Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f18ec59-2fad-3314-babf-6cd6a2528a30.roa
File: 4f18ec59-2fad-3314-babf-6cd6a2528a30.roa (raw, json)
Hash identifier: zXajLcpgKi0lFEMjKXuK8HN3opXrMgOloAY4sFZem/4=
Subject key identifier: 06:6E:75:6E:A1:3C:CE:86:7C:AA:FE:86:F9:83:28:7F:AD:43:B0:A1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B116EC5590707CD3ACFE040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f18ec59-2fad-3314-babf-6cd6a2528a30.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.236.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:11:6e:c5:59:07:07:cd:3a:cf:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=9edcbbbd-dbd4-4d0b-ae80-dddbbfd6a3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:eb:58:f8:c5:af:24:8e:ac:4c:80:12:fa:
61:6f:2a:6c:0b:c4:b1:b5:a7:eb:d1:69:76:5d:1e:
16:97:6e:89:32:b9:6a:08:b3:49:ac:60:b5:ed:4d:
86:69:9d:16:c1:3a:a1:55:5f:37:3e:d4:58:b1:1a:
04:f3:cb:b0:17:a4:c3:a4:cd:87:91:a3:56:c0:3c:
80:19:a4:d1:cf:cf:65:71:af:61:cd:29:67:95:10:
a5:96:a4:d0:b1:e1:5a:6f:8c:cd:8e:e4:da:65:35:
d4:3c:b6:f4:02:1f:19:99:47:b9:43:80:e2:45:cf:
d7:21:54:eb:da:c9:76:0c:7e:bb:5d:4e:eb:7a:be:
85:4d:3a:63:0b:1d:4c:15:ff:d6:38:4d:21:ed:08:
b2:97:fe:1f:5e:cb:6d:33:7d:0f:cf:6e:77:d0:78:
48:de:c2:c2:a0:11:22:5d:67:54:7a:f8:26:21:b7:
27:dc:1b:0b:03:65:c8:73:ea:23:68:27:21:52:b1:
b1:78:1f:41:4f:77:29:04:b1:13:cb:b2:e3:cf:75:
ea:d7:6b:0e:b3:58:10:12:57:61:a8:46:b7:31:bd:
5c:97:95:59:a9:4e:17:63:81:34:0a:ef:6a:e9:36:
0d:62:88:c7:a8:97:8a:22:4e:83:38:27:81:6f:8a:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:75:6E:A1:3C:CE:86:7C:AA:FE:86:F9:83:28:7F:AD:43:B0:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f18ec59-2fad-3314-babf-6cd6a2528a30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:4e:d2:c7:97:23:78:83:4c:d5:76:e9:23:b1:79:ac:bd:2d:
28:fa:57:ce:d0:47:d3:15:da:06:78:b3:f1:20:eb:84:1c:c2:
ac:93:fb:6d:39:7a:4f:da:77:a4:17:d9:7c:07:c3:3b:98:a4:
6c:c0:5a:95:18:a5:f8:2f:3c:37:80:7f:67:b9:08:e8:f1:02:
3b:f3:4c:54:76:5f:a0:9d:2b:34:3b:05:03:47:bc:76:f0:66:
b6:ac:e1:ce:ca:34:11:60:33:5e:d2:27:82:45:9f:3a:32:30:
15:23:be:5d:46:92:af:2b:7f:cd:6a:d9:5f:5e:2b:cc:4f:9c:
81:10:93:ae:07:56:13:d3:c1:33:84:78:42:8c:78:e9:fa:7e:
47:31:55:4f:77:db:3e:01:45:8c:7c:38:5d:a5:d0:dd:88:ff:
43:58:d5:34:1a:29:66:73:ac:b9:00:4d:8b:c4:0d:3d:80:01:
23:15:a2:70:9f:0d:ef:c9:6a:f0:f9:56:fd:84:53:5a:a9:89:
b6:86:61:cc:2e:72:91:a7:3d:f9:1f:a3:3e:c4:cd:7a:fa:2f:
dd:e8:4e:90:79:2f:d1:04:ef:f5:27:1f:2b:35:24:30:4c:57:
85:7a:0c:1e:52:7d:52:02:9a:02:1a:32:22:ea:1a:dd:76:d1:
3a:79:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:37 2025 by rpki-client