Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36f94e23-358f-356a-a41f-00d9485ab3a7.roa
File: 36f94e23-358f-356a-a41f-00d9485ab3a7.roa (raw, json)
Hash identifier: +myNSsbi2nd+zMvirmmf0c1PvAwf7YqWyl+BpIW4YQk=
Subject key identifier: 88:64:7E:75:28:8A:4E:08:27:08:97:35:83:7C:71:04:70:AD:6C:2C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2A058F9661CBA02AE4C500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36f94e23-358f-356a-a41f-00d9485ab3a7.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 204.101.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2a:05:8f:96:61:cb:a0:2a:e4:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=059881a3-322e-426e-a9ed-cb881f6d40f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:d8:c8:f9:3a:10:5d:93:31:8f:9b:ab:15:
b0:e4:24:0b:54:65:0a:2c:24:e5:96:86:54:d2:99:
c7:f0:65:24:03:b3:b3:1a:04:67:ad:e0:dd:37:32:
bd:a4:6c:c8:58:cb:70:e7:4c:79:13:f7:ca:de:63:
c1:b0:4a:14:8f:c9:e5:37:f8:1b:ff:e9:d0:08:ef:
17:a8:d5:c0:43:53:48:b4:b9:0f:da:10:a0:98:b9:
8e:65:0e:0c:3a:b6:7c:f7:0e:85:01:ed:5d:01:80:
9a:dc:9c:48:ca:de:b9:2a:99:24:63:f5:33:0a:5c:
22:75:62:b1:29:52:fd:3c:f4:00:d4:83:ae:4b:4b:
92:d0:96:6b:39:bc:00:40:fc:ea:7a:16:c2:ca:13:
b4:12:cd:86:a1:59:f3:7d:94:6c:63:f6:fb:4a:ed:
b1:15:72:b5:12:7b:f5:f5:46:e8:0c:db:86:e6:ec:
15:ea:f6:a3:88:78:f7:7b:88:3c:03:a1:1a:c2:a3:
bf:a2:cc:26:cc:62:49:3a:e0:fb:ad:f6:5e:b8:10:
31:d9:40:fe:98:be:37:71:ad:5e:3a:79:63:87:e1:
98:f8:3d:a7:33:66:0e:50:bb:8f:72:57:79:85:9a:
a5:7b:5b:56:91:0d:bf:d0:a6:a0:a8:2e:7f:c0:66:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:64:7E:75:28:8A:4E:08:27:08:97:35:83:7C:71:04:70:AD:6C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36f94e23-358f-356a-a41f-00d9485ab3a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:9e:8f:6c:95:fe:8c:84:a2:33:5e:1b:da:7a:5d:85:76:f7:
98:4b:05:4c:8d:bb:bc:9a:44:7a:33:91:62:b0:b2:77:3b:c7:
22:b9:77:10:b3:1f:42:7b:ec:2b:14:a1:4a:1b:c0:8c:c3:f1:
0c:1f:65:7c:c5:36:f9:96:e0:11:95:f8:45:62:bc:be:ee:9f:
0b:ac:35:bc:91:67:af:96:e0:83:5c:f1:3e:0e:e8:3a:2a:aa:
c1:d5:fa:c6:c6:95:0b:56:d6:28:ff:56:e1:af:9f:77:bb:a4:
0c:e3:b4:a7:0c:e2:dd:0d:fc:42:c0:f2:6b:d6:7a:ea:c0:5a:
2b:ca:ec:11:19:45:4a:0a:ed:1c:cf:63:36:56:27:5d:71:be:
f0:bc:22:96:f5:fc:fb:ab:02:f3:4a:75:20:c6:08:68:63:53:
18:d1:c2:9f:6c:8a:9a:e6:6f:5f:47:6e:94:fa:a0:da:38:2e:
25:67:a5:a4:22:b5:21:e3:04:88:bd:ad:7f:10:8a:f9:90:a1:
ab:07:8d:92:f1:13:75:c5:b4:0c:a2:78:b2:da:09:13:87:04:
18:f0:d5:af:f5:5e:9b:5d:e4:e0:2f:11:b7:92:13:cc:41:21:
cc:95:53:f0:03:75:55:b8:8b:25:ba:e8:a9:ff:af:df:70:90:
00:bf:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:23 2025 by rpki-client