Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ae0df0d-d8e5-398f-838a-0a36f554a6d2.roa
File: 4ae0df0d-d8e5-398f-838a-0a36f554a6d2.roa (raw, json)
Hash identifier: Ht5hoxuIlwhs+AGGk4OkKUkU0SnBO6kpRr7hLCzueLg=
Subject key identifier: D0:87:AA:62:35:E3:75:95:D2:0F:FD:D7:69:5F:84:AB:D1:C2:D1:14
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7AC43E6598EB93B1355A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ae0df0d-d8e5-398f-838a-0a36f554a6d2.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 4540
IP address blocks: 209.226.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:ac:43:e6:59:8e:b9:3b:13:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=41cdefae-0cc9-48c2-87e3-3730bc84ddb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:58:92:9f:0b:c0:b0:e3:51:b0:31:7a:14:
8c:5e:7e:2b:e2:4b:90:59:b9:7b:95:80:dd:a5:70:
bf:87:a3:52:7c:19:cb:4b:cb:8d:97:b7:bc:85:fe:
49:c9:03:80:62:5c:88:3a:54:c3:1a:58:da:b3:5b:
fb:ec:69:19:d8:7b:66:e4:28:f8:49:18:aa:28:82:
4d:08:73:e6:c3:c3:ed:7b:24:52:20:7e:97:a9:f7:
78:94:13:ad:5a:13:ab:5a:64:0f:12:55:30:2f:fd:
64:f4:eb:e7:1f:44:29:a9:34:1e:7b:9d:14:a1:43:
35:b5:ff:79:37:75:bc:db:43:82:e4:d8:8e:7b:44:
6d:55:00:32:42:58:15:c5:b0:fc:92:31:36:5f:38:
0e:c3:29:c7:9a:c3:f4:85:d5:07:f7:88:e6:04:e9:
73:8d:25:2b:12:3a:4b:6a:6f:82:45:f0:31:a1:e6:
75:e3:ee:4f:d3:9b:68:18:f3:a7:63:e0:e3:2f:c3:
4c:50:38:17:91:9c:2e:a5:e1:14:e2:a1:f3:ad:60:
2d:52:8d:7e:db:98:46:83:79:39:62:9b:5d:af:13:
fd:04:13:3a:de:c3:16:1f:58:3d:b2:39:2f:b1:1c:
fb:67:83:d9:ff:9c:ea:f6:5d:b7:93:d9:72:ac:c9:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:87:AA:62:35:E3:75:95:D2:0F:FD:D7:69:5F:84:AB:D1:C2:D1:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ae0df0d-d8e5-398f-838a-0a36f554a6d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:5c:02:52:32:5f:ce:c4:92:bc:53:60:77:bb:68:63:99:8d:
29:0c:69:55:3b:29:78:f4:e3:c8:28:df:dd:4b:76:4a:b6:26:
65:f1:de:f1:70:55:c6:e9:7a:48:7f:b6:2e:30:b6:9c:6d:c1:
c1:b7:1c:f3:1c:7e:74:d6:fe:08:1e:a3:fe:76:fd:a8:f8:30:
ef:dc:d4:89:6c:0b:1a:82:80:81:09:92:88:75:2a:a4:59:1e:
74:76:85:9c:b8:c9:3c:7f:4e:c9:9d:0e:cc:3d:19:26:e2:76:
21:38:e6:73:af:7c:cd:f4:4b:c9:c7:b2:f1:b5:53:2d:13:c2:
d3:a4:d5:9d:a5:68:e3:e5:d9:85:8b:5b:26:5d:67:27:75:eb:
05:5e:9c:61:d4:94:93:0c:e3:67:2c:49:db:f6:46:cf:6f:19:
3a:78:83:f7:5d:1b:47:d5:77:4f:10:b7:5d:2a:e8:69:ba:38:
b4:e1:4a:7b:2f:86:1d:62:dd:06:e5:e2:61:9d:03:ba:d3:70:
f3:37:99:ec:72:61:1b:c0:6a:e9:15:73:3c:45:3a:e1:af:9e:
5c:c9:f6:90:80:94:12:a1:8e:66:7f:86:25:e2:cd:cb:12:25:
90:ef:b7:01:c6:c6:7e:89:86:64:ca:e5:77:9f:a4:b7:a9:79:
e2:90:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:04 2025 by rpki-client