Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/275433e6-a1a5-3e81-87c4-9537e1fafc50.roa
File: 275433e6-a1a5-3e81-87c4-9537e1fafc50.roa (raw, json)
Hash identifier: kA356ryGGWqd52WtbYMGy5xZH9dlde2N0fhOtSIagak=
Subject key identifier: 0A:C1:44:39:81:DE:EA:E6:13:DC:E6:E4:17:51:08:6E:1A:77:94:ED
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B410E89C011A824F9DD6C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/275433e6-a1a5-3e81-87c4-9537e1fafc50.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 12132
IP address blocks: 199.243.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b4:10:e8:9c:01:1a:82:4f:9d:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=28087f64-0ff6-4846-b47c-3f5c2edfec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:2b:76:83:41:12:30:a9:d4:5c:ad:9e:5e:
c9:c1:23:dc:47:e3:ab:e1:79:05:83:3d:81:c6:52:
c8:56:a3:36:03:66:26:d7:4d:a6:af:60:b3:5e:4b:
b4:fc:dd:56:18:3f:40:78:2d:51:23:ed:79:49:e6:
e3:9d:87:56:eb:56:b1:f7:04:c5:9b:cf:6d:90:7a:
66:a2:03:2d:10:e8:90:e2:e4:5c:ec:6b:fd:58:da:
2f:58:71:b9:40:8b:6e:94:a2:87:7e:0a:42:97:40:
b2:bb:39:aa:d2:96:2e:bd:11:e8:57:f7:e2:6d:62:
0c:12:e1:98:a7:d5:24:80:a3:b0:f0:8e:55:87:df:
51:4b:fa:30:f2:86:98:9b:33:e1:7b:ae:b2:3f:2f:
07:28:c5:69:d9:e2:ee:57:eb:b5:81:62:8d:df:b9:
97:4e:a4:30:ab:d1:27:bf:78:94:3e:49:c3:dc:68:
cf:81:2b:34:b6:90:b5:41:62:da:b2:fa:d7:2f:aa:
91:46:ce:b8:11:b0:d0:0b:be:ad:b7:08:33:82:92:
00:73:2c:c2:3d:82:47:9c:f8:e4:41:b8:9f:3d:7a:
6f:1e:74:32:25:d9:f5:e9:20:6b:47:18:fe:cd:48:
42:3d:ca:b0:1b:8a:35:57:90:4a:8d:29:f3:2d:e6:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:44:39:81:DE:EA:E6:13:DC:E6:E4:17:51:08:6E:1A:77:94:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/275433e6-a1a5-3e81-87c4-9537e1fafc50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:ee:27:2f:56:2f:6c:dd:7c:80:d4:d8:2f:13:32:59:64:ee:
1d:5b:ed:3d:54:19:be:90:77:a1:20:d6:4a:2f:5b:fa:76:6f:
ee:cd:f3:eb:27:fe:15:e6:95:3e:d7:8e:72:c2:31:0b:9e:e9:
51:ac:38:b6:cc:db:14:17:f4:7a:b7:17:a7:f5:5d:f4:e5:60:
f3:a9:d1:cf:52:8d:45:b0:16:99:76:60:96:b6:68:de:cc:6c:
d9:c4:45:58:d0:cf:53:1f:16:5e:1d:f2:3f:f3:f5:d5:ec:cd:
c4:74:b2:b2:01:a1:32:76:5e:ea:28:78:76:39:9f:35:15:f9:
63:81:3f:47:7c:3f:82:4c:b2:c5:be:57:8f:79:ea:f4:7a:6c:
dc:1f:88:58:e9:42:39:0e:ca:fc:81:9a:aa:72:7d:7a:49:7e:
db:e2:02:56:71:20:a5:d8:59:cb:e6:29:4f:ba:91:63:36:dc:
a2:14:78:9c:5b:bb:9e:49:91:be:2c:95:92:a2:7e:f6:25:98:
45:4c:4e:f7:20:f5:13:92:87:0b:ea:a2:3a:2d:dc:af:6a:22:
40:3f:6f:2d:67:3d:32:82:f0:cc:95:12:66:0a:76:36:19:78:
bb:66:94:a1:b8:67:af:3d:81:cb:8f:f7:c4:fe:66:b1:4a:a2:
6d:eb:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:16 2025 by rpki-client