Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13bf7016-10b1-3c36-a67d-652b1b9a51a8.roa
File: 13bf7016-10b1-3c36-a67d-652b1b9a51a8.roa (raw, json)
Hash identifier: ERhqvuabb76qDiwgfIN5UhRsBwt0jTufuLz5RZCRAak=
Subject key identifier: 8D:59:CA:FA:CA:25:C7:0B:BC:A9:4F:B8:36:F0:A2:47:01:F3:AB:08
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6321B7F35DD1A145FD4C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13bf7016-10b1-3c36-a67d-652b1b9a51a8.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21552
IP address blocks: 204.101.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:32:1b:7f:35:dd:1a:14:5f:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=a7899ee1-a9de-49ae-b3c0-0a1bbfe52a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:de:03:3b:88:78:36:56:4a:c6:1e:2e:8e:
de:c6:b4:65:f9:31:64:fe:d5:4b:10:e6:37:c2:3f:
4d:88:37:04:7b:24:19:5f:c3:b3:95:99:97:28:25:
7b:cd:d3:3f:4e:95:58:20:77:58:c5:94:6f:45:6c:
c7:2e:e6:e7:68:3a:8c:3a:97:40:47:3b:b8:87:73:
19:39:7a:2c:01:ab:b1:29:af:de:4c:ed:a8:7d:3e:
89:03:0c:a3:a0:2f:00:4e:b5:f7:de:dd:a1:cd:cd:
ff:9a:c3:1a:51:ce:95:2f:05:1d:f4:1c:d1:a5:55:
63:1a:ab:99:1f:a9:29:08:97:0c:a4:ff:ea:cf:48:
76:d2:f3:72:34:16:81:81:2c:d4:5f:f5:7e:14:26:
91:24:59:07:63:d4:83:26:0e:05:a5:a8:20:74:bd:
2b:f5:4c:fd:e8:75:3d:bf:37:1e:44:d0:69:46:82:
77:c3:b0:14:dd:44:9b:57:49:9a:7c:18:f8:93:21:
4d:1f:5a:44:2b:26:06:e1:5c:bb:41:7e:78:50:9c:
30:e3:b9:a3:83:04:7a:05:ea:5c:a5:0a:fa:e7:d4:
f8:50:11:8d:bd:55:24:1e:03:ea:9f:e1:25:7d:c9:
0e:f0:a1:35:74:47:90:d5:ea:3d:f3:98:d3:59:e2:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:CA:FA:CA:25:C7:0B:BC:A9:4F:B8:36:F0:A2:47:01:F3:AB:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13bf7016-10b1-3c36-a67d-652b1b9a51a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:85:91:8e:6d:e6:69:05:a6:4d:5a:54:98:35:7a:2f:92:f7:
42:54:34:d2:6e:d7:04:b2:77:1b:7b:9f:07:44:82:d3:43:76:
05:d0:55:3f:88:e0:b5:99:e2:72:3c:b6:ba:4f:7a:ac:87:63:
0c:a2:57:72:72:31:57:ed:34:6b:be:3d:55:f7:6f:1a:49:bf:
c6:b1:e3:5a:71:bc:9d:f5:b3:61:68:ff:d6:fb:99:f2:28:75:
de:ef:0f:39:a7:67:32:01:28:81:4f:94:50:e9:de:1f:09:03:
8b:de:8c:1c:0d:6f:45:16:ed:a8:17:85:e6:dd:28:36:34:6d:
02:f4:36:59:7f:14:14:4b:6c:9c:fb:1c:90:23:f7:69:37:c6:
44:7d:54:d7:6d:ea:57:ea:b9:8e:80:d2:c2:a0:d4:7d:a9:c6:
e4:e3:73:d2:e0:fb:e1:ce:75:5c:10:ed:3c:ae:16:6f:10:2b:
95:9a:eb:bb:a8:b9:01:0f:4e:a5:c7:ec:e1:ca:91:09:a6:d4:
0b:f0:af:50:e5:42:7b:9d:2b:70:c5:eb:91:51:9d:ed:aa:24:
12:60:d9:68:d3:3b:42:b6:90:a5:a8:f0:31:ed:be:91:73:30:
21:52:86:64:b8:fc:44:46:01:13:5b:88:75:b4:f2:96:f0:34:
9a:d8:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:28 2025 by rpki-client