Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3a2598c-ab90-3a51-ba06-5a30fff7be50.roa
File: c3a2598c-ab90-3a51-ba06-5a30fff7be50.roa (raw, json)
Hash identifier: qXAP2EkrAMYdPeRW4Bd9dEQkbMMKGDwrBunckHXRsAo=
Subject key identifier: 4B:87:15:DA:B3:4D:62:32:D5:22:F5:0D:35:AD:51:A9:11:6C:2B:AA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29007569CC573215858200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3a2598c-ab90-3a51-ba06-5a30fff7be50.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 76.71.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:00:75:69:cc:57:32:15:85:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=2eea93be-b5bd-4ecb-a09b-0f0104cbc686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:ed:01:87:f0:b3:31:b7:f9:f0:ca:d0:c5:
89:de:6d:90:0c:66:33:6a:d7:97:24:f0:f6:4e:f4:
d4:2e:ea:50:72:35:b3:35:4c:fe:44:97:cd:d4:a5:
28:34:f3:70:fe:20:df:0d:a0:ba:cb:b3:91:27:bb:
24:54:df:a6:b2:2f:d1:86:7b:62:24:13:b2:fb:ac:
21:5d:33:da:ec:c6:c5:43:c3:d6:9c:9c:08:cb:3f:
13:f8:c9:5f:32:2e:7b:d7:c7:d8:8c:e1:2c:fb:b4:
65:1e:89:f7:fa:67:9a:f9:00:bb:ac:29:38:b9:82:
41:80:56:b5:21:a6:e3:6a:16:83:a2:3d:d7:c6:43:
3e:90:81:b4:31:45:c0:07:32:2c:c8:37:5f:8a:2b:
15:f7:86:30:21:c9:89:b1:bc:2c:44:f4:23:ad:c9:
70:97:e7:3e:e4:1e:ad:cb:f7:3c:ba:1e:df:a7:09:
2c:13:ce:62:6d:d7:83:9b:94:19:6d:43:5f:34:43:
dc:46:31:97:b7:2a:b6:b1:c3:d6:a7:09:19:ee:dc:
83:08:4a:32:31:5e:75:f1:59:03:97:13:07:91:b7:
f1:cb:ed:e7:08:30:0e:56:ad:65:54:0d:25:c5:28:
05:6d:cc:6e:9a:18:cc:2b:c0:d4:42:ff:46:69:8f:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:87:15:DA:B3:4D:62:32:D5:22:F5:0D:35:AD:51:A9:11:6C:2B:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3a2598c-ab90-3a51-ba06-5a30fff7be50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:1f:21:43:db:50:8a:11:2d:2a:43:91:53:81:91:26:2c:26:
f7:f2:bd:c5:fd:2a:9b:4d:ef:5b:70:a6:e2:4d:5c:f1:77:e7:
94:db:76:8a:9f:23:f9:19:9b:cd:91:4b:9a:22:f7:be:5d:f5:
70:f0:5d:fe:67:22:61:f9:0d:0b:2a:e3:cd:36:c8:1a:03:8a:
11:66:72:fa:c7:cf:f7:80:3e:8a:c4:5a:c8:df:1d:56:82:0e:
70:ff:ec:93:c8:a9:4d:cb:ba:95:56:9c:81:6d:4c:1b:38:14:
3d:cd:89:c3:5d:47:a9:99:5e:5b:46:8a:2d:f0:4c:e2:1e:37:
07:08:fb:27:67:6c:c5:49:e0:42:66:8e:1d:a0:c1:24:f9:5d:
fb:20:cd:e7:cb:84:23:ee:09:e3:bb:f4:05:60:7e:ba:05:5b:
2e:b3:68:ad:d1:02:cb:9e:af:c7:dd:32:f4:94:3d:fe:1d:15:
c9:08:c0:6f:43:cc:e1:1a:10:20:a0:d1:55:0f:49:de:b5:30:
29:74:42:19:13:d4:6e:38:01:16:2f:01:7d:04:5d:c3:23:47:
82:43:ac:a2:7d:0a:84:c0:a9:13:b6:de:a5:89:72:8f:00:53:
41:dd:17:01:9b:c4:3e:79:04:b7:09:72:c2:55:da:95:15:4b:
98:77:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:18:52 2025 by rpki-client