Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/478f2256-5868-3c9c-8d00-877b90db47e9.roa
File: 478f2256-5868-3c9c-8d00-877b90db47e9.roa (raw, json)
Hash identifier: +Od3sYNAQfzcqQQM1iPZacm4Q0yZM/mXBVHY6IIF93M=
Subject key identifier: 02:2B:A3:8B:EC:58:17:9F:CC:8A:7A:4F:6E:EB:CC:16:25:CF:E9:C5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B75EA1ED1B37C3FCE87E40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/478f2256-5868-3c9c-8d00-877b90db47e9.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 207.236.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:5e:a1:ed:1b:37:c3:fc:e8:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=67247c9c-45ea-481f-9bc5-41bc63540d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:21:06:83:15:c5:b8:9b:45:9d:9b:ec:51:
a4:59:52:39:8b:fa:a3:59:b7:f4:36:36:be:0c:97:
c1:6e:93:6f:24:d9:d5:57:57:0d:1c:87:7a:b3:ab:
77:e1:4f:bc:ab:ed:ce:d3:36:de:36:a3:b5:dc:d6:
7d:86:1d:49:10:80:9e:ba:7e:77:1f:2e:f8:d4:8b:
cf:e4:21:ff:16:09:bc:3b:e6:c6:53:2e:78:96:a5:
b6:17:95:a6:6b:d9:84:0e:db:bf:86:e3:68:66:95:
ac:78:2c:bd:e6:43:2f:83:76:67:0b:c5:d3:8f:a8:
64:d2:2a:65:f0:85:2f:86:25:f1:99:cf:2b:fe:33:
51:59:29:5a:ab:9f:bd:d8:76:be:34:0d:14:f9:bf:
80:c7:b5:14:d2:62:65:17:42:da:49:d3:b8:70:43:
57:6a:fc:6d:7f:a7:32:2b:3c:e5:27:81:44:57:3f:
eb:31:ce:19:d8:90:da:12:b7:b7:69:d6:75:82:e4:
bd:13:68:90:7d:61:45:ec:7e:df:a3:4e:2f:5f:8f:
55:00:24:71:44:a8:91:85:f1:fb:3f:6f:9e:3b:d1:
31:15:36:c6:ec:24:0c:84:f6:0c:62:ed:11:9d:04:
b3:5d:ad:21:bb:04:16:b6:92:17:b5:b8:16:6b:66:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2B:A3:8B:EC:58:17:9F:CC:8A:7A:4F:6E:EB:CC:16:25:CF:E9:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/478f2256-5868-3c9c-8d00-877b90db47e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c2:86:39:12:68:e2:f8:85:7d:82:7e:e5:8c:2d:f6:97:82:
e5:e6:c1:fb:f8:ca:f4:bc:c5:76:7f:29:60:a1:59:8c:75:50:
08:d9:21:45:e4:4a:06:29:44:93:cc:08:d0:e0:5a:b4:f5:6b:
56:43:aa:ba:13:15:3c:64:3b:b7:1c:a4:88:72:fe:b8:51:4e:
0b:06:75:b8:2e:36:1a:d3:59:16:63:6f:f9:c7:c6:a2:8c:00:
16:86:90:85:33:0c:e7:85:97:f5:26:f1:1d:0c:9f:bd:83:2f:
4d:f0:a1:d2:1e:90:b4:4a:94:b8:84:a2:33:a6:34:15:7f:ff:
26:73:8a:9f:da:93:62:8d:7f:02:83:af:b1:4b:e7:04:00:d8:
da:02:1c:62:31:63:98:ce:3b:f0:eb:d8:09:40:b4:b2:13:a0:
0d:b1:f0:d6:bf:f3:e4:19:94:dd:28:9d:f6:9e:92:bb:48:52:
8c:3b:a9:10:5e:e2:23:6d:52:2e:47:6b:06:3e:02:02:cb:da:
53:87:2b:7d:a6:7d:60:f6:29:c6:4a:54:19:37:84:a5:8c:af:
93:b2:b0:ff:ec:7c:f8:03:95:7c:52:1d:0c:1c:40:ed:11:0a:
a4:16:16:03:90:f5:d5:de:dd:81:ac:54:23:69:4b:28:e9:09:
b2:14:fb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:25 2025 by rpki-client