Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3fa6f4cf-b279-3e17-b660-14ce3b7a0256.roa
File: 3fa6f4cf-b279-3e17-b660-14ce3b7a0256.roa (raw, json)
Hash identifier: O3wHtHtDuNvHqA8DfVXoxEXMMkq1V/6bZ7utv3zflzg=
Subject key identifier: 01:2D:5D:7F:99:D4:B6:4C:B2:9B:5E:83:F1:6B:7E:BB:A2:7A:6B:73
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B69E9E62C6E4AB98584400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3fa6f4cf-b279-3e17-b660-14ce3b7a0256.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21552
IP address blocks: 206.47.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:9e:9e:62:c6:e4:ab:98:58:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=84209e2b-9539-4672-b14a-ed44bb4e42d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:1a:75:73:e8:4d:e4:8f:f4:2f:3c:d8:1c:
4c:db:3e:8c:42:d3:7a:81:92:45:09:33:f3:c9:36:
9a:83:41:93:5c:35:34:bf:15:ae:a0:bb:f6:ca:25:
fd:f8:01:7e:91:1d:5c:78:08:a8:1f:52:52:2f:31:
a2:74:c1:c7:e2:43:6b:1c:b7:ac:06:b6:ba:d2:e0:
5c:3a:f4:0a:27:cc:8b:91:0b:4d:18:2c:d5:0c:7d:
dc:f3:27:00:13:90:22:12:22:82:fe:72:ed:f0:b5:
54:84:0e:0f:bd:20:3b:ee:93:7e:f1:06:75:61:8e:
45:a6:29:13:ef:91:b2:d9:fa:db:d4:b7:e0:c5:54:
f8:24:af:d5:42:01:99:e2:ec:50:a7:27:32:ea:0b:
2d:e4:89:a2:6e:d9:76:08:93:d4:67:77:d8:ff:f2:
bb:4c:14:cb:dd:f7:eb:78:a1:53:dc:7b:b8:4a:bc:
70:b5:51:de:3e:a0:f4:8d:e9:d5:5d:e9:ff:f6:c2:
61:50:ec:a8:40:9d:ed:56:0b:cc:ed:69:3c:1d:fa:
cd:d6:f3:f4:80:e1:47:80:b3:9e:17:15:00:08:1a:
5d:20:f7:2a:48:f0:76:74:0e:4b:cd:a0:84:d7:10:
e0:0d:f9:9d:b5:83:53:3f:09:92:2a:f9:6d:86:a9:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2D:5D:7F:99:D4:B6:4C:B2:9B:5E:83:F1:6B:7E:BB:A2:7A:6B:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3fa6f4cf-b279-3e17-b660-14ce3b7a0256.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:bc:4f:5b:af:1d:e3:08:04:1a:81:ef:53:a8:e3:fc:94:8d:
b7:6d:fa:2d:f1:a9:3e:2b:ca:61:c7:c7:0a:c1:8c:c7:58:b1:
5b:6d:bc:cc:92:c2:d6:b3:ed:b6:d0:aa:14:9d:57:f8:82:94:
4e:85:3b:c1:52:6f:69:09:69:39:bf:bd:0b:a3:19:10:33:b8:
24:97:ec:47:42:5f:5d:81:0b:1e:29:ad:0f:f4:69:60:93:d7:
06:ac:7f:98:a0:d2:d7:8e:b3:e5:59:ba:d1:9c:e8:d6:97:81:
eb:6d:a8:d9:24:3c:3e:ef:a6:21:22:b2:a3:d0:20:a9:aa:27:
f6:d6:55:6f:23:a9:ee:50:80:dc:bc:6b:03:c1:c9:96:0b:d7:
01:06:24:ef:47:d0:ab:3f:0d:5d:4a:31:c4:30:2a:82:90:ff:
16:80:c3:a6:c9:f6:a3:d9:7f:70:1e:6d:fe:d2:f6:73:11:3b:
7d:9f:f1:34:8c:1f:eb:6e:ff:ba:61:a4:ef:48:71:06:96:39:
e0:3b:9d:61:9d:a9:6c:64:9e:f3:a3:5d:47:f9:b0:47:89:43:
22:3e:88:91:b2:2e:aa:83:08:21:b1:f0:ce:63:36:75:fa:08:
7a:dd:66:b8:98:0d:ee:02:1e:82:db:b2:dc:c2:79:4e:51:94:
d7:2c:a9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:47 2025 by rpki-client