Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/24ed4743-a613-3508-a227-6ad86187a53b.roa
File: 24ed4743-a613-3508-a227-6ad86187a53b.roa (raw, json)
Hash identifier: 29kcvyaKbXqoaD9ivZLXceLU4CjJevu/0+rgMdt4rBE=
Subject key identifier: 07:05:7D:EE:9C:12:D2:9C:B2:4E:2C:64:67:D5:C6:CD:AE:82:AC:9A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6430B3C96620CB9459F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/24ed4743-a613-3508-a227-6ad86187a53b.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:43:0b:3c:96:62:0c:b9:45:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=7187b82d-95a7-4475-b93c-658b1d0adca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5c:f3:dc:04:8b:bd:5f:02:61:9c:94:48:20:
ef:4a:5a:9d:ad:b0:eb:ef:b7:44:5b:41:f5:26:a0:
18:e1:59:f1:bb:24:e0:60:f8:01:7c:d9:ec:1b:b1:
43:0f:dd:7d:07:e6:d8:dc:49:f6:ed:cd:c3:c1:fc:
49:8c:c0:7d:75:26:b9:2e:f9:48:ed:7a:5f:c6:fa:
94:a1:f6:f5:14:3a:74:31:f9:2c:2b:ba:9b:72:e8:
a8:6d:e1:95:83:de:36:d1:18:4a:ed:19:48:61:c3:
3b:e9:1f:41:a6:50:56:df:4f:df:d5:ae:49:42:27:
27:20:70:47:fa:39:ee:66:8c:42:25:b9:2c:7e:45:
3d:d1:ae:c5:70:52:85:37:77:1d:24:7b:5f:e0:27:
c7:64:4f:b7:3a:e3:ac:cc:89:9e:11:b5:6e:ab:7a:
fe:69:f4:58:96:0c:65:86:82:d3:8e:ab:ba:10:ed:
02:7c:86:4b:c0:fc:da:47:41:02:07:31:83:04:85:
28:ad:3c:7d:9f:10:30:f8:d4:15:b6:f4:e5:b6:d5:
17:64:2a:d5:b5:ba:4b:06:b4:81:95:b0:62:34:0a:
e1:69:bf:67:2c:4e:97:17:d9:e8:05:03:00:5d:d3:
ed:16:7e:48:cc:0d:f5:81:61:c4:db:b2:61:a7:06:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:05:7D:EE:9C:12:D2:9C:B2:4E:2C:64:67:D5:C6:CD:AE:82:AC:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/24ed4743-a613-3508-a227-6ad86187a53b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:6d:2c:06:36:25:ca:64:c1:db:ab:b5:14:0e:7d:75:fe:c2:
64:b8:a6:0d:cb:0b:8e:78:f0:42:4e:92:ae:30:fa:a9:87:29:
ff:f2:bf:92:42:a9:aa:fa:81:82:d6:74:39:73:41:2a:e0:97:
1b:5c:7f:bc:ae:3d:ad:5c:4b:99:e1:a9:75:33:bb:1d:fa:d0:
3e:e4:29:ef:83:1a:cf:1b:4a:a9:a5:97:65:6a:34:c7:73:a7:
6b:87:9b:ed:60:d8:c1:e9:c5:6b:6a:a1:64:cc:db:a8:9a:8a:
7c:5d:c1:bc:5a:3e:6d:2b:9d:f2:0b:b9:9d:a9:cd:00:76:de:
31:90:1d:7d:eb:de:90:87:05:6b:58:2d:8f:3b:55:77:5f:6b:
6d:0c:7f:99:29:6d:54:63:08:94:cf:b1:3a:c1:de:8c:b9:c1:
b4:2c:22:e9:d6:64:89:ea:c4:ac:16:46:af:53:8f:66:c4:69:
a6:9c:31:93:e5:f5:bc:01:1b:39:c6:1b:ec:f4:ff:7c:4f:45:
d8:d3:b9:ab:58:1b:29:52:a4:ba:c1:0d:98:37:12:21:50:2a:
c2:07:94:bf:34:9a:2c:67:60:51:9f:8c:5c:04:6e:64:52:12:
6a:e5:f5:50:98:0c:a5:72:0b:30:cf:c1:12:05:0c:ca:e6:87:
1a:dd:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:13 2025 by rpki-client