Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3235f40e-3747-3cf8-bf31-316c31da8999.roa
File: 3235f40e-3747-3cf8-bf31-316c31da8999.roa (raw, json)
Hash identifier: d4TD5w+y5aiCXA4jitUG0MwmyPV65tEE26hD5hUk1tM=
Subject key identifier: A8:93:1D:93:0B:2F:38:6D:61:23:2B:C7:9B:DF:5D:A9:96:24:C4:AD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2AB64B5739C019F10D5080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3235f40e-3747-3cf8-bf31-316c31da8999.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2a:b6:4b:57:39:c0:19:f1:0d:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=35b83b62-fda1-4f65-a8db-21d21e7a0d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:a2:e8:63:21:52:95:50:f1:f3:f4:92:24:
fc:34:ac:04:32:d1:dd:19:0f:f3:2e:ab:a6:93:12:
68:45:c7:29:0b:71:eb:59:81:20:0f:e6:79:93:8d:
68:3f:3b:1f:06:ec:f1:85:5d:32:da:b3:d4:ee:b3:
73:47:0d:ec:7e:4b:89:47:c3:60:11:43:5d:0b:54:
a9:17:60:4b:35:85:d2:4e:48:a6:5e:8f:c9:cf:b8:
1f:7b:68:15:01:fc:2f:e9:55:53:33:7f:f6:12:50:
11:96:74:31:bf:e1:94:61:48:8b:f3:a4:68:4c:08:
15:3e:84:30:5f:29:8c:40:e7:54:80:bd:5e:12:a4:
25:6f:fe:20:bf:86:8b:32:9f:58:de:28:b2:54:6b:
ac:2d:7c:1a:91:f3:e0:b2:fb:38:d5:c7:6b:ad:bc:
27:5e:74:7e:82:6e:9c:60:43:96:01:dc:c6:ce:3f:
23:f1:40:78:14:e6:7f:37:04:fb:a7:6e:83:79:2f:
8b:78:d5:ec:d0:b2:2c:ee:36:00:fc:5c:00:cd:7c:
40:8a:2e:5f:d1:b5:5b:7d:c9:19:fb:86:11:84:ae:
e3:c8:78:e8:11:9d:ca:af:7c:41:30:b2:7c:c3:03:
fd:fd:4f:be:7c:ea:9e:83:a2:40:a2:f5:c3:74:33:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:93:1D:93:0B:2F:38:6D:61:23:2B:C7:9B:DF:5D:A9:96:24:C4:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3235f40e-3747-3cf8-bf31-316c31da8999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:48:0c:a5:37:6a:c5:f5:32:b8:2d:01:11:14:fe:34:7b:fb:
94:54:e0:e6:d9:cf:a2:3f:7a:61:19:58:d4:2b:2c:81:07:cc:
99:fb:d5:6c:e1:3c:1e:6d:84:a5:f7:32:bb:b3:c1:96:45:0a:
d1:e4:d6:c8:da:63:20:64:e0:82:ee:ae:bc:7a:0e:4a:f5:57:
2d:00:2d:4a:08:aa:2b:38:b0:b3:63:12:a4:dd:a2:e7:c4:f3:
5b:4a:b4:51:03:5e:24:ae:98:b1:1e:34:12:d2:a2:03:8a:02:
32:0d:9f:be:69:0a:1e:a3:57:75:36:81:9c:57:ca:fc:0e:bb:
ac:7a:7a:b0:2d:85:b0:3d:44:7f:9b:0c:51:49:5f:a8:ee:0f:
70:42:eb:52:e3:a1:cf:1d:1b:89:15:41:84:b9:53:19:9a:6d:
09:f8:29:41:d9:52:c9:dc:ae:60:b8:98:c9:e1:12:eb:5c:4c:
95:d7:ca:a3:65:cc:aa:e1:a9:e7:54:6a:8b:12:82:4a:b2:73:
eb:68:e9:c9:58:ba:bc:c2:0c:fd:b4:8b:eb:de:94:32:14:41:
d5:30:68:8d:1a:35:fe:0f:1b:56:28:d0:13:55:7d:3f:c6:60:
07:a4:84:35:40:74:2e:41:87:43:b9:d6:9e:64:4d:bf:e7:ea:
ed:0c:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:34 2025 by rpki-client