Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/51e52529-e945-34fe-a8b9-f74db33999ad.roa
File: 51e52529-e945-34fe-a8b9-f74db33999ad.roa (raw, json)
Hash identifier: f1tKEoOwOuIIBrPruvSDA03+MFsMp4TjigHVQ7ONeyg=
Subject key identifier: AD:42:00:5C:0F:62:CA:F7:7D:CB:1A:4F:32:C1:93:4A:25:3E:1A:99
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7A571CB6EC67405CD99C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/51e52529-e945-34fe-a8b9-f74db33999ad.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 35911
IP address blocks: 209.226.56.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:a5:71:cb:6e:c6:74:05:cd:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=8250b4d5-7b4e-4884-92da-665ce3ea8792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:28:51:05:ad:54:01:d4:e8:64:1e:02:69:
56:88:57:6b:e3:f5:2f:4e:d4:e9:5b:2f:3e:13:a9:
6c:b9:3b:81:17:b3:ba:d2:82:40:03:b8:2a:dd:a9:
e3:3f:6b:71:03:44:5f:72:52:04:b4:7e:30:a7:c0:
91:e7:69:94:47:80:d6:70:a2:8b:83:7e:b1:a4:80:
be:b8:51:7b:30:dc:ad:85:bf:db:92:20:53:3b:3d:
c2:d6:13:9c:29:56:0f:1a:73:19:91:cd:d7:e6:60:
8a:a0:28:e3:65:e3:7d:16:6c:fc:ad:6c:d6:03:1c:
54:29:91:79:12:f2:6c:88:8b:5b:59:43:54:85:92:
03:45:68:a9:2a:72:a0:54:73:38:11:48:80:75:37:
9b:a5:e6:67:2d:41:04:e2:6c:26:1e:37:6a:d2:f8:
9a:db:f7:b2:d3:eb:e1:55:21:66:e2:b5:53:34:14:
23:b4:a5:b1:55:d4:bd:bd:62:b1:7a:20:74:92:88:
35:01:6c:6b:7f:31:d0:61:34:4e:0b:18:2f:20:c8:
f0:4e:a8:e6:69:f0:e2:87:78:2f:59:36:9a:47:d2:
4d:30:00:fe:e5:82:4d:d0:99:63:53:ad:90:36:5c:
9d:0d:aa:6e:0d:3f:61:6f:ae:74:0c:fe:c3:8a:80:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:42:00:5C:0F:62:CA:F7:7D:CB:1A:4F:32:C1:93:4A:25:3E:1A:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/51e52529-e945-34fe-a8b9-f74db33999ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:14:21:80:56:15:c5:88:28:f1:45:9b:32:17:ac:61:05:05:
ef:f0:04:be:cc:7e:0b:d2:b1:b5:7c:ce:fd:13:4d:12:22:10:
93:65:91:f5:48:21:e5:70:a6:ef:06:20:f6:c5:02:c9:0b:48:
df:76:53:72:6d:59:5b:81:26:61:ff:0e:bd:c6:95:36:ba:5c:
51:f3:5e:05:c1:57:16:ca:e6:c9:83:e1:9c:7e:d3:25:68:28:
c7:18:3d:18:f9:0f:8a:3e:8c:af:2c:cc:6d:9e:bc:47:d6:3f:
17:65:73:8e:58:1a:b5:e9:72:76:95:cb:ac:08:1c:83:d4:44:
c4:c4:8f:53:a6:4e:b2:62:e9:5b:5a:bb:a3:98:00:88:ed:9b:
46:d2:41:27:f8:33:8d:16:69:69:f4:a9:37:a3:a3:05:fe:31:
15:75:5c:88:02:2f:2f:1d:3a:70:51:ed:df:79:68:7a:0c:11:
e9:b5:af:3c:ac:e3:e0:39:b7:21:c3:7f:5d:55:e4:36:62:58:
65:9f:b2:78:7f:6b:47:07:b8:1c:de:d7:a1:96:70:55:c5:19:
9c:81:42:45:4d:73:78:41:52:c3:e6:4e:16:c1:87:81:1b:8c:
6d:44:93:89:fc:04:dd:f2:86:0f:ed:f1:fe:ae:90:3d:eb:f5:
5d:27:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:38 2025 by rpki-client