Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43aa6a28-641f-3717-89bf-0ab9f1bf4cf3.roa
File: 43aa6a28-641f-3717-89bf-0ab9f1bf4cf3.roa (raw, json)
Hash identifier: kci8a2B7oh+9cdKjP0dQ1l4HpuUv82gW/FBNX/SqGQM=
Subject key identifier: 54:3B:5E:76:A9:95:63:B8:3A:86:6E:8C:44:ED:BE:D9:64:B1:5A:24
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B10032A45B31A6D387C4040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43aa6a28-641f-3717-89bf-0ab9f1bf4cf3.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:10:03:2a:45:b3:1a:6d:38:7c:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=1dc45242-7d36-4194-aa0b-5814019befb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:c6:fc:a8:77:f9:a8:46:33:bb:e9:d4:30:
bb:be:57:ff:28:e8:01:be:0c:b3:2b:47:f3:74:61:
8a:a6:09:ef:b2:a3:02:f8:1b:2b:a1:49:f3:35:95:
a6:c2:a5:da:fc:10:d3:ec:6a:22:8d:92:ce:ad:62:
ce:36:3f:a6:9a:96:00:57:b1:eb:ac:ca:5d:46:42:
23:93:8f:a7:90:e0:7e:be:71:24:43:4d:2c:1f:f4:
c9:9f:4b:e3:f3:e4:2a:81:35:a4:c1:b4:d8:2c:fa:
3c:34:ea:c0:88:55:e5:c3:d3:b8:f0:16:f8:70:4a:
3f:81:f2:dd:9b:e4:27:05:b8:48:50:df:ab:76:09:
c1:cb:15:54:b7:3a:70:2b:4c:bb:23:b9:fb:c0:88:
57:25:2d:ed:63:b7:e1:97:b6:46:48:db:75:3a:3c:
e2:6b:06:d5:26:21:2f:97:f8:e2:46:d1:8b:9b:7c:
2a:43:1c:72:97:4a:02:08:e1:55:c0:54:88:be:5b:
29:84:3b:9b:f5:75:48:ea:8f:0f:0b:8f:e3:36:38:
6c:25:27:eb:19:77:14:a2:4c:82:55:27:51:80:e3:
95:4c:63:0e:2f:2b:0b:6a:c9:d3:8a:fb:67:80:66:
85:81:66:f6:91:b9:f5:95:98:a5:3c:e9:e9:94:f6:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:5E:76:A9:95:63:B8:3A:86:6E:8C:44:ED:BE:D9:64:B1:5A:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43aa6a28-641f-3717-89bf-0ab9f1bf4cf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:f4:52:b9:24:9a:7d:39:8f:ac:62:b5:60:9a:c5:87:ac:a7:
16:7a:89:70:5b:75:12:ed:9c:be:a4:c2:f5:9a:30:b7:88:55:
2c:6b:47:16:f7:39:eb:03:01:89:c0:f6:3e:5e:66:7d:73:0e:
d3:11:dc:1a:9f:b5:f9:e8:ca:8f:a4:78:0c:00:0f:47:5d:4a:
82:dd:8a:b1:21:5e:46:59:b9:98:2e:30:26:1d:21:70:f9:eb:
70:35:dd:e8:94:98:73:85:99:46:0a:50:57:33:48:65:95:d9:
e2:b5:ce:2d:31:f7:3e:7a:ab:c2:d6:ca:33:c5:e8:3b:7a:cc:
34:10:56:fe:de:25:71:21:74:33:e5:71:80:a0:65:c2:b4:cb:
04:51:93:e7:e0:3f:1a:44:8f:d2:16:4a:bc:f1:29:16:55:04:
68:9a:81:8e:f9:61:de:70:b8:1b:a9:02:55:63:e8:7d:4d:41:
7b:56:eb:26:78:c3:73:87:1f:fa:4b:47:ac:33:f1:b6:25:f0:
69:44:5f:75:3c:7e:44:36:b1:77:7e:d8:b5:79:1b:5a:a1:26:
06:4b:d6:33:a3:a4:aa:6d:38:ad:1e:43:65:c1:ba:e9:2b:82:
da:4f:fe:5a:dc:7a:a8:de:39:2a:e3:a9:91:59:7e:18:32:23:
e5:c6:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:26 2025 by rpki-client