Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/6fd17582-b52a-3d0f-911b-9239998623c5.roa
File: 6fd17582-b52a-3d0f-911b-9239998623c5.roa (raw, json)
Hash identifier: 7Ck1xJaTiXQKmnuIa6akZkTRWMqWDiRwdFBEJVRAQFA=
Subject key identifier: 26:21:61:4C:9A:7B:B2:1F:29:EE:E4:4A:43:06:7C:96:CD:10:4E:03
Certificate issuer: /CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Certificate serial: 010D0C9F43285846A3A5135A943E371CA11CBE80
Authority key identifier: 56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/6fd17582-b52a-3d0f-911b-9239998623c5.roa
Signing time: Wed 24 Jul 2024 01:22:23 +0000
ROA not before: Wed 24 Jul 2024 01:22:23 +0000
ROA not after: Tue 22 Oct 2024 01:22:23 +0000
asID: 3356
IP address blocks: 74.116.252.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a3:a5:13:5a:94:3e:37:1c:a1:1c:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Validity
Not Before: Jul 24 01:22:23 2024 GMT
Not After : Oct 22 01:22:23 2024 GMT
Subject: CN=c4d9bb6a-d97d-4e91-98c3-06a16540920c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:e8:85:91:ef:eb:b7:d5:df:a5:42:4d:c8:
dc:cb:15:e0:e3:89:84:fb:18:3a:cd:e0:6e:b8:c3:
51:03:38:08:01:45:63:dc:9d:fd:26:24:81:f0:fc:
bc:85:ce:81:ce:d7:6c:3f:ca:0a:7a:db:d8:b9:a1:
82:d1:2a:dd:fb:18:7d:32:c7:d7:ff:c1:4d:b0:27:
ce:18:b7:7c:ad:5d:47:a5:1b:c5:f9:c6:4d:ca:1e:
fa:d1:54:b0:2e:88:cc:51:41:17:97:30:53:51:17:
f6:24:de:8c:12:07:2a:a7:c5:a3:8a:89:10:47:62:
98:db:32:d9:13:eb:aa:0a:61:56:fc:88:d8:37:f7:
32:7f:b1:a6:f2:3d:13:fc:a2:64:c9:c4:31:22:ce:
9e:80:d5:ea:86:d1:a4:ff:cb:ae:9b:50:c2:83:c9:
cb:da:18:8b:67:7e:59:be:17:e0:60:9c:e3:fd:2d:
ab:6f:dc:fe:d3:68:29:4f:04:31:be:5f:59:a2:10:
cc:45:c5:c8:69:b3:bd:0c:bc:7d:8a:db:53:05:ac:
11:f4:25:bf:38:f4:86:43:b2:9e:f9:d2:0d:ef:90:
4f:45:bf:bd:56:c8:c5:56:90:8e:66:12:95:3b:57:
f4:db:83:c4:9d:f8:bd:40:43:94:29:7e:6f:4b:9f:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:21:61:4C:9A:7B:B2:1F:29:EE:E4:4A:43:06:7C:96:CD:10:4E:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/6fd17582-b52a-3d0f-911b-9239998623c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.crl
X509v3 Authority Key Identifier:
keyid:56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:05:ab:6d:5f:c2:9f:8c:e4:4a:92:e0:3a:96:30:8a:2e:4c:
cb:1d:e9:fe:bf:7a:1c:89:7c:ed:c1:02:1b:96:8a:d1:9b:cf:
f4:3c:a4:0f:e6:13:32:40:f2:e8:a6:9d:9d:de:dc:48:45:52:
8f:47:94:02:32:9b:85:3f:3a:2e:92:1d:ca:cb:aa:d8:2d:0a:
b7:d9:fb:df:7a:79:56:95:15:22:6e:b9:26:82:55:f6:74:ba:
98:19:41:82:b7:49:6d:84:5d:f9:5c:b3:92:72:ab:ce:bc:be:
f4:01:e4:b0:3e:0e:ab:91:3a:f1:c8:6e:3c:6e:9f:13:a7:e1:
32:16:ef:40:18:62:c1:f4:06:24:93:aa:ed:d3:f8:ba:f9:87:
29:6a:cf:13:3c:43:58:71:62:9a:70:ff:42:ba:a2:ba:06:55:
c6:b3:ea:72:02:e3:23:7c:64:fa:5f:7b:fa:58:88:ec:9c:40:
f5:b4:fe:37:6e:b7:5b:a7:8a:1e:cc:85:8f:45:9e:ea:79:17:
90:0b:09:37:a5:b8:ea:0b:e9:ff:74:3b:ef:a3:e9:2b:8e:d6:
a4:3b:0f:4d:6c:3d:89:c9:38:2a:1e:15:a9:7f:b6:b9:af:a9:
f9:fc:2c:86:c0:0d:c6:f7:d7:70:60:2e:72:e6:03:21:45:9d:
20:8e:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:22:48 2025 by rpki-client