Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/296021b5-8135-3624-b28c-5ddcfc5c8942.roa
File: 296021b5-8135-3624-b28c-5ddcfc5c8942.roa (raw, json)
Hash identifier: 6a+IexsXUJACzw2FeAeKNzUWTg/ndSOR+Gqd6Om58dc=
Subject key identifier: 9E:CD:86:CB:95:C6:D7:B1:DE:75:7F:AF:FD:49:CD:3D:41:D5:33:D6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29B62F71D2D947B5399300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/296021b5-8135-3624-b28c-5ddcfc5c8942.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21724
IP address blocks: 204.101.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:b6:2f:71:d2:d9:47:b5:39:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=f8a03814-db4c-453f-83cb-2b19799ab3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:ea:e5:b6:21:2f:4c:8b:dd:a0:cf:30:23:
c1:81:39:89:d8:c8:87:d7:5e:1e:b2:b5:fd:7d:b3:
f9:6d:57:91:70:81:87:a0:a7:b1:cf:0f:fb:40:18:
9a:9f:a4:ac:1e:ee:a9:fb:fa:e7:29:32:16:f2:39:
35:3a:50:59:b3:ec:50:96:2a:ed:8d:2b:ab:2c:76:
35:48:3b:88:1f:b0:a6:dc:55:48:8b:2a:13:5d:bd:
bb:9e:ee:3a:6c:70:dc:27:86:25:75:a6:2b:51:96:
34:5f:31:11:f1:b4:9d:e3:d5:f8:69:5c:67:d1:26:
5b:14:c8:e8:c2:6d:4f:00:5b:4f:16:79:e3:7d:c2:
a6:dd:40:27:33:04:71:28:5a:80:d7:02:73:cc:11:
ee:ef:29:24:03:43:a8:be:09:ae:36:23:b5:45:17:
88:8c:21:19:3c:b3:fb:7c:66:7f:f1:10:2c:f6:68:
02:a0:97:a3:e4:e3:9c:9a:46:da:d6:9b:10:42:45:
29:1b:c2:46:c3:59:c7:2a:4c:e4:48:28:50:5c:d3:
89:fa:0e:05:e1:39:fb:b6:53:cc:c3:39:39:9e:d3:
2f:b1:83:dc:8a:09:d0:1a:fb:ae:10:dd:ed:88:b2:
d6:93:7a:9f:be:c2:e6:51:7f:65:a8:d6:13:be:cb:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:86:CB:95:C6:D7:B1:DE:75:7F:AF:FD:49:CD:3D:41:D5:33:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/296021b5-8135-3624-b28c-5ddcfc5c8942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:eb:dd:69:a2:1d:eb:4a:12:00:2d:a2:81:be:31:ef:04:e4:
49:12:b7:5a:2a:0c:11:67:b8:76:a0:6c:08:9a:89:ec:6e:fc:
06:83:dc:05:fb:35:8e:a9:3d:d0:5b:a7:f2:6d:6c:39:e5:a1:
a8:96:16:04:60:20:64:91:c3:07:f1:87:ab:27:42:16:57:3e:
26:89:6a:1a:70:30:a5:d4:ff:17:11:2c:67:65:1c:c8:0d:e4:
8e:81:87:41:b7:a4:38:25:d5:ea:26:2a:55:85:dd:14:1a:dd:
55:ae:40:f2:09:f6:fa:46:aa:6c:f6:2d:4d:8d:b2:27:2d:3d:
a5:01:ee:52:b8:7a:39:b5:85:57:48:8f:d2:0e:5a:6f:85:50:
b5:b4:f2:cc:e4:79:a4:f2:f7:51:26:e9:e1:df:5c:17:62:b9:
6c:f7:1e:e5:8e:54:a0:62:6d:0c:12:3d:11:66:95:a7:6e:9a:
e7:18:63:ca:bd:e9:8b:24:3c:7f:f1:4c:0f:0b:b0:26:e3:bc:
df:f7:fa:1b:ce:f7:ac:95:8f:fb:35:ed:a6:e5:51:94:01:04:
7f:73:65:e6:2b:a8:b8:1e:9d:f2:82:5d:8c:c0:1a:4c:47:18:
bd:6a:58:4f:6e:d0:fc:28:69:bb:61:87:b9:49:0a:1a:64:53:
47:03:da:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:22 2025 by rpki-client