Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/158af9ba-73bb-3da7-95cd-43b56f4c9ee5.roa
File: 158af9ba-73bb-3da7-95cd-43b56f4c9ee5.roa (raw, json)
Hash identifier: TNi1mysFWDTpfG3y6p6TUcILxSljr/9IxbaMNPCk+Pg=
Subject key identifier: 50:86:54:E7:96:2F:4A:EF:06:59:82:C0:AF:F8:17:A4:01:53:DB:14
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7013F4521275F5C1F95D0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/158af9ba-73bb-3da7-95cd-43b56f4c9ee5.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 207.164.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:01:3f:45:21:27:5f:5c:1f:95:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=65619e24-73f5-4e61-9250-d5c7b131925b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:59:80:de:3a:66:36:ed:83:f7:a7:2d:15:
df:f7:25:6b:09:f2:f8:21:2e:5e:1f:37:b3:3b:8c:
8c:93:52:b2:59:11:ef:51:e1:74:c7:c1:0f:80:dc:
6f:33:0b:01:02:82:08:ff:2e:bf:26:75:44:93:59:
96:44:67:89:26:5e:ad:c2:6f:a1:c6:b3:5c:79:60:
45:a0:d9:6a:5d:2a:ae:97:64:29:12:7b:2c:27:22:
cc:8e:23:48:ae:c1:21:60:d8:7c:43:4b:19:7a:98:
84:83:39:7e:58:a9:e8:c1:76:c4:f6:d1:7a:44:4b:
49:e6:78:95:ff:08:a3:3a:01:db:4d:c8:8e:bb:00:
23:f1:a7:36:70:65:41:91:b2:bc:e7:a2:17:9b:63:
43:4e:68:2c:7a:80:f0:e5:23:ca:9e:ce:12:37:04:
75:1e:75:e3:dc:01:27:fe:7b:a4:22:27:26:94:92:
49:f8:a1:97:f9:77:66:11:77:b4:59:16:33:18:4a:
63:00:6d:71:17:de:b8:28:14:18:6c:20:90:cc:0f:
d5:42:13:de:71:cf:7f:af:c9:df:57:b2:8b:ff:4a:
20:dd:07:f2:1e:5c:1a:eb:0d:c8:43:03:5a:fd:25:
f7:71:69:70:a1:77:b5:35:33:f5:04:44:99:64:45:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:86:54:E7:96:2F:4A:EF:06:59:82:C0:AF:F8:17:A4:01:53:DB:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/158af9ba-73bb-3da7-95cd-43b56f4c9ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:48:3c:5a:c4:2e:6c:8c:d9:27:80:07:99:c8:8a:23:2b:92:
55:11:c2:fd:b3:5a:da:f1:88:d3:cb:fa:76:15:7a:fb:bc:5e:
78:78:e1:eb:e0:88:06:b3:30:08:71:4d:60:ff:ca:d1:47:c6:
13:c9:da:a6:0d:3d:45:1b:b3:b8:4e:cf:e4:ea:29:31:cc:e3:
fb:49:bd:1e:9e:e8:0d:bf:af:6b:83:3a:47:85:95:a3:29:2f:
e5:50:82:68:b6:9a:3f:17:db:ff:22:b2:aa:58:35:cf:dc:26:
9c:68:19:9b:88:e0:f3:bb:94:70:c1:85:9a:be:a3:39:05:ce:
da:8c:bc:2f:c2:e9:4e:a0:7b:4b:d0:25:4d:89:f8:9c:ab:4d:
6e:4e:ec:5b:5e:53:df:02:55:bb:ee:97:b5:ef:9c:be:83:bd:
ee:f0:71:0a:b8:7d:3e:fa:c8:0c:2b:29:9d:21:46:6b:27:50:
bb:13:e2:0d:26:7a:d2:8b:47:13:ae:36:60:af:f4:22:31:53:
00:b1:c1:53:9a:e6:fb:29:b8:df:0a:97:2d:b0:50:f9:96:0b:
c3:22:2c:54:d8:8e:39:51:91:be:99:13:66:9a:da:53:d9:51:
87:63:a3:87:dd:b6:16:45:9d:50:2e:df:67:0e:4c:cd:03:87:
00:c9:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:18 2025 by rpki-client