Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/7aaa7c7f-4b19-3e1b-be32-a352e0b51e7c.roa
File: 7aaa7c7f-4b19-3e1b-be32-a352e0b51e7c.roa (raw, json)
Hash identifier: iWJO2KbBhhyImNMUL746lGvd2QOjcecJmdkMyq3JaGw=
Subject key identifier: C8:04:E2:4A:E8:9A:B5:83:F5:BE:07:47:4E:EF:38:91:62:BD:FE:06
Certificate issuer: /CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Certificate serial: 010D0C9F43285846A3B2AC8010303FD0122DEE28
Authority key identifier: 56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/7aaa7c7f-4b19-3e1b-be32-a352e0b51e7c.roa
Signing time: Wed 24 Jul 2024 01:49:47 +0000
ROA not before: Wed 24 Jul 2024 01:49:47 +0000
ROA not after: Tue 22 Oct 2024 01:49:47 +0000
asID: 53309
IP address blocks: 74.116.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a3:b2:ac:80:10:30:3f:d0:12:2d:ee:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Validity
Not Before: Jul 24 01:49:47 2024 GMT
Not After : Oct 22 01:49:47 2024 GMT
Subject: CN=2a896079-90e7-4534-9642-927bfe338dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:b2:e8:e1:ea:93:92:df:a1:11:28:74:84:
35:67:e3:10:66:af:70:4d:cf:aa:0c:82:a6:f7:bd:
b1:1b:33:fa:34:86:a3:1d:3d:52:ec:54:63:e1:b2:
7f:89:5c:51:e2:fc:d5:1a:5d:0b:61:40:42:ac:e3:
31:81:b0:ff:ed:46:0f:da:59:e3:45:f4:8b:89:ca:
22:3f:f0:d7:e4:8f:59:c2:ac:38:a7:99:a5:93:54:
c2:21:a0:9e:d0:ac:5f:8a:2d:90:39:f2:e4:19:93:
c9:d8:9a:e9:55:3a:47:f0:42:e8:b0:7f:88:d2:a4:
41:b2:e3:e9:40:84:2f:51:1d:6a:72:9c:f1:80:e9:
1b:68:d5:40:77:97:ef:d0:6b:81:53:32:52:0b:01:
c3:55:1b:2e:a6:4e:c2:f2:f2:61:55:84:98:c1:ba:
db:ec:ec:c6:96:aa:6a:50:b6:99:0c:18:b3:ed:dc:
66:8c:89:bb:ec:f7:89:ea:77:3a:25:c6:2a:e8:62:
16:08:c2:a7:41:0d:56:01:af:7b:4f:30:a4:1d:ae:
85:e6:10:77:a2:0d:e6:5e:ca:ca:37:4b:47:40:c3:
e2:b8:01:1c:3d:f9:6a:f7:98:24:24:dc:df:5a:47:
d0:47:ca:6a:b4:bd:fc:4c:82:7d:b3:6c:09:c2:af:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:04:E2:4A:E8:9A:B5:83:F5:BE:07:47:4E:EF:38:91:62:BD:FE:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/7aaa7c7f-4b19-3e1b-be32-a352e0b51e7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.crl
X509v3 Authority Key Identifier:
keyid:56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:cb:3f:e0:4c:ec:39:58:54:6b:1d:cc:8b:fd:54:72:56:d5:
0e:99:12:e2:b3:91:7c:7b:6c:fb:38:86:a5:02:a1:78:8d:64:
3e:9d:d5:1c:b9:f3:a4:ba:17:02:ac:8a:67:c6:bc:d9:f5:86:
68:a6:01:a7:3f:3c:e3:2e:6d:55:ac:b6:f6:4b:fe:23:cb:4c:
b2:75:3a:c5:ee:80:77:8d:78:87:5f:7f:cf:54:a3:c3:7e:3d:
af:92:c0:4b:83:9c:cc:41:45:7c:82:46:01:c1:09:e4:9d:42:
6d:7b:c3:e9:68:d5:8f:9c:df:5b:54:2c:2e:87:1e:5b:fe:8c:
4a:23:7f:3f:b7:4b:80:62:25:76:cb:df:fc:22:ab:4d:73:fd:
2c:a3:0d:96:7d:6a:19:65:e7:df:fb:95:cc:26:9e:c3:b1:4c:
c8:e2:29:85:5e:b9:9a:c9:ab:3e:f0:a6:27:69:db:89:76:2d:
44:71:37:53:45:b1:8b:0d:32:c4:22:dc:78:86:eb:00:36:27:
24:8a:45:14:3d:04:51:79:9e:50:d6:32:d3:03:f0:78:16:27:
1b:54:ba:c4:fd:ad:3d:18:43:9c:c8:1b:d4:fb:83:77:b6:fe:
3e:eb:e6:a4:51:ef:0d:e7:d6:4c:8a:90:e9:a9:39:4e:b2:78:
fe:d4:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:49:39 2025 by rpki-client