Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40e9e3dd-4e6e-31e0-b05a-066c7b219571.roa
File: 40e9e3dd-4e6e-31e0-b05a-066c7b219571.roa (raw, json)
Hash identifier: 2pO0oM8qMN5kqRiJeHLV6TnnT45uX8vmuRpRtqJsLEM=
Subject key identifier: 64:E2:D4:FA:2C:BF:0A:35:62:D5:89:B4:47:A2:8D:F1:58:6D:21:5E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF75D4C51F3133B5383D05A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40e9e3dd-4e6e-31e0-b05a-066c7b219571.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 855
IP address blocks: 209.128.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:d4:c5:1f:31:33:b5:38:3d:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=2cc2236d-607b-4732-a781-ba5222a28c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:72:58:bd:41:71:31:ef:53:5c:fb:59:e5:
ab:b5:5f:d0:a0:8c:f6:02:63:aa:c9:9f:c6:59:ae:
55:29:fb:75:b3:cf:ef:31:60:74:80:83:1c:4d:8b:
ec:32:ea:e9:2f:f7:d2:a0:7b:ee:9f:84:0d:4a:18:
e1:09:f6:67:7d:a6:b7:d3:35:8d:f7:af:c6:75:63:
72:4b:84:77:8f:e2:55:8a:2a:1c:fd:b8:4b:f5:b6:
17:9f:4a:93:b2:5e:d4:7d:28:28:0e:a7:42:44:71:
b9:b8:0e:8d:4e:2d:3e:fa:34:dc:05:dd:fc:ba:19:
fd:72:78:0b:20:9b:5f:8d:18:10:7c:3f:8e:85:82:
5b:63:32:99:c4:02:0e:c1:64:ad:d4:39:79:e9:31:
61:30:b8:ac:31:52:fc:0e:5c:50:95:e4:d6:e6:88:
f9:c1:8e:dc:b8:7c:b1:f8:30:bc:2b:00:4f:6c:4b:
71:b0:f9:f0:dd:65:d6:00:97:5b:fe:1c:23:43:29:
95:af:7f:23:73:b4:7d:99:7f:ec:14:1e:52:30:00:
63:61:06:51:73:03:56:1e:9b:ea:60:f3:4a:d7:f7:
46:31:c7:86:02:e1:60:5b:b2:75:65:5b:1b:a6:34:
49:00:25:a9:c5:c9:35:ff:a9:79:fb:13:d2:e6:50:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:D4:FA:2C:BF:0A:35:62:D5:89:B4:47:A2:8D:F1:58:6D:21:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40e9e3dd-4e6e-31e0-b05a-066c7b219571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:40:1f:b6:3d:0c:62:67:6c:8b:7e:e6:7c:fa:73:8e:e1:3f:
99:70:c5:84:f6:a7:15:2f:2b:09:5f:10:dc:12:08:17:8c:73:
c2:28:df:55:d4:c0:31:90:49:e2:10:f0:fb:6d:9a:58:de:bf:
62:34:fb:41:76:31:d9:ff:e2:83:07:43:0b:07:91:04:cd:ac:
e0:8a:86:58:c3:7f:52:61:c9:01:85:04:f3:ed:62:87:48:83:
70:b4:db:e0:bd:0a:de:45:28:bd:24:c2:11:65:4a:40:82:65:
54:76:2d:72:a9:ff:40:89:4f:2c:a7:77:de:e2:4c:60:20:bb:
8b:c1:3a:3b:12:b9:56:bb:44:10:5b:b1:73:5a:f4:12:d8:85:
45:a6:bf:b1:d7:52:6d:83:cb:94:4c:a6:80:7a:b7:51:3d:df:
3d:8c:39:4b:b3:86:1b:29:91:47:c7:0a:62:6f:c3:c5:f1:84:
1e:ca:2c:00:08:34:a2:9c:f0:5e:e9:05:88:a4:2c:2d:6d:5f:
fb:33:d9:35:75:97:16:a7:33:d8:9e:58:00:ea:41:78:95:7f:
c5:53:35:49:4a:a5:f2:74:10:c3:c5:69:49:b0:d4:76:e1:6f:
64:1b:55:1c:7c:df:d1:34:c6:4f:ae:95:8a:e8:35:b8:62:4a:
04:1c:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:37 2025 by rpki-client