Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/f90f2dcf-e5af-3fdf-ab08-ca1ffa8af7c2.roa
File: f90f2dcf-e5af-3fdf-ab08-ca1ffa8af7c2.roa (raw, json)
Hash identifier: ucPmpvT5sMD/cSgM3b2ffVk5PgdR5XhVl+6YJILHu28=
Subject key identifier: 3A:A4:68:2E:15:27:F8:69:C2:48:88:20:07:B5:13:A2:CC:82:40:22
Certificate issuer: /CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Certificate serial: 010D0C9F43285846A3A5BFF396838EEB7278A400
Authority key identifier: 56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/f90f2dcf-e5af-3fdf-ab08-ca1ffa8af7c2.roa
Signing time: Wed 24 Jul 2024 01:23:44 +0000
ROA not before: Wed 24 Jul 2024 01:23:44 +0000
ROA not after: Tue 22 Oct 2024 01:23:44 +0000
asID: 8075
IP address blocks: 74.116.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a3:a5:bf:f3:96:83:8e:eb:72:78:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Validity
Not Before: Jul 24 01:23:44 2024 GMT
Not After : Oct 22 01:23:44 2024 GMT
Subject: CN=bc7e3847-8984-4c4e-8a00-adef5efa7795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:e8:81:5a:55:60:74:f5:61:df:bd:bb:4f:
e3:8b:49:27:e1:df:9b:23:0e:98:17:66:46:07:fe:
f2:04:35:27:eb:d0:1a:51:5e:69:c2:d9:b7:7b:4f:
f9:c1:be:3b:2b:79:c4:c4:0d:27:21:6c:28:ce:56:
c4:20:ca:84:3c:63:e3:33:6b:01:c7:67:2b:30:e1:
e6:e8:05:2b:e9:ca:e6:90:4b:07:f4:5f:c8:ac:54:
31:53:dc:3b:de:19:b7:4e:d7:cb:fe:4a:69:59:3e:
cb:47:41:06:05:df:d2:cf:7c:01:ea:57:a5:3f:cd:
9a:59:ad:52:d8:22:f1:37:63:b6:52:bf:c8:0e:53:
6d:49:1c:05:42:5a:51:09:59:c5:c7:06:9c:7c:df:
ae:5a:f0:d6:57:e3:e3:87:d0:42:d0:d5:8a:17:b9:
7c:36:ee:43:b3:71:0c:b9:05:57:de:db:06:bc:97:
fe:8e:d9:5f:ce:83:ea:d9:cc:56:e4:03:cd:02:3f:
40:a7:cb:c3:3f:c5:b4:aa:6a:3b:91:21:ce:b2:29:
ba:c3:ec:36:d1:f2:f6:0b:97:08:2e:e1:d3:3a:7d:
88:d4:08:a2:f8:11:74:b2:7b:f1:8f:ff:50:c7:89:
cf:5d:aa:01:dc:12:d7:33:74:1a:f3:f0:dc:b7:a8:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:68:2E:15:27:F8:69:C2:48:88:20:07:B5:13:A2:CC:82:40:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/f90f2dcf-e5af-3fdf-ab08-ca1ffa8af7c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.crl
X509v3 Authority Key Identifier:
keyid:56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:11:2c:67:eb:81:3e:a5:0b:ac:00:5a:97:34:79:c9:0b:18:
5f:fd:ed:39:77:7f:79:dc:96:bf:d3:9b:ee:66:83:44:63:63:
d8:2a:29:3d:10:2e:67:cb:73:b9:f4:6e:1a:ba:dd:bd:c5:8e:
6b:b3:2f:2f:53:88:62:f7:13:7b:77:67:cb:e0:55:08:aa:f2:
33:c2:ef:28:92:98:03:4e:a7:16:cf:5c:4c:f5:d0:af:14:02:
29:ea:57:77:5a:98:fa:74:c4:59:5c:c9:70:18:2c:3f:04:f8:
a4:30:e0:02:aa:84:87:c7:52:cd:ad:ee:32:c8:f2:22:0c:bc:
71:09:3e:2d:04:61:cb:03:68:98:18:03:85:39:e0:3e:ec:2c:
06:9f:46:b5:9c:69:c7:9a:d4:43:f5:1f:64:69:83:49:47:08:
d2:fd:c0:a3:53:3c:5b:aa:4a:e4:2d:a7:9f:87:b8:84:24:06:
92:dd:33:7a:0a:26:c8:ea:c0:6c:12:81:1c:75:33:fd:d0:8d:
23:8d:4c:18:9d:3e:38:09:31:d1:b6:38:e3:ed:cc:5d:04:c3:
5e:53:2e:e4:cd:83:17:f6:d4:3b:8d:73:67:68:ed:8d:d6:44:
c5:20:29:e4:af:bb:da:e9:38:75:70:06:1b:a4:3a:90:fa:7b:
9d:31:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:30:16 2025 by rpki-client