Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4aff2e56-8456-30e8-a2eb-4b3aba2eb495.roa
File: 4aff2e56-8456-30e8-a2eb-4b3aba2eb495.roa (raw, json)
Hash identifier: ktWswAIiYD5NxSOo2FEFE1cbsY6km+hPQD5qMLNXdwM=
Subject key identifier: FD:CE:51:00:DD:22:51:4A:B5:38:23:5F:93:66:A7:1F:82:76:42:4A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB06154EDA06A991DB95200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4aff2e56-8456-30e8-a2eb-4b3aba2eb495.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 206.172.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:61:54:ed:a0:6a:99:1d:b9:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=2740ac7b-9666-4869-80f2-49b20818fbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:15:4b:d3:73:0e:ae:17:7e:17:8c:6e:89:
e1:da:62:7a:45:51:83:d1:13:51:40:84:7f:98:04:
7a:04:9c:7a:27:4f:ea:e2:ca:64:96:f3:16:4f:bc:
d5:22:f7:67:aa:61:34:cb:a2:e2:4a:6d:e9:7e:4c:
d5:e7:f6:b9:09:8a:a6:67:f8:b1:17:0d:ec:90:b8:
39:35:89:f5:6e:8a:9d:74:b3:42:0d:39:3e:6b:53:
49:ba:2b:bb:77:92:c1:41:9f:55:2b:e2:5a:e9:64:
4a:5c:24:e5:36:89:2b:5b:a4:3d:45:f5:1a:e9:32:
4c:27:13:60:19:c2:31:eb:dc:46:fe:38:86:f8:07:
77:69:87:32:6b:58:e2:a8:eb:ae:a5:68:12:9a:74:
d2:12:c6:3f:3d:2b:d4:cf:cc:82:9c:12:26:cd:0d:
9d:fb:f2:4b:dc:d9:da:67:f6:9e:28:14:7d:26:b3:
3c:4b:d9:0b:2d:cd:13:0b:98:af:9d:c0:2d:b8:9d:
20:ac:5f:dc:db:aa:a8:85:8e:f7:67:b0:10:15:8d:
b1:48:ac:a8:11:69:c8:e6:95:40:35:5e:97:82:0b:
95:6b:2e:d8:a9:e2:b0:75:fd:3c:d4:eb:fd:78:72:
0f:b3:61:59:ce:e6:23:44:36:df:d1:b0:23:d7:b4:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:51:00:DD:22:51:4A:B5:38:23:5F:93:66:A7:1F:82:76:42:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4aff2e56-8456-30e8-a2eb-4b3aba2eb495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:82:dd:73:ab:21:fc:8f:4e:41:8b:de:89:66:e5:13:c0:76:
46:65:fc:52:4b:99:2b:31:70:b2:f9:9e:85:51:1e:56:ed:05:
a9:c5:95:f4:4d:ff:54:22:47:f7:eb:ab:d5:e2:91:87:7f:e9:
9b:e6:e4:ea:57:ba:45:f7:0e:2b:f2:e0:dd:2b:f8:2e:da:2a:
e8:eb:6e:95:b1:83:6f:7a:be:8f:00:1d:b6:43:f8:ff:5b:a2:
d9:dd:b8:79:07:e8:f8:83:9d:37:46:a5:76:80:f4:3a:39:7e:
1a:d9:7c:5b:10:72:ab:70:fd:0b:02:98:5f:30:8c:53:ce:45:
4d:ca:ab:50:04:77:6e:6a:5f:b1:de:df:1f:21:84:6e:22:bc:
de:fe:ae:5b:c8:99:90:a7:7a:30:5f:2b:49:e4:94:f6:49:b8:
8d:bb:87:5c:ca:52:ee:55:97:95:99:b7:7b:d0:b6:51:61:98:
b0:c5:65:65:16:0b:ca:64:b3:36:f7:2b:2e:ba:30:eb:5b:8f:
7f:8d:ae:2f:73:73:81:0d:b0:ab:b5:bc:3d:9d:3c:5b:5e:6d:
6d:8c:cf:59:ff:8f:37:61:ba:78:c9:cc:86:6a:63:39:2b:cb:
28:82:0a:04:76:4d:2a:d8:89:3a:0d:95:37:fa:53:d3:86:56:
cc:20:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:02 2025 by rpki-client