Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/020e01f5-12a1-384f-9e60-fb12be2e33a3.roa
File: 020e01f5-12a1-384f-9e60-fb12be2e33a3.roa (raw, json)
Hash identifier: mn5OSxTX4LI8kJInvKPl6qjs8poh17L+J7H/HilxnEI=
Subject key identifier: AD:EF:63:DC:54:E8:29:ED:7F:65:ED:D3:FC:6B:7D:DE:BA:86:50:A9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B68AB36618D512E995CF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/020e01f5-12a1-384f-9e60-fb12be2e33a3.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21723
IP address blocks: 206.47.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:8a:b3:66:18:d5:12:e9:95:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=322e87e4-acae-4383-be7d-3fbcf8a73d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:f1:93:ba:ba:70:7f:fe:f2:83:46:b7:08:
2b:e3:30:13:7e:4c:0b:25:01:9a:66:3a:82:17:79:
17:ba:f6:a4:a5:99:4b:d2:ea:65:b2:ac:22:e2:ad:
a2:d8:74:64:45:7a:6a:10:25:84:a6:a1:09:8c:6c:
ac:1c:02:87:8f:d9:d5:70:25:38:12:0f:52:85:cf:
3e:d8:51:69:67:4f:c0:b9:65:75:ac:04:14:49:b0:
d8:0d:da:0d:09:85:cd:3a:db:ed:dc:b3:ca:72:4a:
84:1c:57:62:6a:a1:30:5d:1a:c0:e6:0e:b6:10:2d:
98:e8:d6:e2:7f:cb:56:ef:35:b9:37:96:84:50:13:
5e:af:ba:67:4a:e3:32:fe:74:db:b5:b6:7b:0d:27:
36:09:72:5f:fa:3f:af:36:2b:3e:16:c8:7a:16:b5:
46:33:d2:13:58:74:c1:a2:85:fe:40:95:f0:a4:ba:
9b:a2:81:9a:23:b2:35:90:f0:23:b0:90:32:93:d7:
1c:f1:79:cd:a4:b3:04:c9:04:fe:c1:4c:14:67:41:
ec:5a:c5:df:5c:93:0c:fe:6c:e7:0c:ef:db:05:3b:
0e:90:d5:5f:1a:03:0c:e6:34:ed:b1:7d:d9:0d:7e:
e2:68:1d:dd:9a:48:23:0a:9a:e1:cd:80:86:5b:f0:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EF:63:DC:54:E8:29:ED:7F:65:ED:D3:FC:6B:7D:DE:BA:86:50:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/020e01f5-12a1-384f-9e60-fb12be2e33a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:4a:12:d1:82:4a:3c:7f:1e:35:c3:e7:9e:ed:9f:1b:1f:b0:
ad:cd:78:c2:00:7b:9c:9b:6d:1f:b7:06:05:c1:f2:75:2e:09:
71:56:76:dd:b6:23:cd:be:fc:79:8d:6d:6b:98:4d:7c:e0:2f:
05:c7:42:b5:c4:fd:7c:7a:40:87:86:24:87:76:65:b6:5f:c5:
6d:fd:6b:cb:4b:13:e3:af:f4:7d:ff:7b:f8:e7:eb:b1:d9:8c:
dd:45:09:d0:a5:60:02:0f:04:ad:15:5a:d0:5c:20:47:fc:83:
3b:3d:d9:58:99:7c:37:e1:df:d3:48:ad:5d:e4:23:c7:4c:6c:
ba:82:26:52:63:9d:8c:41:1d:dd:5e:aa:1d:bb:86:b2:c0:e2:
74:11:d8:b0:b1:74:5b:33:1c:bf:ef:92:37:a0:93:f4:24:57:
36:a5:69:b4:d1:26:98:50:2a:91:3f:8f:11:7f:c5:3b:99:5f:
f0:f1:61:b4:77:ad:b8:67:38:c9:54:2e:42:8c:72:31:c4:c6:
07:dc:a9:11:2b:45:5c:0f:5e:64:85:87:75:f8:a4:01:15:2d:
32:52:9a:24:3d:45:1f:fa:1a:10:49:b0:21:0e:83:09:06:70:
a4:66:75:fe:d5:cb:ab:31:b5:be:17:3a:db:4f:8c:9c:4d:2f:
94:60:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:24:18 2025 by rpki-client