Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0284de2f-b466-301b-99dd-7d56567e42de.roa
File: 0284de2f-b466-301b-99dd-7d56567e42de.roa (raw, json)
Hash identifier: dGBBEk4xMCAIw5hp/GL+YTvJcmEprMfagY0yPA+XdaM=
Subject key identifier: FA:DB:A4:46:1C:41:A2:C4:0C:12:FF:AD:D6:70:E4:E2:97:8E:AD:F5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2A6B8DE0A419701E53CF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0284de2f-b466-301b-99dd-7d56567e42de.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 855
IP address blocks: 207.34.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2a:6b:8d:e0:a4:19:70:1e:53:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=3d231dfe-eb57-46c9-bc37-a13ad6c48c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:83:50:1e:2b:78:86:d9:b1:3c:01:f8:90:
fc:09:0d:55:17:a1:ce:f5:7b:fa:b5:49:a3:43:c6:
62:c2:dc:33:39:75:50:e3:fa:1f:43:ed:db:10:5b:
eb:12:27:6f:a6:d2:ea:51:43:70:d5:cb:6d:fb:0f:
ba:83:94:f8:10:ef:94:fd:b0:04:cd:6b:86:8c:c5:
f5:ea:a2:a3:5e:93:bd:50:a6:2c:8a:61:12:71:83:
69:f2:76:03:b1:96:4b:d5:9c:21:cc:a0:1f:dc:99:
01:9d:51:91:95:01:b5:ab:27:25:c6:2f:21:45:27:
c0:17:90:e1:8f:25:3b:03:b9:73:e0:01:dd:05:b4:
b2:06:3b:d3:5a:39:6a:5b:62:b9:de:19:1c:d2:30:
d5:88:30:03:94:50:11:5e:9e:cb:21:ad:30:7e:90:
0b:62:fd:0f:57:5d:58:8d:78:5c:df:92:f2:af:23:
f8:f7:e0:11:44:3b:ef:05:a4:3a:9f:58:15:e4:90:
51:ec:87:4d:72:f0:5a:e9:11:a1:f3:b5:0a:df:3d:
50:af:6f:3c:80:63:e3:21:e7:20:14:a9:18:5b:74:
ab:59:77:02:f3:de:13:67:49:69:40:aa:14:f7:fe:
fe:b0:b2:8c:75:54:db:a7:a9:99:c0:95:4a:04:3c:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DB:A4:46:1C:41:A2:C4:0C:12:FF:AD:D6:70:E4:E2:97:8E:AD:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0284de2f-b466-301b-99dd-7d56567e42de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.34.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:16:61:22:6d:32:a2:bb:03:1b:00:ea:18:fc:3e:be:f0:1d:
e9:8b:49:a2:bf:d3:6f:38:2b:99:98:42:15:64:f0:9c:7e:2c:
2c:50:4d:31:ae:aa:6e:14:ca:a9:68:9f:dc:d1:ea:da:ce:ed:
b5:36:b7:48:53:4c:bb:77:d4:5a:ac:2e:3e:1c:e5:a8:08:a0:
3a:1c:3d:a3:94:58:dd:f9:bf:ce:77:9f:b5:cf:b3:a1:db:0a:
64:ad:c4:e8:3b:90:f5:b8:6d:33:90:78:38:e0:98:d3:b6:59:
b9:f5:2b:ea:cb:ae:37:ea:3e:b6:da:83:04:6f:3b:cb:6c:df:
10:9b:1f:41:aa:ac:83:b0:e3:1b:f4:a0:35:12:46:f7:51:1b:
04:eb:4f:4e:0f:dd:76:ce:a3:ee:5c:2e:a3:81:c0:a9:ed:47:
38:33:7c:a4:3b:cd:b5:fe:75:9b:39:b3:80:6b:c5:0d:8b:c7:
27:5c:92:e6:88:e1:4c:44:6e:7b:81:00:35:4b:73:fa:51:06:
98:7c:50:25:49:05:76:b4:71:91:97:0f:68:47:54:3e:07:6e:
d6:0c:c1:46:1c:63:25:59:9a:b8:b8:93:ff:db:89:ee:f8:b7:
f2:d2:d6:2c:6d:b4:ef:03:c7:ff:7e:84:6b:99:be:eb:98:a3:
fb:cd:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:52 2025 by rpki-client