Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b50477f-cf7a-33c8-8ddf-a2f7a886757a.roa
File: 5b50477f-cf7a-33c8-8ddf-a2f7a886757a.roa (raw, json)
Hash identifier: UWfL9LNN6f1aAjRvOYcCikVHSoW79hVZ+GbosTwyukY=
Subject key identifier: 1A:AD:26:BD:CB:D2:48:C1:0F:EE:90:73:78:0D:BA:0B:EA:5C:90:EB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB07008BC066C2EA4B13600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b50477f-cf7a-33c8-8ddf-a2f7a886757a.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21552
IP address blocks: 207.35.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:70:08:bc:06:6c:2e:a4:b1:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=309cc2a1-0c0c-4d1d-906f-58484cbe6e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:95:2f:f9:9b:e2:05:3a:29:70:98:6d:b0:
70:36:b3:c4:25:fc:b2:74:c0:95:4f:15:fa:7a:cd:
46:06:80:4d:b2:69:2e:68:38:c0:f1:ba:f5:e1:94:
bb:93:f5:23:c0:46:ac:cf:60:6d:e1:72:6b:ae:3e:
1c:0c:2a:76:f0:8d:5e:7d:77:7e:38:44:08:cc:14:
4f:e2:30:9d:ac:f1:ac:d3:fb:da:aa:f6:76:f3:e9:
50:95:75:d6:90:87:ff:88:93:d1:f5:f6:7f:8d:54:
84:a9:f1:aa:43:57:bc:4a:a7:2f:97:5a:75:98:31:
04:6b:c0:b3:12:9e:67:f5:ba:ae:28:4e:bf:8d:a0:
c1:bb:4a:f7:6e:c1:11:ae:b1:91:83:08:e0:6d:1c:
d8:5c:7c:01:c1:23:38:4f:8c:ac:ef:e4:6f:32:cb:
78:bb:cd:c7:d2:ad:1d:e8:6b:45:1e:19:0c:40:bf:
cc:39:a1:f4:83:f3:44:9a:34:a2:ac:f3:ff:60:ac:
83:7c:c5:2c:8a:aa:65:e3:42:e6:56:fc:55:4d:c9:
62:e8:b2:48:4c:2d:0b:ba:ba:f4:e7:8a:9b:2f:13:
e2:41:63:05:b0:9e:ce:3c:db:d9:23:65:6e:fd:2f:
01:bf:f4:16:2d:5a:92:90:8d:03:ea:b4:f0:b6:5c:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AD:26:BD:CB:D2:48:C1:0F:EE:90:73:78:0D:BA:0B:EA:5C:90:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b50477f-cf7a-33c8-8ddf-a2f7a886757a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d4:07:74:d6:2a:c3:fb:99:9c:65:1f:27:fc:dc:6e:02:81:
45:ee:f4:9e:2e:b3:3d:9b:95:57:da:cc:fc:f2:fd:15:5e:59:
d3:28:8f:1b:a8:54:36:57:1b:86:be:fa:6e:6a:4b:f0:e7:83:
78:46:92:0d:2f:4a:e4:dd:71:57:e7:d1:6c:18:2e:28:9c:45:
d4:8d:d1:35:f2:74:de:12:00:19:37:fa:cd:d4:6b:43:20:a8:
1a:bf:05:79:d2:e5:9f:47:41:9a:c2:91:2a:73:d8:3c:d6:71:
69:81:9f:fe:45:b9:eb:7c:00:d3:74:3b:33:ca:88:cb:f2:60:
72:7d:d0:db:90:84:9d:cb:12:70:04:1a:c4:e9:1d:97:95:27:
4e:98:12:24:9a:fd:ba:86:45:8e:18:4b:f8:85:53:2b:52:14:
a5:85:54:76:a5:3c:e6:fb:7f:85:7a:03:ea:5e:4d:72:75:d0:
01:c7:ad:d2:f1:38:76:d4:61:ed:f9:51:84:ee:18:77:42:d3:
d1:4d:27:09:40:b0:30:99:78:8a:49:4e:39:58:cb:4f:69:52:
18:b3:19:d2:e7:2e:21:f2:cb:bc:ed:60:63:81:d2:75:87:67:
70:ff:1e:39:39:3c:75:24:fe:83:af:e4:f7:0f:94:3b:7e:a1:
a1:4e:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:43 2025 by rpki-client