Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5666a790-2782-37a2-a52b-22394aa0dd1c.roa
File: 5666a790-2782-37a2-a52b-22394aa0dd1c.roa (raw, json)
Hash identifier: LTxFgyDMJQJ/OHyWvSoS5pxh2ND1gUbTWybpccF4iTE=
Subject key identifier: 38:C2:86:22:69:F0:85:1B:95:2D:F2:27:83:7B:95:BA:9D:A7:29:5A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2A6A6CE96FBAA5121BCD20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5666a790-2782-37a2-a52b-22394aa0dd1c.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 36522
IP address blocks: 206.172.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2a:6a:6c:e9:6f:ba:a5:12:1b:cd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=f369cfca-4e74-4b0b-8593-3bc003dbfd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:de:4e:66:b7:8e:90:97:89:bf:40:c6:27:87:
80:72:81:6c:8f:52:ac:56:b7:4c:a8:e7:c8:c3:72:
c3:f4:7f:fe:5f:9f:b0:19:c8:1a:f5:81:5b:d0:13:
87:6d:9d:88:43:09:2a:a5:d2:ff:18:6e:73:a4:6e:
f5:4c:cb:31:54:57:5c:28:d6:40:77:f1:5e:f4:f9:
b2:ae:be:97:96:13:f6:a4:9f:fa:f0:50:b7:0e:ac:
3a:2f:7e:5e:0e:e1:84:2a:08:6d:46:f9:f4:3e:7d:
28:e4:7b:ab:0d:63:ce:f2:87:92:b4:a5:49:cd:15:
68:4b:26:4d:de:9d:c7:ee:54:d7:bd:61:5c:34:76:
a7:52:c9:59:38:d3:40:1a:b1:7f:e3:b6:a1:67:2a:
8f:1c:24:89:b2:d7:80:4b:c0:aa:77:ba:26:82:50:
bb:56:2b:ac:00:97:59:ec:91:aa:02:31:0e:78:34:
84:e7:94:78:49:e3:d8:87:9e:45:3d:c7:83:40:8d:
25:d7:fb:36:36:39:e0:e8:71:6d:8b:0f:d6:14:a8:
0e:17:da:93:44:00:9b:2c:a1:1e:27:a8:f2:e9:0c:
78:f8:a4:65:af:67:76:6f:d8:a3:04:0c:56:57:2e:
e7:e1:0d:3a:bf:51:e6:07:4a:19:10:4c:20:cf:39:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C2:86:22:69:F0:85:1B:95:2D:F2:27:83:7B:95:BA:9D:A7:29:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5666a790-2782-37a2-a52b-22394aa0dd1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:79:14:60:53:98:db:b4:53:51:6c:9f:87:fc:57:8c:60:54:
17:3b:2b:ed:ba:c0:a0:e0:de:bd:06:b1:d6:3f:da:f8:29:b3:
71:6f:4d:a2:bf:0c:a6:7d:d9:b8:5c:50:1d:41:bf:19:64:13:
bc:a9:53:29:3c:2b:e2:de:e1:87:5d:fa:da:81:c7:65:29:c7:
25:df:61:ae:bc:c0:95:cd:71:a3:96:ad:96:4c:ca:a1:b6:92:
7a:e0:e8:88:1d:db:cf:27:4b:37:f2:cc:a2:90:d8:f8:a5:19:
34:9c:a7:16:8e:ac:52:41:75:3d:57:f1:7c:d9:a2:30:c1:5b:
14:7c:50:2e:d4:62:4b:52:65:2d:4f:b4:9f:5d:4a:8f:7a:22:
91:b2:d7:fd:65:8e:39:cd:79:ea:28:3f:03:e2:8a:d0:06:8d:
fd:c6:97:b3:55:5e:4a:77:ef:c1:74:e1:84:22:1d:5d:68:94:
2d:87:ef:c7:52:46:93:25:0c:13:55:c8:d8:45:d4:09:5c:5b:
7a:ac:be:3f:3a:a5:96:f2:9e:fb:46:cb:30:a8:ba:45:7e:73:
14:5c:5e:5c:a9:a5:45:75:3a:80:d3:c3:30:c2:5d:c6:23:1c:
17:c9:2b:eb:57:65:7e:ae:1a:b3:00:7e:04:fa:5a:80:2d:8f:
70:43:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:20 2025 by rpki-client