Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1f4df1c2-12dc-3248-bf2d-782b3c881498.roa
File: 1f4df1c2-12dc-3248-bf2d-782b3c881498.roa (raw, json)
Hash identifier: mNGar34IIV6g8QbvLBzgYxSrcbUzk5qilJhx2ANCTME=
Subject key identifier: FB:46:14:E3:7E:D7:7C:2E:8D:AE:88:9C:93:5A:18:03:00:4C:F4:AC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5FBD8B0751B41D46548C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1f4df1c2-12dc-3248-bf2d-782b3c881498.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 198.235.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:fb:d8:b0:75:1b:41:d4:65:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=99c5452a-5e51-4f5c-9f93-ecd18d363805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:91:cf:15:31:9c:b3:3a:93:17:12:d7:ce:
a2:e1:8f:6b:f0:c9:a2:6c:4a:8b:cb:6b:77:9d:8f:
0a:29:ba:b3:48:15:0f:2d:e3:be:04:09:f0:48:23:
f7:18:70:4f:92:26:d0:11:ad:dc:0e:3f:5d:b9:75:
cb:7c:16:a2:ac:10:02:a3:11:0b:a9:fa:33:b9:b6:
bd:81:5a:74:a7:54:df:57:fc:f4:9e:ff:08:a0:17:
58:79:32:a0:cb:e6:14:08:fd:ae:fc:d7:ec:df:f5:
36:3a:2e:46:e5:26:dd:7f:a7:cc:c1:aa:29:8f:4e:
69:52:f0:5b:05:86:13:d1:1e:04:59:20:0a:f3:1e:
ac:5c:71:b2:c1:7f:f4:31:ed:a8:43:7b:c3:46:e5:
97:e6:00:0c:4e:22:4e:50:d9:17:b9:77:df:50:84:
49:95:49:8b:d6:d7:0f:d5:5d:75:d0:37:bc:fa:bc:
53:2b:d2:84:e1:1d:b2:7e:4f:d2:db:ea:fa:1a:74:
b9:8b:22:49:19:39:a2:d8:54:fb:48:d7:fc:57:86:
b8:b2:16:9e:73:78:a1:bb:47:f6:66:52:5e:28:d4:
4a:a0:6e:1c:5a:8a:a1:30:93:f1:ea:c7:d5:bb:21:
19:02:2e:f9:79:f6:de:2c:5c:69:7f:0d:ec:53:5f:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:46:14:E3:7E:D7:7C:2E:8D:AE:88:9C:93:5A:18:03:00:4C:F4:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1f4df1c2-12dc-3248-bf2d-782b3c881498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:a2:39:3a:24:86:62:bc:33:e1:8f:31:6e:21:1d:e5:a1:d0:
34:34:1e:99:3d:57:da:19:66:4d:ef:bd:b4:d7:89:2a:8b:0a:
47:9d:7c:3d:5e:26:4b:dc:1a:fa:2a:ea:cb:ff:12:0e:bc:83:
ae:b0:fe:30:21:b7:7f:7e:76:18:d2:f1:09:35:6c:ee:75:fd:
08:58:29:98:fe:04:85:c4:0d:14:eb:45:e4:38:43:70:9e:15:
62:f5:42:33:f0:3c:1b:63:99:b9:0c:f3:c7:f0:1d:32:ac:ac:
4c:50:6e:df:1d:78:2b:14:0a:c5:79:d5:cd:ac:cb:ef:bd:1a:
5d:67:c4:b9:e7:6e:0a:cd:c2:b9:f1:20:84:45:42:05:95:24:
9e:d6:5b:ef:9e:ba:07:c2:ca:a6:f5:50:87:1c:9e:47:c2:10:
2d:c3:f9:2e:d7:7a:b7:56:2f:d1:20:e7:9c:45:82:ab:c1:15:
e9:72:ab:53:64:79:3d:f7:71:e8:dc:e6:d2:3c:c2:92:a9:12:
e0:75:65:5d:77:b1:a7:9f:74:9f:bc:e0:e1:f8:a5:39:8c:8c:
c5:88:76:b7:52:bf:f7:e4:8e:8a:3d:78:d2:8e:89:c5:da:8a:
c3:ad:9d:a0:1f:9e:61:9a:99:12:c1:9c:10:87:88:8c:0f:1e:
bb:24:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:43 2025 by rpki-client