Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e16f98a-1720-3e39-9744-41726587898a.roa
File: 5e16f98a-1720-3e39-9744-41726587898a.roa (raw, json)
Hash identifier: XFiKb6x9TWExhJmTU6y6HpRb5d64qA3WOptMN5EHdfk=
Subject key identifier: 9D:BA:EC:3D:11:41:9C:21:DA:27:DA:6C:C9:17:39:A2:20:F2:54:B4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B80A4D906EAE7871935000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e16f98a-1720-3e39-9744-41726587898a.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 216.209.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b8:0a:4d:90:6e:ae:78:71:93:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f6decdb1-7f0a-4802-b2e9-fa9cc43aee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:39:b0:e7:55:af:db:7f:03:6f:a5:0f:9c:
22:74:da:33:3b:7a:73:ad:22:21:17:9f:55:15:cd:
ba:e9:fc:e1:dc:bf:c7:29:f9:4b:93:6b:eb:a3:fe:
35:83:83:9e:59:50:54:9f:eb:c7:29:f6:f8:1a:b2:
64:c7:11:e2:af:25:4b:5f:54:78:85:cf:e8:54:cc:
44:a3:8b:28:0a:9c:e8:03:6e:2c:35:b5:cb:73:2c:
0a:be:06:03:bc:0d:28:32:98:d5:71:a9:c3:03:60:
7d:6b:09:7c:7e:34:10:41:af:53:2c:f8:4f:4e:9f:
b5:4c:58:26:22:1f:68:37:67:eb:8d:15:ac:b6:fb:
7a:bb:29:b5:ab:fd:d9:48:70:c1:b7:d4:f2:7a:54:
d5:55:e2:87:6a:db:b2:b7:0b:77:21:d3:2f:ab:10:
50:06:e8:c9:e4:38:9a:7c:8d:6a:78:2b:87:be:26:
d5:f5:77:24:23:56:88:aa:e8:1b:55:6c:3a:ea:a7:
df:5d:b4:d1:60:08:3b:5c:db:9e:f6:7b:5d:c1:d8:
08:06:5c:0e:e6:0f:46:97:be:b0:13:04:f9:38:f5:
96:a5:42:8c:cb:10:12:bc:ab:1c:0f:18:2a:5d:a6:
53:2e:69:63:a0:44:e6:f3:62:d8:15:93:29:18:b6:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BA:EC:3D:11:41:9C:21:DA:27:DA:6C:C9:17:39:A2:20:F2:54:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e16f98a-1720-3e39-9744-41726587898a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:60:62:0b:95:99:dc:50:9e:30:b7:bd:40:8b:a2:03:4b:ca:
5b:47:cb:ae:72:47:87:ab:ea:76:2b:02:7f:11:95:d6:de:ee:
36:77:68:fc:99:bb:39:bf:20:f6:c3:96:7e:ba:18:58:f4:ae:
32:58:d4:1d:37:51:85:f8:f0:37:3c:f6:f3:72:c5:25:e8:c8:
94:99:55:77:89:91:2d:70:6a:38:03:5b:d9:11:72:12:1d:89:
a0:3b:5a:c4:0e:eb:5c:6f:a5:1d:ce:3c:10:7a:08:97:85:25:
e1:51:d2:c9:2a:ba:0f:85:19:7d:9b:5c:45:4d:59:3d:31:b7:
6c:28:b7:a2:bf:7a:fd:eb:58:fd:09:09:a2:f4:ba:d5:09:16:
c0:79:06:8d:99:5b:1d:92:97:12:89:50:34:29:2f:d5:95:f5:
e5:93:c6:04:1c:45:f9:01:ce:95:72:f8:3d:56:13:cc:5e:9f:
84:8e:7d:61:f5:53:6e:d4:3b:9c:ca:f4:8c:92:c7:36:f4:9a:
0e:94:39:cc:9e:bd:1d:e4:a4:5b:1b:5a:b2:ab:48:81:9b:e1:
03:3f:dc:f5:5b:86:c9:25:df:f5:ba:91:ba:cd:58:43:5c:54:
e5:f4:19:4b:ab:6a:f2:dd:d6:d4:23:05:57:11:9e:d3:d3:8b:
cd:d6:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:33 2025 by rpki-client