Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/29f7f40b-da9f-329f-a930-4c94722eb5c8.roa
File: 29f7f40b-da9f-329f-a930-4c94722eb5c8.roa (raw, json)
Hash identifier: 0VVvS+Mu9ASXx+01s3ybydeKjLlZd6KOcNnhkeOl5rs=
Subject key identifier: D4:D8:3C:82:8B:36:B2:E4:EF:1D:99:C2:41:76:2F:26:35:5E:AF:6D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B44D5CC5FF529931E3D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/29f7f40b-da9f-329f-a930-4c94722eb5c8.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21552
IP address blocks: 209.226.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:44:d5:cc:5f:f5:29:93:1e:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=601efd39-825b-4ea7-99bd-0dcb7648138d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:92:0c:c2:d1:eb:75:34:a2:8a:6d:87:4d:
58:d0:62:2d:c6:5d:29:b4:c6:63:73:cd:d7:f8:bc:
6b:c6:32:09:7d:48:03:3d:19:70:3e:3b:dd:b4:17:
f3:87:17:a7:c2:fc:8d:ae:78:55:88:28:55:7e:c8:
a4:bf:5a:1b:00:f4:ea:f1:d5:9c:24:e3:4a:59:db:
5e:86:06:df:56:3f:07:36:6f:a5:0b:4e:73:e4:79:
72:38:30:ce:44:50:c2:0d:02:54:a0:90:3f:65:a1:
15:8f:10:2a:04:73:1d:6d:c5:8d:f2:04:59:84:48:
2a:ad:e9:c0:af:92:27:d7:29:ee:ec:24:62:b6:c4:
77:fd:3b:4c:84:3e:a2:f8:64:ad:46:b3:bf:cc:78:
e3:32:05:e2:3c:1a:6e:10:fa:d3:d1:c1:c5:54:47:
51:a9:0e:47:41:bf:3d:6d:90:e2:05:51:3b:e6:2b:
60:58:e0:c0:43:b8:32:5e:d7:eb:d0:ad:1a:a8:c2:
6b:f4:29:b2:87:ea:b5:6a:92:8f:38:cd:2d:9a:5b:
98:5b:da:b0:b1:13:cb:22:97:01:ab:7e:7c:ce:b8:
a4:e5:bd:bf:fc:8a:62:c1:95:bf:d1:8d:1b:ac:75:
97:c7:b8:2c:fc:f1:0d:e3:29:33:6b:66:5d:1a:96:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:3C:82:8B:36:B2:E4:EF:1D:99:C2:41:76:2F:26:35:5E:AF:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/29f7f40b-da9f-329f-a930-4c94722eb5c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:f8:87:3a:d3:f6:85:4f:d6:f8:b6:72:70:95:32:50:e6:21:
28:2c:ff:a7:61:01:78:9d:33:03:85:4d:16:f6:c0:c2:79:d1:
1c:07:4b:45:07:f0:c6:e0:d6:f0:5c:4e:0d:b4:cd:0e:1c:29:
36:a3:19:71:92:ab:9a:95:27:fe:21:ba:ae:d7:a5:f3:ea:5f:
c0:ee:01:57:96:a8:58:4b:68:12:37:04:60:d5:a7:35:bc:cd:
90:3b:de:b0:68:9f:d9:5b:ce:2c:c0:b3:85:99:fa:22:5d:02:
54:c9:cc:51:00:b4:7b:64:d4:de:cd:f7:f9:74:ae:82:9c:79:
90:68:94:14:bb:4e:a2:b5:3d:3c:81:9e:12:ac:5d:11:0b:54:
a5:de:c5:7f:ec:bb:51:eb:4f:eb:2f:75:91:56:4b:76:0c:74:
d1:a0:a1:67:12:cd:da:82:e5:a3:c6:88:eb:ae:e4:48:ad:ba:
70:6d:0a:7e:6c:70:e1:1e:8e:4e:f0:4c:16:07:db:3f:01:f2:
14:c7:31:4b:2d:2c:48:c8:ad:70:7b:7f:61:55:53:fe:04:8a:
19:19:d9:f5:9b:c9:5f:72:0d:4f:89:38:42:09:36:83:f6:48:
72:73:8c:61:a4:61:5f:29:61:0f:13:42:8e:2a:2c:76:02:c8:
d0:cd:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:39 2025 by rpki-client