Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/321ce3fa-424b-3b07-9b60-1a795d7303c0.roa
File: 321ce3fa-424b-3b07-9b60-1a795d7303c0.roa (raw, json)
Hash identifier: T+ZT8Y/kMLZLj+Gi0OewMGyAgIK7AJztcGyaomVMfIE=
Subject key identifier: F2:C8:D8:F9:02:62:F8:82:21:8C:31:92:33:67:E1:93:75:E8:E3:0A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B4CE094B415ABBD084C380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/321ce3fa-424b-3b07-9b60-1a795d7303c0.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 36522
IP address blocks: 206.172.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b4:ce:09:4b:41:5a:bb:d0:84:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=e1e53f64-5fe0-44e0-9edb-852f679b46ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:b0:60:3c:66:1a:38:47:ab:6c:e6:41:1c:
82:11:17:84:e3:1c:11:e6:ee:6e:92:e1:ba:ca:bd:
8c:63:83:26:5b:5e:0d:e7:6a:db:94:66:c0:db:a7:
dd:a6:4e:02:a7:3f:1b:3a:2d:db:67:4e:76:93:36:
8a:d2:d2:af:02:ea:29:35:eb:61:db:1d:4f:5e:cd:
23:b6:2d:01:b5:93:5a:e3:3c:0c:1b:78:6d:ca:33:
48:24:5e:19:e8:3f:97:b8:6f:8c:7e:f4:94:d5:92:
96:ee:06:ec:98:d0:6e:30:b1:d0:6e:06:4d:35:9a:
f6:b6:b0:f2:94:60:b5:57:00:81:ca:28:a8:7e:5f:
9a:0f:92:f2:58:a2:a5:fc:1d:19:35:d2:4c:74:77:
97:aa:bf:66:5d:e0:bf:40:ec:1b:4e:59:99:f0:92:
d7:a3:8d:7e:fb:b5:11:e6:f5:fa:7a:36:32:cf:79:
71:21:46:83:1c:ec:85:47:14:65:f7:7e:c4:11:69:
c5:6c:f8:82:56:c4:50:9c:c5:29:1f:14:83:5c:6a:
94:3e:8a:61:0b:3f:fb:bd:8f:7f:94:52:a0:2a:e1:
9e:38:e4:6e:11:7a:09:83:89:95:c5:92:cc:49:58:
e5:90:31:36:26:58:0f:91:2a:4e:72:04:92:92:dc:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:D8:F9:02:62:F8:82:21:8C:31:92:33:67:E1:93:75:E8:E3:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/321ce3fa-424b-3b07-9b60-1a795d7303c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:9e:1d:9c:3d:f4:bc:94:1e:67:13:7e:ba:81:11:0e:8e:fa:
6c:50:00:47:b4:d0:2a:e2:02:1b:4c:c3:b4:8d:26:78:b7:f0:
0b:e5:8c:04:71:b4:47:df:d7:7a:b8:90:4d:11:b9:39:c3:01:
0f:04:7c:ac:80:ff:93:12:2c:ed:77:04:d9:45:76:14:56:8c:
d6:87:93:69:b3:14:56:ca:2d:76:5a:82:94:be:93:a3:35:51:
cb:13:95:dc:0b:cd:16:34:b7:be:c9:77:d0:c3:96:bf:e8:88:
52:95:e3:ce:f7:af:d1:38:0a:fb:09:f3:d9:5a:e3:ba:24:14:
30:23:fc:ab:1c:fb:de:fa:aa:f7:ea:24:f0:dd:b3:f1:4a:fd:
49:f4:ef:15:e5:31:89:99:0b:ab:69:52:a0:39:4c:d2:52:8f:
f2:40:3a:04:2b:6d:c1:27:d3:f7:2c:d0:fb:ce:a1:fc:9f:fe:
84:f9:25:b8:85:8d:d3:68:fe:bd:ef:93:97:5c:b5:86:22:24:
fc:29:f9:de:ca:7f:90:78:57:92:01:cf:b0:af:f2:71:2d:43:
8c:b5:4f:69:be:83:75:4b:77:83:76:8b:64:0d:e6:38:9c:2f:
58:a4:4c:3b:fc:99:ba:4e:a0:0b:3b:ff:84:bb:b5:ab:63:74:
d7:76:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:35 2025 by rpki-client