:1D:50:85:C8:85:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af4b6e78-db46-3e5c-8250-2bd5f9d5a658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:d2:41:e1:f0:9c:d5:89:47:99:7a:f9:7b:b5:c9:79:6d:22:
bc:d7:d9:dd:b1:54:23:d9:18:92:8e:87:59:22:16:7d:aa:6c:
55:20:64:0b:fd:cc:33:18:82:23:df:e9:67:e8:8d:d2:32:a9:
17:eb:f0:d4:8c:7e:cf:63:a4:48:32:2b:ad:30:39:32:d7:ec:
9e:88:86:6a:be:a0:cd:82:3a:de:07:32:48:6e:b4:f8:3f:15:
0c:65:25:f3:16:b5:db:be:d9:b7:a3:7b:a3:35:e9:a3:ef:13:
91:40:b3:c4:c4:eb:64:bb:30:0b:ba:20:7f:28:f0:05:7e:13:
e4:08:d7:43:86:f7:25:ec:c8:80:40:05:66:fb:f4:21:b0:0c:
7e:d5:b0:18:b5:90:ed:88:42:00:ed:46:96:54:73:00:9d:18:
02:0a:83:2e:bd:b2:18:44:6a:41:a4:ed:4c:21:c8:cb:3c:73:
27:51:1c:d3:57:61:f5:a9:30:40:b3:94:b4:43:91:d4:28:e0:
37:d5:e4:23:7d:45:11:b4:c6:0f:d8:c3:b9:17:a6:c0:87:c9:
3a:b9:b9:9e:30:54:84:0c:00:a4:c6:5a:90:fa:0e:77:32:d4:
70:e6:ad:01:f9:93:75:4c:a7:a6:27:cf:b7:15:f9:d9:0c:46:
fe:aa:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:09 2025 by rpki-client