Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a79b6b9-5759-32e9-86f5-ff115ef8e6bd.roa
File: 2a79b6b9-5759-32e9-86f5-ff115ef8e6bd.roa (raw, json)
Hash identifier: fJ4D89HT3XeZ9hbeou+pX26x8pYtssz/oWExcHwxJow=
Subject key identifier: 38:3B:9C:76:ED:35:FA:15:37:49:52:87:24:DD:22:71:1F:99:E8:F6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B119B24915FD3755630C100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a79b6b9-5759-32e9-86f5-ff115ef8e6bd.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 11831
IP address blocks: 209.17.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:11:9b:24:91:5f:d3:75:56:30:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=dc21b5c0-8681-424b-a3d0-f6a34151d5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:30:a1:7e:c7:b4:e2:fb:a2:75:94:c5:6e:
94:8a:93:e4:88:3a:ad:57:a3:e3:b0:1d:0b:a6:87:
08:7c:0d:53:1d:54:19:a4:84:c0:ee:6a:a3:d4:7a:
92:81:5c:67:9d:b9:54:86:38:c7:c1:ce:24:2b:99:
4c:a0:10:a2:29:77:42:22:bc:3b:ea:a1:6e:13:ba:
fe:30:e3:34:eb:c4:1e:87:61:be:73:e5:1d:29:c7:
21:e6:eb:ae:26:9a:db:2a:14:6f:d0:38:56:1e:6b:
bb:92:00:66:0d:19:84:54:f1:00:11:93:8c:a0:02:
dd:1b:67:7d:97:ea:00:2a:1e:e6:56:2f:e2:59:bc:
ae:61:66:96:85:c5:7e:5a:bd:aa:24:2d:2f:8b:19:
c1:b4:3c:5e:98:fd:df:00:e3:60:02:f4:f6:4d:7a:
97:5d:21:99:00:3f:38:af:85:82:dd:b0:3c:53:7f:
39:5a:3b:68:a5:41:24:bb:9b:ea:f8:d8:3d:d8:90:
25:08:50:89:59:4c:4d:fe:4a:dd:e7:fd:15:4e:f6:
d9:e6:f1:62:88:6d:29:d1:8b:d9:5d:7b:22:80:75:
4b:5d:33:4f:94:61:ea:e8:66:3a:1f:9f:a7:0e:cc:
60:17:89:37:95:e1:bf:33:7e:5a:6e:34:38:ca:a7:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:9C:76:ED:35:FA:15:37:49:52:87:24:DD:22:71:1F:99:E8:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a79b6b9-5759-32e9-86f5-ff115ef8e6bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:f3:f0:f1:b6:12:a9:5f:06:ce:2e:c5:96:b6:3f:7e:03:1f:
08:37:14:ed:fb:9c:b4:36:30:3a:6a:b8:cb:bd:57:6f:28:3a:
dd:08:44:e4:8f:04:49:64:8d:d3:37:4e:af:64:3b:6e:3b:34:
53:67:8d:ed:82:cd:97:1e:e6:e2:d2:57:d5:bc:6f:aa:16:e7:
17:73:aa:f9:35:40:e3:ae:3b:78:e7:20:8a:e8:db:6a:d4:b9:
de:6a:52:16:e9:d2:60:60:5d:e2:8f:02:26:b4:9e:7b:40:b1:
43:29:b0:06:c9:b0:c2:ea:cf:f0:39:0b:55:1a:a6:f0:c5:a7:
42:9f:94:be:a7:f7:3e:40:9e:10:f6:de:34:06:07:be:e3:0a:
87:cd:dc:db:a6:df:4a:53:c8:60:9e:55:ac:ef:16:95:24:3d:
3e:3c:2a:a0:01:0a:b2:cd:71:7b:53:8f:52:e5:33:7d:bc:08:
e2:a3:bd:40:cf:90:6a:68:40:0e:66:08:ed:da:c5:c9:b3:90:
97:80:5a:8d:fc:eb:c4:1f:71:92:92:df:2f:2f:ce:a3:da:91:
7e:d3:52:8e:a1:dd:28:10:e9:34:55:4c:5a:14:df:37:70:46:
93:6d:f2:80:07:9d:63:a9:a3:83:ea:66:17:92:18:2f:eb:44:
de:32:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:46 2025 by rpki-client