Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/434409e4-05f8-3b93-a575-c3405d30a27f.roa
File: 434409e4-05f8-3b93-a575-c3405d30a27f.roa (raw, json)
Hash identifier: ZnRWXGB+GEwiCzoYCBATkhFYweIZXwxvkSH2MrdECqU=
Subject key identifier: 39:9D:8C:D8:6C:88:F6:A6:4C:22:72:FB:3E:81:AF:8D:43:B7:02:02
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B760E68DC4C8511693F880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/434409e4-05f8-3b93-a575-c3405d30a27f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 207.236.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:60:e6:8d:c4:c8:51:16:93:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=b6c0560f-e2c9-4490-95a5-b91efb6ea11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:49:dc:77:98:d8:cd:b8:e4:69:00:70:92:
90:d5:95:a7:0d:29:d0:63:40:86:92:a5:2f:46:10:
fe:80:08:37:0f:f9:08:c7:83:71:1b:fa:a6:dc:93:
2a:72:3f:db:9a:56:68:f6:df:05:00:7c:eb:00:35:
aa:24:00:db:b4:57:9d:1e:18:9d:3b:aa:5c:72:f2:
ab:a5:09:fc:82:73:56:b1:db:62:5f:e9:cf:c1:ba:
fc:42:ef:77:36:da:57:ac:5b:01:df:7c:93:b6:9e:
b0:16:30:ac:91:a5:10:b6:5b:53:10:b5:e0:d2:4e:
dd:b1:bc:11:e7:be:64:8b:bc:f0:3e:25:fc:34:e2:
d3:b2:92:fe:52:7d:e3:bb:41:dc:6f:87:db:7b:f2:
99:07:01:51:d3:da:cf:53:06:de:ed:36:42:9b:2e:
c0:b4:e2:58:14:17:77:76:33:71:d2:99:cc:ea:fb:
58:74:45:f7:22:65:f8:d4:2b:be:28:a8:ca:90:04:
a4:8a:89:fe:c6:81:a3:0a:7e:74:84:f6:56:19:fb:
47:c7:14:c9:49:6b:26:ab:e7:8b:0e:8c:49:03:d2:
e5:0a:05:5b:59:83:2c:5a:ea:ac:40:84:4e:da:0b:
96:df:de:a7:4e:32:48:6c:88:34:6c:f9:c3:ed:fd:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:8C:D8:6C:88:F6:A6:4C:22:72:FB:3E:81:AF:8D:43:B7:02:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/434409e4-05f8-3b93-a575-c3405d30a27f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:e0:f6:ad:2b:ea:4b:d7:82:bf:1c:a9:1b:5e:ac:55:17:f1:
81:9c:1c:e5:6e:3b:db:7c:4e:d4:b8:a3:0f:10:d6:00:27:83:
c7:54:53:eb:c0:7c:0b:77:1f:33:cf:77:e7:f8:c9:bd:14:e5:
61:e9:e0:44:e4:a3:7c:77:e2:23:a0:ad:1c:3e:7c:94:3c:a6:
09:04:03:77:71:47:a0:92:6b:52:07:d0:6c:90:a2:ba:2c:a6:
fe:32:3c:58:a4:4c:9d:39:f4:de:c6:70:9b:75:ce:ce:f9:95:
77:d0:75:32:23:25:34:9f:21:c5:49:4f:04:53:50:15:05:d5:
5a:e1:47:f5:92:5c:52:cb:1a:15:08:01:09:49:2c:56:89:a0:
3f:b7:58:ea:4c:44:72:77:aa:a5:7e:b0:56:3d:00:df:ed:ad:
ee:91:d5:50:3a:9b:f9:ec:1a:33:90:1a:b0:b0:4d:13:86:cb:
ba:e8:1d:f6:99:0c:af:c0:4c:bb:72:9e:8d:08:ae:ef:57:5c:
6c:2c:b4:39:3b:3f:a7:63:49:53:01:ee:b8:ae:58:b3:bb:ee:
1d:93:84:3c:0d:1b:48:93:20:ff:2c:b9:7f:38:12:ed:41:f1:
ad:ad:98:78:eb:1c:7b:e3:7a:21:5a:fb:38:02:12:c1:fc:11:
68:0a:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:43 2025 by rpki-client