Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3acaf8f5-8619-3171-ae89-4416f5910df5.roa
File: 3acaf8f5-8619-3171-ae89-4416f5910df5.roa (raw, json)
Hash identifier: Chj8ypMK7Vwy0RGDaB2EzdUTf0w7N0pOtuMAWbIA2G8=
Subject key identifier: C8:08:D6:9C:DA:FB:C6:DE:2F:1E:30:71:42:B8:70:76:35:05:EC:33
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B0FB40B3BB3923839621B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3acaf8f5-8619-3171-ae89-4416f5910df5.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 3804
IP address blocks: 199.243.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:0f:b4:0b:3b:b3:92:38:39:62:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=c851823a-82b3-438e-bbeb-0751948e779e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:37:7f:63:b8:f8:73:bb:89:11:86:8d:e9:
79:73:7b:07:3e:2d:bb:3b:66:b6:97:74:09:e3:65:
23:87:b9:98:d2:00:af:c3:67:06:b3:82:02:bb:83:
c2:96:27:2b:d4:f8:0b:b2:63:88:f7:41:7c:3e:99:
40:83:dd:92:16:f3:00:87:72:81:0d:cf:2a:23:1d:
5e:16:b1:d8:dd:06:a9:df:74:5e:25:d6:f9:e8:71:
17:36:23:03:66:c1:1d:f2:8b:b1:1f:b8:aa:eb:39:
7f:0e:ca:11:9c:08:cf:df:28:12:76:a4:32:92:cf:
84:67:f0:2f:74:7d:22:b8:0c:f2:96:ff:a4:fa:56:
1e:f6:48:f0:6b:84:19:bd:39:f0:ec:55:51:0c:ad:
27:2c:5c:d3:aa:cc:5c:5e:12:7b:6c:0d:71:52:e7:
4f:16:00:f9:94:a8:b2:5f:04:d5:c5:ec:ce:cb:19:
3b:d0:c6:1d:d2:a8:1b:57:1f:1b:00:5c:f9:16:f9:
b9:c7:9b:97:3a:43:49:f0:94:75:fd:f2:9e:72:4e:
d5:2e:d6:76:08:cb:5f:eb:75:17:88:d9:b9:1d:99:
79:da:be:6b:0f:ca:ba:a5:8d:39:ab:61:79:62:58:
86:62:b9:e3:e8:c7:96:5d:06:03:84:97:66:37:8c:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:08:D6:9C:DA:FB:C6:DE:2F:1E:30:71:42:B8:70:76:35:05:EC:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3acaf8f5-8619-3171-ae89-4416f5910df5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e2:b8:99:35:19:a2:e2:49:e9:3c:49:fa:79:af:21:da:56:
bd:ff:8c:d6:74:69:f9:16:da:08:3e:1e:cf:19:93:6f:04:61:
16:76:4f:99:9b:af:f8:d6:76:b4:e1:2c:45:e4:68:65:e3:b2:
cf:9a:6d:38:33:01:29:21:78:e0:d0:91:7e:f9:7b:b3:37:f1:
18:85:b9:55:a9:a5:4c:8d:4b:52:34:64:1d:44:86:ab:37:f6:
f9:ed:a6:4c:af:19:2e:bc:69:46:e9:96:a4:e0:6b:3c:b8:b2:
1b:93:17:7f:53:49:a6:ff:5f:17:33:75:61:cb:90:75:7f:93:
3f:e2:fb:4e:2f:95:3e:b4:32:7b:a0:5a:a9:1b:b3:74:00:4c:
1c:30:e9:62:05:5d:cd:10:35:9e:17:7f:d2:b8:90:c9:a9:ca:
80:7e:ea:84:d4:9b:79:b7:c2:2d:41:a7:d8:50:a7:0f:56:b3:
b5:18:73:74:ba:76:b5:7e:28:91:a8:9a:7d:db:66:ba:33:e0:
99:5a:f1:1a:da:be:42:fb:ff:f3:93:1e:10:b8:b1:3f:38:3a:
a2:16:fc:b1:f9:d5:30:80:88:36:d6:e5:8f:74:27:60:22:f1:
95:c3:40:33:ca:61:5f:cc:6a:57:a2:7b:3b:67:5b:02:66:e2:
bc:92:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:33 2025 by rpki-client