Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0dc25dd2-5b4e-33f7-84d7-a22bd6b44df0.roa
File: 0dc25dd2-5b4e-33f7-84d7-a22bd6b44df0.roa (raw, json)
Hash identifier: joD55y3UGAZHOttoYrrlkkpIAT54taT0PhEklSSRfjc=
Subject key identifier: C9:2D:A6:41:53:13:2D:57:74:85:12:6C:6A:E4:90:C8:D6:9D:84:34
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B720F3A2B93DFF03503280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0dc25dd2-5b4e-33f7-84d7-a22bd6b44df0.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.156.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:20:f3:a2:b9:3d:ff:03:50:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=818dab69-fd5d-499f-8bb1-1d820af2cdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:e3:a9:4d:83:94:e8:45:a3:72:34:e1:a8:
85:1b:69:a5:3a:a4:29:64:01:07:3b:cd:ab:cb:7e:
cb:6a:35:c3:48:b7:11:99:e2:63:43:b9:4a:a2:f4:
f0:2e:f9:be:32:dd:1e:32:80:41:c5:f7:66:45:90:
9f:50:7e:38:3f:79:37:07:18:57:e7:13:6c:5e:50:
8b:f2:11:d6:15:76:2e:75:d7:43:1f:2a:2e:da:d3:
5d:3f:f5:4b:3e:96:a9:1e:7c:74:91:bf:5f:1b:b4:
92:88:39:71:28:4a:78:57:75:91:7c:50:fe:ec:c5:
96:16:03:8f:c7:b0:10:a1:4d:3b:27:12:f0:96:8c:
cb:1e:dd:64:b9:88:26:71:26:5a:20:ec:ae:27:97:
38:88:72:ae:08:1b:a2:a9:f1:8a:e6:a1:27:44:2d:
86:74:e3:e3:29:01:c9:33:4b:40:a9:15:17:0c:cc:
56:20:7d:d0:6c:2b:7c:30:69:72:01:60:19:89:ca:
a4:1c:c7:3d:ce:99:00:65:ea:18:9e:de:bf:3d:b0:
a2:61:d0:ed:19:e3:3a:83:14:82:e1:fc:a6:a6:e5:
a6:e4:b2:ea:c1:02:ab:76:e1:ea:99:19:b2:19:45:
c8:a6:24:46:47:ae:14:fb:f9:af:65:9c:05:a8:27:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:A6:41:53:13:2D:57:74:85:12:6C:6A:E4:90:C8:D6:9D:84:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0dc25dd2-5b4e-33f7-84d7-a22bd6b44df0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:5f:24:fe:b8:ec:e8:5d:8f:73:5b:10:60:1c:ab:e1:10:91:
3d:21:60:93:41:11:aa:6a:57:52:81:e8:18:83:b4:a0:4a:35:
5b:6e:a4:4f:df:38:fe:86:3a:e1:71:83:76:c3:dc:93:79:ac:
d0:ab:c4:43:cd:b1:98:e0:39:e6:bf:1a:61:9d:ab:a0:61:55:
01:7d:85:12:17:ad:44:67:c4:43:c0:3b:c7:02:75:2b:4d:10:
3f:5f:ac:dd:06:11:0e:57:91:04:02:b6:7c:10:21:be:f8:35:
5b:9a:3e:eb:fd:70:78:3e:6b:59:4a:87:87:0b:3e:c4:73:ca:
43:8c:9d:db:66:78:ce:f6:1d:7b:16:33:99:53:16:6c:5f:68:
3a:e7:b5:cc:21:4c:20:64:9c:36:a4:93:94:63:fc:0b:1e:c4:
76:23:c5:3f:6b:72:a8:84:99:ea:6f:b9:0b:e8:6f:14:a7:e5:
71:ad:5e:b1:1d:ff:5a:b2:e4:ab:29:31:5b:87:07:f5:0e:58:
d9:39:a0:66:8c:bf:0b:a1:b5:e1:bb:ef:af:cd:47:67:5e:e1:
6c:d1:09:19:b3:f5:6c:a6:13:a2:36:36:8e:9e:5e:be:84:62:
72:6f:40:ae:8c:5c:af:8c:62:9c:99:68:11:67:b3:72:05:fa:
2c:54:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:34:59 2025 by rpki-client