Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4214cbda-5e16-3932-9183-3c34d8ac1dd0.roa
File: 4214cbda-5e16-3932-9183-3c34d8ac1dd0.roa (raw, json)
Hash identifier: 9aHWH8Z7eDUYHVulcB7hoVUV4AKorT7hfHEgKt6Hifo=
Subject key identifier: B9:FC:A3:9B:C9:D7:16:D7:7D:C1:97:AD:87:DB:AB:91:AA:D5:BB:42
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493160D7E7484A4F5F860D500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4214cbda-5e16-3932-9183-3c34d8ac1dd0.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 207.236.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:0d:7e:74:84:a4:f5:f8:60:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=4a52eb5e-4d69-465d-aee8-93a1c01ada79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:5a:e3:5d:ad:24:9f:c5:e7:d4:d8:bc:9d:
ac:43:df:af:38:f3:07:77:01:e8:96:38:f2:af:65:
a3:f3:61:ca:02:54:8b:ed:99:66:e3:73:74:1c:1b:
fd:53:6a:ba:df:7e:59:f5:d8:18:23:1c:32:ff:93:
6a:a7:6f:6b:16:4d:78:75:ed:fd:84:20:d3:35:e0:
c3:16:fc:a4:50:75:59:b5:5d:94:9e:36:67:d1:35:
b0:dd:83:e1:03:b9:71:76:91:c0:4a:7c:99:49:28:
52:f7:12:09:ab:fe:34:48:30:08:b2:23:7b:ec:49:
49:4e:fe:b3:57:48:25:f3:17:ee:a2:fc:5d:07:ab:
b7:d1:79:be:72:c9:57:61:5b:5d:76:96:b9:1f:04:
32:fa:7e:20:bf:5b:59:da:03:8d:d3:49:86:55:cb:
af:81:aa:a6:cc:9c:ff:ba:dd:dc:24:fd:27:da:77:
14:ca:ef:85:59:f8:2e:e0:33:36:c1:cf:2c:52:95:
59:3d:72:a5:b9:47:00:97:69:0b:9e:85:a9:f4:ec:
60:2c:42:51:88:50:3f:6a:88:0d:b7:c6:3d:5c:59:
99:49:7e:e9:bf:b2:d7:2f:cc:3d:32:70:0f:c3:bb:
19:03:33:3a:8b:9e:f3:c5:ee:31:c4:47:45:52:4e:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FC:A3:9B:C9:D7:16:D7:7D:C1:97:AD:87:DB:AB:91:AA:D5:BB:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4214cbda-5e16-3932-9183-3c34d8ac1dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:58:0b:4b:77:d5:7a:c4:32:f1:63:a0:18:bb:10:a7:6c:71:
34:36:6e:da:5c:e2:44:35:51:13:e1:17:11:3b:8f:6f:c3:52:
7b:b4:3c:17:4d:45:fe:b8:d1:ae:ad:e7:cc:e9:f3:a4:c1:f6:
fc:63:60:ed:9f:9f:e8:6b:1d:e0:66:ae:8f:12:ea:55:8b:e3:
c4:3c:5d:a6:6f:b3:45:7a:85:93:b1:2b:2b:7e:38:f6:54:a4:
3d:7f:d5:3c:6b:ed:12:4f:08:3e:77:53:19:84:b0:d5:3e:1e:
0b:a4:b0:e6:4b:ea:db:61:4a:fd:d6:92:ca:70:e6:cc:18:3f:
7a:7c:b8:ab:f2:0a:15:c5:06:d1:8e:3f:19:39:9a:de:59:bb:
9c:aa:a8:b3:05:22:13:de:a0:1b:a8:cf:a9:1d:66:ea:b0:c7:
6d:10:dd:01:54:c2:ec:19:2b:00:c8:23:0f:c9:c4:01:e1:38:
c4:9c:05:64:8c:63:42:35:5c:c6:22:fa:2b:73:c4:1f:08:9b:
ed:a4:88:c2:68:28:5d:2b:9a:e8:46:e7:d1:70:1f:ba:4c:3d:
a8:5f:42:41:6d:65:1d:1b:0d:99:1d:90:6d:c1:8a:43:d2:40:
dd:d1:82:a7:f6:6f:ce:f8:9a:5c:8f:da:e1:ef:4a:35:77:85:
f1:b7:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:21 2025 by rpki-client