Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28eebe64-6747-374b-8cf7-6dcc93d5a88a.roa
File: 28eebe64-6747-374b-8cf7-6dcc93d5a88a.roa (raw, json)
Hash identifier: 1V3ivLe7OFwSlsAh6nIP9tjq5HznzC8TmrGE6lk1LSY=
Subject key identifier: A5:A5:F1:62:0D:7E:D4:45:89:93:F1:CA:3E:81:34:16:A6:99:69:BF
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858488F7F607D9EFE50BEDF952280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28eebe64-6747-374b-8cf7-6dcc93d5a88a.roa
Signing time: Thu 16 Jan 2025 05:44:08 +0000
ROA not before: Thu 16 Jan 2025 05:44:08 +0000
ROA not after: Wed 16 Apr 2025 04:44:08 +0000
asID: 329007
IP address blocks: 172.94.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:7f:60:7d:9e:fe:50:be:df:95:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 16 05:44:08 2025 GMT
Not After : Apr 16 04:44:08 2025 GMT
Subject: CN=408690d8-945b-4a05-8365-626ad1e93c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:f1:2a:1b:f6:81:e6:92:5b:1a:b0:a5:10:
c7:97:44:e0:06:e6:50:70:6f:c0:57:c1:36:ed:36:
e8:c8:32:69:7e:e7:66:f7:0c:56:f6:b4:a3:76:1c:
a9:a8:50:86:40:97:40:34:40:49:36:d5:07:39:64:
17:45:23:2d:48:4c:f2:e9:27:3d:28:e6:25:04:4f:
c1:ba:68:2a:b0:77:fb:f7:f9:58:9d:e0:fc:fe:fa:
b7:01:fc:c4:51:08:5d:17:68:8a:75:56:65:2e:8e:
35:e9:28:96:93:18:6e:0c:09:22:5f:97:4f:f2:3a:
47:00:f6:2f:dc:60:f1:ec:75:61:77:b7:dd:ed:47:
bd:72:ab:67:68:54:f2:68:11:ac:9c:11:fc:e4:79:
4a:bc:96:2f:e7:61:cc:84:b4:90:f9:d0:c5:6a:4a:
e4:63:c8:bf:8d:54:4f:c0:02:fb:bf:cb:59:85:50:
73:0c:0c:31:2e:5d:ea:ac:1e:a4:4f:0a:36:34:26:
28:5a:be:e7:d1:68:45:66:d5:b2:ef:78:e0:94:3d:
11:50:ed:2e:40:0b:fb:6e:cc:e8:ba:64:0c:ab:43:
73:5e:ad:e7:76:fe:03:26:87:fc:43:69:07:14:a5:
8b:b9:1a:05:09:11:42:7f:7b:a4:a3:62:33:63:8a:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A5:F1:62:0D:7E:D4:45:89:93:F1:CA:3E:81:34:16:A6:99:69:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28eebe64-6747-374b-8cf7-6dcc93d5a88a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:c5:0f:7a:c6:e2:a2:6a:4c:cd:28:8a:10:ee:a8:57:1f:d9:
e5:c4:52:ef:11:6f:b1:b2:a1:cc:81:d4:ec:95:33:92:2b:65:
9e:93:74:e3:73:0c:0b:c2:67:c2:17:46:78:00:c1:c6:9c:fa:
67:21:58:6a:1e:ed:01:8b:b8:92:4c:bd:c0:19:3d:e3:76:a6:
d0:5a:75:20:53:b9:b2:94:95:68:b0:4d:c0:34:96:56:32:e5:
eb:c2:06:8a:02:13:cb:ef:01:1e:39:e2:e3:61:cd:b3:0c:de:
a0:c4:f8:b7:d6:12:0b:cd:7c:7d:f1:f8:1a:9c:69:05:e2:f2:
44:1c:89:fa:c0:aa:3d:a1:df:74:5a:82:d0:dc:45:02:43:c6:
5c:42:60:46:be:55:bc:b8:63:ff:04:03:6b:a6:3a:2f:61:ec:
5b:8b:f1:9e:14:79:10:83:15:2c:26:47:fe:38:06:5d:b3:ba:
ff:21:be:07:b4:17:6e:06:e2:0f:9a:43:95:e0:71:2c:ec:57:
31:06:4c:93:5f:39:30:8d:3b:73:e5:dd:26:b8:bd:47:50:2d:
b7:b5:4c:e3:c7:4b:3b:27:12:3b:e9:67:13:7e:69:db:07:7c:
09:0f:64:06:b5:7c:d1:3f:a9:b2:c6:62:32:85:1e:ec:9c:be:
2f:44:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:14:57 2025 by rpki-client