Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4cd41c00-d3d6-3e49-8006-25962224673b.roa
File: 4cd41c00-d3d6-3e49-8006-25962224673b.roa (raw, json)
Hash identifier: YPL8w4R63lgWG5Mu399G8G9bR8763/VUNzfQjbuS0ps=
Subject key identifier: E9:4E:36:AD:1D:F3:1C:F0:C5:A3:A2:81:09:82:65:BA:3E:2E:1E:DB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5CCEA225B07A552A56D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4cd41c00-d3d6-3e49-8006-25962224673b.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 184.151.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:cc:ea:22:5b:07:a5:52:a5:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=70247a5f-9e3c-4c78-b443-8dc63b7e1864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:18:97:87:90:61:13:7e:42:58:c2:e6:72:
28:05:13:c5:aa:65:42:ff:2d:28:4a:08:89:18:ae:
b6:23:08:14:21:40:ed:64:d6:11:ed:19:6d:5f:3d:
0e:8a:c9:e4:fb:44:4e:19:ce:9a:b6:05:15:49:ae:
5f:aa:4f:cc:e4:1e:56:67:00:86:33:76:0b:35:2f:
96:ad:18:34:5c:d9:e3:5b:01:02:24:5f:de:d1:57:
1c:ff:44:c4:49:00:b7:3e:d5:7b:65:8d:85:6c:e3:
be:4f:1f:49:26:27:f1:a6:85:7e:cb:8e:d3:09:6a:
43:e6:9c:4b:de:e1:0f:ce:24:73:e9:42:5f:9f:be:
cb:62:77:b5:b8:e1:5e:d3:46:bf:a3:ed:21:64:4e:
0d:bd:2d:d6:5c:5b:7e:fe:f7:fd:2d:b9:8a:45:47:
07:ad:59:26:05:e8:0c:80:93:a0:f0:20:be:85:25:
d7:98:3e:7a:b6:f4:80:a5:95:0d:7e:de:4f:00:c3:
2f:14:aa:39:3b:59:52:24:e5:39:87:1e:ad:fc:93:
31:a6:7d:ff:7c:55:e9:ed:70:8e:a4:e2:1d:3e:44:
fb:ab:cc:12:07:f1:e5:79:62:61:58:d2:d1:b4:67:
09:7d:1b:58:d0:31:8c:16:6d:81:8d:21:1c:7f:b7:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:36:AD:1D:F3:1C:F0:C5:A3:A2:81:09:82:65:BA:3E:2E:1E:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4cd41c00-d3d6-3e49-8006-25962224673b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:36:c7:a8:d5:1b:38:f0:3c:06:2b:f4:fd:45:0a:5c:91:b4:
ae:d6:44:35:53:4e:5a:ca:aa:71:a0:f2:46:2b:ce:fc:12:28:
ee:ae:1b:61:6a:b4:34:00:d8:1b:bc:36:fa:68:27:b7:95:a0:
15:27:4a:26:67:ec:28:1d:b3:68:35:f3:c7:7b:73:f0:a3:06:
1a:e5:31:fc:45:18:ea:0f:63:a2:f4:e0:00:6e:3a:0e:3b:e5:
f4:e6:f4:5c:3a:79:ac:56:ec:eb:1f:37:3a:76:68:70:d2:35:
a4:41:c3:d7:7f:86:cf:af:72:b9:2e:aa:27:dd:ae:b6:db:3e:
8d:90:cb:e8:c4:1c:1b:ef:fb:45:cc:56:67:6b:3a:fe:f1:17:
21:3c:1d:b4:a2:5a:d0:47:77:13:99:2f:ea:50:18:ba:3a:01:
0d:44:e0:74:d3:2a:b5:aa:ce:a8:e5:f4:2b:30:ba:4c:0e:5b:
74:a1:08:c6:fd:0f:6f:f3:21:03:fd:1e:d9:81:e4:fb:11:55:
53:7b:f5:f0:55:1b:9e:62:35:14:e1:7e:88:c0:a3:56:f2:57:
16:a0:71:29:3a:b0:69:df:f2:00:5c:fc:f6:43:d2:e4:c4:84:
55:2f:85:62:fb:85:20:70:8f:f2:ae:11:7b:06:da:77:69:79:
ac:b8:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:24 2025 by rpki-client