Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e6807a4-e9a0-37c0-a15c-c954ccd0c28f.roa
File: 3e6807a4-e9a0-37c0-a15c-c954ccd0c28f.roa (raw, json)
Hash identifier: X5xgE7q/TfetZl/3qe/2rg4oVpLnQjgREbK6RWLgVjw=
Subject key identifier: 45:A7:04:D0:22:04:08:AC:1E:BD:77:87:90:FC:26:DF:D1:61:7D:3E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931624A20415F18F38818600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e6807a4-e9a0-37c0-a15c-c954ccd0c28f.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 30336
IP address blocks: 207.236.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:24:a2:04:15:f1:8f:38:81:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=36dfa49b-f166-48df-a44b-ed9c5fee75e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:6c:6d:c9:4c:10:8c:6d:1d:a6:4b:f8:11:
9e:27:ed:33:f1:24:c2:ac:b6:a4:ef:cb:60:0f:65:
b1:7e:fc:6d:27:c1:ec:0f:74:96:ee:43:59:08:92:
5a:e4:30:2f:52:fb:c8:7c:cc:7d:53:67:73:cd:f2:
dc:9c:92:35:ff:f2:8a:4f:db:b2:de:7d:8a:7c:cd:
81:52:bb:41:62:12:2c:5d:03:36:17:d2:15:74:6f:
f3:d6:aa:ca:08:5d:b8:4d:24:83:c8:32:92:5b:28:
b9:e0:10:34:6f:7a:66:9f:77:50:bd:b5:ba:e5:c3:
c5:b3:df:61:5a:88:c2:02:47:f8:0b:65:d0:32:9c:
6d:83:a6:0f:17:4a:b7:b4:63:2d:0c:8a:ba:88:97:
01:ca:26:fa:a9:47:5f:c7:25:ec:9c:68:82:4c:ec:
66:6b:46:e6:d4:33:ef:73:88:2e:d4:bd:31:05:fd:
5b:4e:c6:b5:af:da:d0:01:88:07:58:bc:bf:98:cf:
e3:6c:b2:4f:c9:95:90:be:f9:9f:59:36:08:43:39:
c5:34:e3:9d:98:52:1d:4b:37:31:7c:86:be:43:4e:
3d:00:56:62:44:01:28:91:ae:6f:97:e5:da:2f:12:
87:56:cd:42:0e:57:92:53:62:a9:09:a9:5b:1d:6d:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:04:D0:22:04:08:AC:1E:BD:77:87:90:FC:26:DF:D1:61:7D:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e6807a4-e9a0-37c0-a15c-c954ccd0c28f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:b6:d0:fc:bb:77:49:42:70:17:f3:53:de:d1:bd:1f:9b:0d:
8c:b3:00:0f:bd:eb:52:db:7b:79:0c:93:6f:a0:43:56:3f:ee:
02:2a:98:c5:c7:8c:02:0b:82:d1:ab:61:c9:91:8e:29:d0:17:
e0:b8:7d:c1:86:34:c4:88:ad:ab:a4:63:b3:9d:d0:76:e7:ca:
c6:49:11:7f:58:e3:eb:d2:2c:8c:ed:1e:95:cf:c5:e3:d8:fb:
0d:43:72:a7:f2:93:8d:60:6a:87:d4:67:4e:78:03:a5:75:b5:
f9:a6:cf:90:fc:89:b0:5e:c3:85:a3:7a:f2:fd:e8:1b:0e:06:
1d:89:31:cc:8e:22:4b:68:ca:3a:ec:86:f8:48:2f:a6:a9:2f:
fe:1a:98:38:8a:59:14:ae:1f:24:42:8f:cc:e9:5b:23:0b:e1:
5c:9a:82:96:87:69:2a:a7:2a:38:09:9b:04:6d:ae:ee:b0:a0:
34:de:83:2e:2c:24:04:27:0a:c6:6b:39:b1:0e:59:d9:9c:c1:
a9:ab:2c:99:71:18:b6:dc:e0:02:52:1e:45:e7:82:71:ed:67:
08:d4:48:ce:b7:7e:1d:66:a1:b8:4d:12:38:5f:fe:bf:6d:02:
70:11:24:d3:e2:86:0f:fb:1c:26:ed:26:98:e8:4c:7b:86:a1:
94:90:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:39 2025 by rpki-client