Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3001c15a-dabb-3263-8728-76857420cb11.roa
File: 3001c15a-dabb-3263-8728-76857420cb11.roa (raw, json)
Hash identifier: nRjOv2leSlbf3A+jut21AMUfS2uCM3bNIRLg+XuWwBA=
Subject key identifier: 71:79:73:A4:30:B5:46:62:3E:35:F3:00:72:BA:AA:4D:F4:9E:BE:4A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6EC77175574867AEF0340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3001c15a-dabb-3263-8728-76857420cb11.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 19842
IP address blocks: 207.61.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:ec:77:17:55:74:86:7a:ef:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=3e3e9ae6-68b7-480f-a95c-ead85baba9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:9b:ac:23:0f:6a:93:a9:69:94:b9:56:9f:
69:f8:e5:03:91:68:66:d6:cb:af:78:20:d4:7d:6f:
38:10:45:30:40:ff:c4:82:9f:5e:7b:f4:29:b2:07:
5e:0e:b7:70:5d:46:bb:73:3d:26:fa:85:cc:19:fd:
95:5b:6b:c6:2c:0d:16:0d:89:7d:60:e2:34:ea:ff:
3c:21:ef:21:0f:b9:ad:b1:a7:31:83:4e:70:86:f9:
da:d9:67:a1:15:9e:28:bf:15:3f:92:c6:15:bb:fd:
33:7f:6f:a6:5e:4f:e9:fa:5d:67:e7:46:89:79:ff:
7b:9d:0e:d3:44:74:a6:28:f5:97:19:77:a0:df:38:
ff:db:39:18:99:b9:42:2d:2c:38:8a:6d:3e:f7:4d:
63:e2:9e:65:85:48:6c:b3:4e:c8:8a:4c:79:42:a4:
0a:c3:61:87:37:ce:a0:1b:0b:db:03:02:49:0c:98:
4f:80:25:09:20:a6:4c:a8:69:44:82:61:23:e6:d3:
42:a8:99:d3:f7:d3:c6:69:e8:b3:9d:32:66:0d:da:
8c:38:26:94:48:66:8a:e8:b2:ad:6e:1e:db:30:3a:
7d:3d:a9:40:ef:3a:c1:e5:d0:1d:60:a6:2b:d5:79:
a3:55:98:5b:bb:75:17:ee:c9:af:86:0e:f3:58:c1:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:79:73:A4:30:B5:46:62:3E:35:F3:00:72:BA:AA:4D:F4:9E:BE:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3001c15a-dabb-3263-8728-76857420cb11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d8:14:96:6c:0f:7e:d2:7f:53:50:8f:cf:3f:75:f5:d0:35:
e6:71:9b:c0:c3:a7:1c:c3:47:b9:8d:13:ec:4f:4c:22:75:a5:
a7:55:06:e3:1e:90:09:6c:1d:4c:9c:66:70:95:bf:8a:b2:17:
8c:20:6e:e1:4f:e3:07:95:5b:cf:02:dc:14:f3:f6:b5:b5:1b:
46:0c:d0:06:3e:c0:a3:df:44:cb:24:ad:75:06:49:8d:0a:12:
fb:e0:cb:5c:d6:51:6a:30:d8:cb:a3:dc:d8:a1:39:03:b7:52:
97:9d:47:13:b6:0c:dc:d9:d5:fc:50:1d:fe:fb:8e:47:2a:e1:
47:b7:f2:12:b4:8a:30:64:3c:74:7b:fd:c2:ec:49:4d:8e:c6:
45:94:98:f3:a4:02:6f:85:73:87:bc:ca:bf:28:c3:0c:2f:fd:
5a:9e:08:be:52:48:7e:13:c6:6a:ae:48:d0:31:c0:b1:48:f2:
fa:86:43:cc:ca:78:5f:81:dd:dc:89:72:e3:b1:18:d4:a1:c3:
57:3d:fe:2c:14:11:d9:5d:5e:01:da:3c:54:fc:6b:4c:f2:9b:
c4:b1:fb:ab:f8:77:50:11:77:0b:e8:26:01:ef:ce:24:08:53:
3b:bc:a5:2d:c2:bf:47:24:1b:d0:ee:77:1f:a3:31:41:98:39:
7d:e8:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:29:57 2025 by rpki-client