Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38783a72-9375-39bd-b4c1-f2a38d90d4df.roa
File: 38783a72-9375-39bd-b4c1-f2a38d90d4df.roa (raw, json)
Hash identifier: OwiL4W4ub5deejqmBRbhKm2IWqmUnPzaQ/7MtFwy+P0=
Subject key identifier: 71:88:AE:64:3C:3C:DB:E4:21:49:35:AC:6B:C4:22:47:31:CF:9D:89
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B60AE10EBD61ED10B01680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38783a72-9375-39bd-b4c1-f2a38d90d4df.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 12132
IP address blocks: 199.243.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:0a:e1:0e:bd:61:ed:10:b0:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=4a95731e-f66e-4fe7-a456-4da41a499623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6a:72:77:d0:80:01:13:80:b2:fd:b4:61:a8:
96:87:c1:af:c0:33:a0:cb:20:49:ac:a1:61:80:92:
6c:a1:d4:c2:2f:5d:96:85:4a:fc:a3:b3:a1:c9:93:
b3:3d:c9:67:9a:1c:ab:06:0a:a5:c4:61:d7:2d:72:
d7:f5:ac:52:4b:0c:87:89:04:00:75:70:d5:37:8f:
1b:1e:5d:f3:39:c5:f6:ce:0f:d0:28:8a:b0:53:f2:
a0:c7:97:0f:70:37:db:41:c9:a7:a4:c5:77:e8:6f:
35:6d:98:b7:65:2f:43:58:e4:6d:d1:7f:53:01:36:
c1:54:53:74:09:45:be:2a:e0:63:91:55:77:25:53:
4f:ae:ac:35:e4:2d:5a:7b:4b:31:e7:bb:f5:6a:13:
47:ed:e6:96:0d:83:a0:f1:18:ee:fe:02:0b:0f:3b:
c5:a5:57:9e:b7:b4:57:ea:22:39:42:12:dc:89:13:
76:18:d4:aa:f6:68:56:4c:5f:9e:da:60:96:9c:31:
25:be:01:0b:85:8a:b5:70:f7:af:35:f8:53:6b:22:
2a:4e:48:1f:48:fe:83:78:ef:cc:48:39:24:88:8a:
7e:9c:dc:f0:ba:64:87:47:2f:8e:12:13:b8:b8:8e:
38:f4:7f:30:bf:e8:f5:9c:89:bc:a6:c2:06:ed:97:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:88:AE:64:3C:3C:DB:E4:21:49:35:AC:6B:C4:22:47:31:CF:9D:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38783a72-9375-39bd-b4c1-f2a38d90d4df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:a4:d3:88:52:10:45:a3:c9:df:5f:09:e9:90:62:3a:bf:cc:
77:03:62:df:77:cf:6c:da:b5:70:04:8c:d3:4b:4d:6d:5b:d7:
1c:ca:e5:59:9b:a4:e1:a8:07:64:e4:0c:22:98:e4:57:9f:56:
4d:71:e0:51:08:3e:cb:1e:5e:ca:76:ae:49:56:cc:c4:27:8b:
64:5c:ab:6b:84:eb:20:d6:e6:f2:9b:7c:eb:d6:e4:9f:53:0d:
a3:00:fc:1c:d2:0b:ac:0f:66:10:6b:fb:d1:fc:ae:e5:1c:7b:
00:34:85:3c:0b:90:98:7e:f4:bd:3c:98:36:50:b2:bd:d7:1f:
99:f9:95:77:33:df:aa:b6:77:32:e6:b4:89:ae:23:94:6d:e4:
b5:1e:35:77:a2:a9:28:47:8d:4c:a5:1f:c3:51:c3:e6:73:cc:
a6:d2:d8:7e:d8:b9:b7:10:b5:de:22:1e:29:57:0b:a0:a8:b5:
77:16:19:92:e4:83:ef:df:7c:5b:ec:93:0f:9c:d8:5c:0d:76:
b6:f5:87:59:f4:2f:26:e3:49:f1:27:7c:16:22:a4:12:3a:20:
3d:75:4b:f6:f6:f5:48:cc:fe:05:80:09:83:3c:02:14:b8:3e:
45:2f:d1:09:8a:38:7e:18:37:d5:f9:38:e0:f7:12:5a:a5:92:
c3:59:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:27 2025 by rpki-client