Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0f6e06fb-ad7e-3cb3-8fbf-99e45453bb27.roa
File: 0f6e06fb-ad7e-3cb3-8fbf-99e45453bb27.roa (raw, json)
Hash identifier: kKcbDGDReruM54dV2CIbFjgssP2g4tLyNXwWM9F4BwI=
Subject key identifier: 26:66:92:54:6B:A7:54:DD:59:DA:64:C9:A9:86:BC:16:69:34:60:B0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B80CA2666F39654BE2EB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0f6e06fb-ad7e-3cb3-8fbf-99e45453bb27.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 216.209.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b8:0c:a2:66:6f:39:65:4b:e2:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=99bac1b6-7d22-4d5a-9f42-3fc0c288832e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:3a:e3:23:1a:c7:c5:c4:9b:2d:91:4f:51:
3a:db:02:b3:b2:73:6f:33:86:ad:5f:cc:3f:9f:4b:
46:8c:77:8c:80:50:c6:c5:2d:1a:8d:53:86:15:8f:
9c:9b:68:c9:00:93:47:d0:bb:fa:ed:52:e8:1e:ea:
19:f1:67:53:e3:b0:28:b0:6c:2d:34:57:61:f6:3e:
ae:1f:38:4e:f2:24:89:28:b5:f1:62:ae:c8:eb:a9:
9d:ec:5c:f3:ab:e6:56:10:a9:2a:3a:08:32:b4:d3:
4b:e2:05:b0:01:ea:0e:10:a5:92:81:c3:4c:73:e7:
20:19:dc:77:1e:4d:2e:a9:fe:33:4f:d3:30:ea:6a:
27:ec:17:87:61:6d:c0:d0:b6:56:63:ea:d9:d9:ba:
99:e2:98:e5:75:04:7f:34:f0:b8:6e:c9:1c:26:2e:
0d:2a:5d:57:73:7c:d4:87:32:d8:80:1f:f1:21:eb:
96:59:ed:f3:d2:ab:29:26:da:31:b9:3a:20:5d:51:
1e:bc:9f:3f:d0:22:db:b6:8f:25:31:97:47:40:08:
cc:f9:2b:63:d7:3e:b2:0c:b0:9f:ad:33:d1:d1:2f:
e9:34:00:f8:e3:a8:26:15:dc:a4:3e:f0:b5:86:b8:
5d:5e:88:24:03:fe:7e:60:f1:7f:eb:84:2f:96:7d:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:66:92:54:6B:A7:54:DD:59:DA:64:C9:A9:86:BC:16:69:34:60:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0f6e06fb-ad7e-3cb3-8fbf-99e45453bb27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:00:8e:d2:dd:df:2a:c6:b0:0c:29:57:95:2d:bd:6e:5c:d2:
c0:87:f4:69:01:e7:ed:b4:e6:34:fe:cd:fc:02:a1:e7:8d:57:
75:d6:2d:37:27:1b:68:8b:79:be:f5:29:79:a0:65:e0:ca:0d:
cb:d0:27:02:b9:5d:ed:05:0c:69:92:b3:17:e0:f7:ff:3c:02:
ff:1a:f5:ed:56:da:1d:56:e8:4c:8f:ca:60:84:da:1e:d8:e7:
e6:7c:1c:86:f5:af:75:b7:04:12:c7:81:4f:cd:3d:52:84:5b:
52:3a:7b:42:15:35:41:db:9b:45:d7:70:42:f7:72:05:d3:23:
bc:11:84:12:83:e7:0f:39:6d:5e:d8:51:25:2e:00:07:08:16:
a3:d4:b0:da:1d:5e:1d:04:21:01:0b:f0:07:69:17:8f:7f:3d:
46:07:a4:9a:f5:d7:b7:6a:24:e4:c9:16:ee:72:53:4b:59:21:
3c:ff:36:60:1f:fa:30:4a:95:b2:e8:d0:85:ed:84:ca:09:e3:
9d:6d:58:03:7a:10:2d:ae:8b:a5:99:b0:80:85:aa:6c:65:df:
b7:3e:0e:6f:5f:ee:b8:18:15:8a:1d:27:57:7e:35:19:6f:29:
92:b7:38:cb:48:94:9f:97:e6:61:c8:9d:91:dd:1c:7c:c3:d6:
6a:03:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:53 2025 by rpki-client