Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cf612dd-5078-38e4-b8e6-2967755adab9.roa
File: 2cf612dd-5078-38e4-b8e6-2967755adab9.roa (raw, json)
Hash identifier: xlReinNRy412/4eSguZO9fX54XSWcejWXTCTGCXDKCQ=
Subject key identifier: AC:9D:0C:B1:1F:99:40:8E:A3:01:D3:01:57:90:D9:D6:B8:69:02:8F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B89B3FE6F8E7501857500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cf612dd-5078-38e4-b8e6-2967755adab9.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 3848
IP address blocks: 216.208.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:89:b3:fe:6f:8e:75:01:85:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=aae94fa2-0e8c-4a9c-83eb-84f5ff50038d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:f3:69:f3:b1:53:56:d4:2d:14:ae:35:7d:
bd:3f:10:dc:44:59:05:06:6f:77:ee:b4:c4:fa:76:
f8:a2:d6:96:89:f5:ff:ba:2d:41:49:b4:bf:eb:53:
71:ba:63:9b:5e:f0:c2:39:6c:9a:24:cd:0a:17:55:
e2:68:5e:a0:36:55:3e:df:d3:a4:dc:ca:72:a3:94:
e0:f0:12:a4:35:60:48:2f:8f:47:24:f0:71:b9:ea:
46:87:63:10:04:e2:10:62:86:a8:33:da:61:51:4d:
46:7d:14:ac:30:64:da:d2:d1:5f:c2:f4:1a:ea:f0:
1b:a1:25:08:32:50:a5:07:09:ad:70:80:fb:36:bb:
0c:07:19:70:5c:bf:10:5a:eb:b1:e8:1c:2b:4c:82:
32:89:96:5b:87:f4:c8:bc:2f:19:22:7e:89:0f:fa:
f3:31:d5:5d:19:2a:de:59:e3:e7:b7:81:e1:56:8d:
4e:84:43:35:bd:dc:41:24:95:6b:c2:47:0b:3c:de:
5b:4c:09:fd:5e:6f:83:45:15:d5:fb:29:c0:20:0e:
89:48:f0:d0:c4:7b:51:06:fd:90:c1:3d:92:8f:c4:
73:04:45:67:26:44:cd:57:e9:5f:68:68:43:73:c2:
e4:58:31:ad:70:10:16:08:be:0a:02:c0:99:c6:4c:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9D:0C:B1:1F:99:40:8E:A3:01:D3:01:57:90:D9:D6:B8:69:02:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cf612dd-5078-38e4-b8e6-2967755adab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:bd:96:44:61:9f:4c:e3:3c:a6:5e:20:bd:3a:0d:29:8a:29:
44:93:8f:5a:23:42:3a:56:db:64:e0:01:18:c2:49:9d:52:35:
df:e8:82:e0:93:84:b0:7c:1f:4d:a7:0f:48:0e:11:8e:87:cc:
c3:ea:b4:f0:02:0f:2c:32:bc:86:ad:17:18:58:b9:e0:d2:92:
97:29:ce:b8:e9:90:87:d2:f2:88:04:cd:de:13:da:56:a6:bd:
81:a8:99:e9:8c:2a:b4:08:f8:01:01:b5:d0:4f:11:7c:ff:66:
c1:04:a2:d6:47:cc:0d:59:ea:07:3d:12:47:9f:0f:59:42:72:
9e:39:8a:be:3e:a2:65:dc:52:d5:ca:a3:c6:c4:a0:9e:ba:7f:
b2:33:6d:f8:0e:75:0a:0f:4c:1f:b6:b4:e2:dd:8a:81:fd:b8:
d5:b3:c2:8f:47:df:9e:0e:47:09:28:53:62:97:e6:7a:91:ee:
48:79:f1:7d:fd:fc:cd:fe:45:91:74:7c:06:d1:b2:62:16:df:
b5:da:d8:ef:2d:c8:f5:ca:a4:d8:d7:91:14:5c:52:4d:08:f4:
cb:ac:56:28:52:d6:f7:72:eb:a3:71:10:a4:3d:88:c1:9c:6b:
d8:c1:bd:58:eb:71:35:7e:6b:ad:da:5a:8b:a8:c3:65:a3:9b:
f2:12:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:07 2025 by rpki-client