Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b6a7d10-42c0-3cf6-b81a-def31840d5aa.roa
File: 4b6a7d10-42c0-3cf6-b81a-def31840d5aa.roa (raw, json)
Hash identifier: qkdoNI8tcKAjcXBx1mDegAgaeYC/OEUJPlz//HWVlMQ=
Subject key identifier: F5:4F:E8:FB:53:41:77:6E:0F:6E:12:AC:B0:75:AD:1A:87:4C:25:5B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6F5C9FACD89083B5F8000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b6a7d10-42c0-3cf6-b81a-def31840d5aa.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 207.61.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:f5:c9:fa:cd:89:08:3b:5f:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=8b3a52de-c796-43ca-a768-cbf3a3f914bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:30:d2:de:14:5c:30:79:73:09:be:85:42:
37:cf:d0:e5:dc:d7:8f:38:db:ea:db:d2:3c:86:55:
43:ac:ca:38:85:16:f2:bf:9c:4d:1e:b8:72:68:38:
97:1d:02:49:53:97:46:fd:bb:54:d6:91:5a:f3:1f:
6f:5e:79:d2:46:6d:d7:96:c6:3c:79:0d:f0:48:c1:
4f:c1:1c:74:79:d3:8f:47:1a:e8:0f:7c:2a:3a:df:
96:91:14:7e:0f:24:1b:46:19:c9:e3:a8:aa:f4:40:
f0:bc:aa:15:f1:99:eb:83:e1:6a:ac:9c:e4:ee:d6:
78:af:7c:70:d3:ca:3f:79:43:fa:05:81:61:ad:8b:
0b:17:2a:b6:99:e1:ba:26:6d:90:5f:3a:cf:80:09:
0e:dd:58:57:9f:95:c6:1b:4a:33:1a:c1:13:bb:70:
48:48:2d:f6:f2:88:f3:78:f5:f5:60:e7:36:85:a1:
bf:f2:09:b6:ae:12:1b:0b:0e:07:fa:f4:42:e3:e1:
50:53:a1:3e:41:87:d3:2d:be:46:25:6d:90:11:3d:
86:40:c7:be:13:d6:79:67:93:e8:12:47:de:45:09:
9e:3e:57:6d:55:81:31:c7:79:e7:18:14:7d:b1:54:
c5:cd:bb:9c:e6:95:6a:ab:8d:5d:3e:49:78:a4:79:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:E8:FB:53:41:77:6E:0F:6E:12:AC:B0:75:AD:1A:87:4C:25:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b6a7d10-42c0-3cf6-b81a-def31840d5aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:8b:a4:d7:e6:10:de:07:fd:8f:5c:eb:6f:f3:e1:56:a9:07:
f1:e8:f5:4d:94:3c:7e:c0:ed:14:31:90:80:a0:2a:5f:15:9a:
09:37:3f:7e:79:a6:05:17:ae:4f:59:3b:25:ce:59:b7:01:79:
6b:4d:02:bc:24:27:cf:e2:94:02:bc:1a:25:47:75:31:83:20:
f7:cd:2a:f0:45:d0:0a:c1:ec:cc:2a:e7:ff:0b:9e:ba:c2:6e:
da:66:57:18:ea:56:94:e5:0b:02:a3:b4:73:76:26:49:aa:af:
e2:30:b2:1d:b7:9d:fc:c0:8a:20:7f:85:9d:07:20:ed:f4:eb:
e0:58:be:26:68:f6:f5:f6:5c:10:7f:4d:f4:cb:da:9a:58:d2:
af:16:bc:78:b4:94:38:17:85:43:2a:f5:8c:8d:d2:e1:1f:5d:
62:fe:b5:b2:a9:95:cf:a5:1f:2b:f0:c5:cb:ec:56:7b:eb:61:
45:37:d7:57:c4:81:d2:35:e2:72:a7:21:14:fe:db:71:7e:44:
47:a9:e4:b4:d0:8d:49:49:7b:69:ca:a3:cd:42:e0:ba:a0:bb:
1a:62:ab:c8:e2:e4:0c:a4:da:fe:e3:50:50:1c:b1:e7:83:6b:
d3:de:d4:a1:01:01:f2:1d:16:f3:23:92:77:23:6e:18:1e:79:
a1:90:f7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:58 2025 by rpki-client