Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/515a2a8d-b3ae-380d-8e10-421db04328a8.roa
File: 515a2a8d-b3ae-380d-8e10-421db04328a8.roa (raw, json)
Hash identifier: U7BFQbTMHlFXehK0KOZHk4fs93XB+W+H8iSdd1HJmqc=
Subject key identifier: 64:58:88:8D:A5:7F:DA:91:4C:91:BB:D9:65:77:1E:E0:01:8C:6D:47
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29FBB7DF6D1F098DA6CC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/515a2a8d-b3ae-380d-8e10-421db04328a8.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21552
IP address blocks: 204.101.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:fb:b7:df:6d:1f:09:8d:a6:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=95ed62f5-81a9-4669-8bb8-b7cdf97aad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:ad:af:66:6a:2a:50:09:a6:a8:46:54:49:
d7:aa:91:8f:0e:12:20:1d:46:f6:f9:84:4a:16:13:
bf:0d:b5:17:f8:ce:83:1a:19:88:83:ea:66:49:0d:
df:1b:cf:34:70:ea:5f:ab:e4:e3:6a:0a:42:22:ba:
cc:c8:f4:35:e7:fd:25:8d:f2:a8:43:4f:f5:24:64:
c7:fb:28:48:cc:df:88:ca:39:af:da:44:18:fb:3e:
f5:32:0d:16:c2:7e:7c:f7:f9:e3:2d:4d:05:86:aa:
b6:10:45:22:41:be:18:b3:40:2b:c6:48:49:a0:26:
3d:a7:5e:1a:18:12:a1:b9:09:a2:14:08:23:e5:cf:
1c:d9:ed:71:b8:67:d4:b2:de:d6:e4:05:31:3d:cf:
53:14:cc:7d:0c:38:e2:38:e5:2d:5f:fd:ea:46:a5:
8d:91:7b:aa:6a:58:cc:5c:d2:6f:ad:ce:b2:82:98:
74:18:e0:73:f1:38:a5:26:7b:36:0a:fc:0f:2d:18:
11:74:f1:42:20:07:bd:23:b9:0b:a4:86:93:68:34:
1e:5c:16:af:30:14:a4:90:76:38:43:a6:c7:f5:bb:
47:58:59:41:73:a7:b8:75:6d:12:ee:02:90:00:d4:
44:83:f2:af:d7:68:eb:db:92:64:f2:dd:06:85:42:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:88:8D:A5:7F:DA:91:4C:91:BB:D9:65:77:1E:E0:01:8C:6D:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/515a2a8d-b3ae-380d-8e10-421db04328a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:8e:a5:fe:12:44:3f:0f:11:ba:82:13:00:0a:d5:72:13:0f:
64:60:d6:e0:b8:53:40:f2:7d:22:ad:93:69:a4:f7:14:9c:fe:
af:c4:02:1a:63:26:d3:3e:71:b7:90:2d:46:92:8b:c3:e9:6e:
1d:cb:9d:cc:6b:95:36:ef:db:13:fe:90:74:13:b7:fa:2e:7d:
ea:87:e2:98:d3:02:29:bb:dc:dd:e6:0d:d0:81:88:c2:d8:56:
fa:2b:75:ef:1f:b7:ef:c8:40:01:a8:cc:5f:26:f6:20:9e:56:
15:3f:88:85:cb:11:9f:3b:b1:ae:23:4c:72:f3:36:3b:70:2f:
12:72:bf:e0:45:01:58:30:ca:68:2e:0f:3d:fe:27:41:b4:d7:
f6:db:fa:71:aa:33:b8:c0:5f:12:86:02:a3:6b:b4:47:24:d6:
02:c0:49:39:b0:bd:c8:8e:0d:d8:d5:40:86:14:69:f0:b9:b3:
24:ea:d2:0d:f4:3e:5b:91:9d:13:ab:72:22:1a:99:bc:6f:93:
db:ad:ce:4d:c2:7d:90:c8:db:92:67:20:55:38:9f:5c:c4:a9:
e3:dc:cf:41:cf:bd:e6:a7:1c:47:43:45:cb:5f:4c:f5:f3:e9:
ef:71:bc:a8:22:6b:e8:70:2e:c4:b1:f7:61:5e:14:07:1f:b5:
4b:99:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:47:15 2025 by rpki-client