Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/014ab8df-f23c-3390-bff0-a034414f5ba7.roa
File: 014ab8df-f23c-3390-bff0-a034414f5ba7.roa (raw, json)
Hash identifier: X/H2oQ3TbSvgNCLsqeMfYa1zBC1jQ2LcdbJo04deX9c=
Subject key identifier: 58:F4:80:C5:E1:AB:A3:C2:74:34:9D:1E:12:02:2F:FA:9A:97:EE:71
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7B8414AB1F5EF823774C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/014ab8df-f23c-3390-bff0-a034414f5ba7.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 30336
IP address blocks: 209.226.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:b8:41:4a:b1:f5:ef:82:37:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=a45b5997-8cca-4dd3-be76-fda5ae4e39b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:7f:eb:73:be:e1:b7:2d:9c:40:94:67:4f:
91:bb:c3:73:00:50:bc:77:3d:fa:fd:9c:3b:b2:50:
27:a1:da:57:e2:36:bc:17:f6:11:ac:7d:45:fe:3d:
90:c4:02:62:c9:ee:67:aa:ea:91:ba:27:84:96:a1:
58:5d:a0:40:b9:1c:4f:d0:6c:cc:3a:02:bc:9d:64:
dc:48:69:ac:17:11:b7:85:70:f3:53:88:c8:63:59:
35:35:71:5b:a7:e4:88:88:48:c1:e4:bc:44:33:7c:
04:7a:87:29:0e:5c:d2:75:02:8f:d7:9e:15:4e:61:
be:25:4b:d6:aa:07:41:52:64:3b:ad:25:db:85:18:
8f:69:ec:d5:ba:91:4a:f7:77:ae:47:8d:89:8e:40:
1b:52:1e:f7:f8:11:92:26:55:ad:85:ac:55:bd:44:
72:32:6c:37:ed:f1:78:59:c0:99:92:b5:d9:9c:ea:
67:4d:1c:ab:eb:5a:d1:94:d2:0e:04:a5:72:23:47:
a2:75:b5:76:e7:c6:cf:91:f4:2a:f4:0b:ba:05:37:
cd:9f:61:f1:ec:c5:9c:4a:46:c7:74:58:d3:22:d5:
83:1b:96:1b:01:03:61:83:97:6d:28:0f:5e:9e:6f:
24:8b:b1:89:64:9a:f6:24:58:ce:55:74:8b:e3:09:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:80:C5:E1:AB:A3:C2:74:34:9D:1E:12:02:2F:FA:9A:97:EE:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/014ab8df-f23c-3390-bff0-a034414f5ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:13:d6:aa:ba:fa:71:bb:0e:c1:5c:eb:a8:e4:ac:42:70:8a:
48:6c:99:05:58:56:74:39:13:22:2e:2c:a0:29:f4:25:3d:df:
84:52:a8:1f:80:12:30:6d:6a:78:1d:38:03:e5:2c:34:34:29:
64:36:b9:35:4e:e5:59:49:7b:3a:19:10:43:48:b4:6d:16:8c:
63:c2:0e:26:5d:dc:19:ea:89:e4:7b:90:76:5c:6e:b5:4c:d0:
37:78:08:65:b9:b3:25:0b:1d:70:f9:f5:af:aa:d3:ea:06:e5:
e9:79:59:8f:f3:87:b6:e4:f8:63:0c:b8:cb:ab:ad:20:fb:66:
a5:24:a7:c3:85:d9:cc:b3:29:21:7a:90:ca:ab:32:ea:0d:1b:
64:71:0d:e1:08:07:fd:d5:bd:aa:8c:e6:f6:00:9d:74:1e:d1:
20:66:26:c1:9f:7f:0c:75:2e:01:3e:c2:63:86:4d:e5:0d:87:
61:a3:50:ed:e3:03:26:92:28:f2:47:cc:20:ac:85:97:7e:b6:
90:01:7b:6a:06:b5:d4:1c:ee:ee:c2:30:ea:7e:44:2b:46:04:
61:81:e0:e5:bd:2a:da:03:65:58:ff:f9:17:ef:a2:cc:d4:ad:
79:53:14:8b:f5:d6:4d:d6:c9:d6:73:99:f0:2c:e7:63:6e:54:
5d:f6:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:36 2025 by rpki-client