Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02afd4c8-8291-35b5-b390-bc852c8c4e1e.roa
File: 02afd4c8-8291-35b5-b390-bc852c8c4e1e.roa (raw, json)
Hash identifier: PjrULhxEEY2F06wxZENIgRp38hk4BildxUDyoB22FVw=
Subject key identifier: 45:98:19:81:71:83:05:31:C2:4D:95:BF:F7:3C:54:E3:92:10:4B:17
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826BD1345E9C57C547558E480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02afd4c8-8291-35b5-b390-bc852c8c4e1e.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 53820
IP address blocks: 204.101.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:bd:13:45:e9:c5:7c:54:75:58:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=4967dfa7-d726-4252-869b-dee308545124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:cc:11:49:78:16:45:d2:9c:8e:f6:6a:a9:
94:25:2f:29:00:fa:4e:80:e2:a5:8d:29:89:2e:55:
7a:2e:46:dd:5d:ea:32:8f:3a:f9:59:b9:1f:1f:5f:
e9:48:33:e7:35:43:f1:e3:01:81:c9:3e:6e:65:59:
f7:f7:23:f4:3f:86:24:4a:74:14:93:65:5a:6f:7e:
a6:a7:d5:34:d8:01:b7:f5:f5:83:43:ee:0c:8a:7e:
aa:54:fd:65:e1:cf:b6:90:a4:ce:86:ce:e5:b2:00:
4b:cb:e3:a9:bb:55:8a:e9:26:1d:3d:98:b5:1b:2f:
fc:3f:9d:c9:d7:76:c1:28:00:80:ff:48:f5:fa:40:
37:dc:44:ab:63:c4:3e:20:8d:a1:ca:93:96:d4:99:
9e:75:11:4d:ed:58:06:6e:0a:1d:a3:0e:ca:94:2b:
50:18:7d:98:02:13:a7:90:36:95:92:df:a9:02:41:
22:a2:df:18:4f:ea:82:0d:51:08:7c:22:e9:c0:48:
d9:e8:b3:d9:ff:2d:29:98:ca:2d:12:fa:c3:43:55:
c3:be:04:24:0d:ab:fa:10:44:76:69:dc:f0:1e:3c:
76:d5:4e:4a:94:b6:b5:20:2c:4d:63:94:0a:dd:f5:
65:8a:4a:9d:46:0b:64:7e:ef:fc:fb:d4:ad:79:16:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:98:19:81:71:83:05:31:C2:4D:95:BF:F7:3C:54:E3:92:10:4B:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02afd4c8-8291-35b5-b390-bc852c8c4e1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:e7:f3:ad:91:e3:48:32:21:af:e7:47:b4:38:59:16:9f:f0:
fa:d8:79:4e:eb:82:53:ba:0a:f8:e0:5e:40:cc:86:02:6e:e0:
57:99:03:1b:4c:c1:37:9b:63:81:73:cc:12:24:e0:4a:9f:33:
45:d3:8c:8a:8c:80:f9:ee:e5:97:10:0d:51:3d:f0:d1:87:bd:
3c:3b:62:f5:a5:75:51:7c:d0:85:48:b7:84:86:0e:d9:d5:22:
93:a5:24:06:3b:a9:4f:71:af:13:b4:46:51:86:63:5e:ed:e9:
ea:37:e3:29:84:01:28:8c:6d:a1:5d:03:70:e8:31:51:cc:1d:
b9:dd:2d:dd:68:7f:28:10:04:a4:60:08:6e:5d:d6:6a:78:c8:
e8:6e:1d:51:ff:55:62:e3:54:b2:8f:24:6d:99:2d:01:82:51:
4a:bd:ce:33:bb:91:35:ab:1e:0a:6e:19:ae:c9:e9:f5:a2:a2:
5f:a8:a6:61:85:e3:ff:11:aa:22:25:f3:11:aa:23:ba:8a:5a:
3b:36:5e:3d:a2:3e:6b:07:9a:40:eb:7d:21:9e:51:72:3c:b9:
09:70:f6:df:b0:8e:e3:04:24:37:83:9d:e7:4c:bf:30:01:6d:
d5:27:e6:56:d6:0e:49:53:ac:3f:9a:31:fb:3c:b4:e6:c3:63:
5b:f6:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:22 2025 by rpki-client