Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2947c187-91e6-3f4f-ae12-c38a841e73e6.roa
File: 2947c187-91e6-3f4f-ae12-c38a841e73e6.roa (raw, json)
Hash identifier: MRWtBNkuyWJJmeSSO2Bc5hCjFbiRG/0ty+XmpYNAMMg=
Subject key identifier: 22:E8:2A:A7:77:57:86:A8:2D:40:F0:73:21:0B:CE:7F:B1:BA:8E:97
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B64A597FC6CA490EB96D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2947c187-91e6-3f4f-ae12-c38a841e73e6.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21552
IP address blocks: 204.101.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:4a:59:7f:c6:ca:49:0e:b9:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=51eba4ad-84d0-4d5c-ae0a-7b5e32e0ecb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:09:fb:b8:0c:4a:65:f6:92:89:e9:37:d5:
8e:af:f4:29:bc:f2:d6:16:57:a3:87:70:6a:96:76:
54:d5:36:31:da:d0:e4:34:13:23:0a:cc:b3:4f:83:
52:d7:6d:60:55:6b:79:b2:da:2e:90:43:10:ae:5b:
0f:fa:fc:d7:f5:38:3b:1e:6f:ab:e2:d2:be:63:c4:
49:fe:0e:19:89:09:80:81:dc:a1:69:79:6b:ec:eb:
1d:29:50:5e:b9:ca:8a:fa:ff:9b:e9:53:90:cb:0d:
26:fe:1f:af:4f:d8:6f:75:c3:e4:84:82:ce:b8:77:
e8:c0:4b:a0:8f:3c:19:0f:05:d2:11:e4:00:2d:c1:
e2:e1:49:f0:23:00:2f:70:cf:a0:a3:5d:63:e8:17:
50:7a:14:fd:aa:8e:92:64:22:88:90:5a:29:40:c6:
5a:72:90:76:48:59:25:1d:15:b2:3d:8e:54:5d:32:
80:da:52:41:58:dc:0c:0d:14:d8:7e:4d:9f:10:de:
db:36:cb:28:80:2e:d7:a3:2f:18:04:39:a7:c5:9c:
7c:f9:6e:85:fb:96:14:0e:a1:12:53:e8:f6:9d:fd:
03:4d:73:c9:c1:e8:92:83:7f:62:8e:da:f2:6e:12:
de:e3:5c:2f:1a:f4:9d:e6:9a:90:c3:29:0b:61:b2:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E8:2A:A7:77:57:86:A8:2D:40:F0:73:21:0B:CE:7F:B1:BA:8E:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2947c187-91e6-3f4f-ae12-c38a841e73e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:c1:c1:c3:1c:ff:a5:10:59:f0:9f:5c:99:03:89:9f:db:e3:
e6:c0:6c:e4:1c:50:16:f0:02:e0:d0:9a:08:8d:eb:4e:f7:db:
a3:d0:d7:b8:14:ec:ff:2b:ca:1c:94:8c:f5:03:60:b2:ae:67:
af:6e:ed:85:4c:6d:c2:56:73:50:ff:43:54:23:4a:c1:02:3b:
f0:83:3b:2c:0c:86:68:56:89:df:d9:7c:f9:1f:24:9d:23:2a:
e7:ed:ce:2c:33:3b:92:cb:eb:61:8e:d4:67:f6:89:2c:e9:48:
63:82:ff:a9:c5:1a:ce:75:fb:67:95:40:59:fc:86:f8:e6:be:
87:8d:49:92:a4:6e:c4:00:13:15:3f:b0:cd:a8:c5:1d:27:2c:
a8:91:c7:a2:9b:99:f6:a6:86:d7:5e:f0:57:62:af:4c:5d:1b:
aa:09:51:52:96:a7:2d:db:21:70:a1:2c:14:93:3e:e6:d4:66:
fb:28:a7:8a:7b:ef:87:f2:9a:44:72:04:39:bb:45:27:88:bd:
0e:a1:50:f7:51:bf:bf:db:65:94:da:09:02:b2:12:b2:29:45:
3c:b2:ae:d9:0a:c7:f6:4b:62:80:fc:33:d4:ad:ce:38:a1:f8:
0b:8f:cb:3e:5e:c8:0c:0a:51:81:9f:79:91:98:7f:b2:8c:d2:
67:88:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:25 2025 by rpki-client