Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e5ccc23-a0d7-325b-9820-a4a47a4b8b5b.roa
File: 5e5ccc23-a0d7-325b-9820-a4a47a4b8b5b.roa (raw, json)
Hash identifier: 1kb9aJp7WZLi5Hn2OhuIe1Fo/6AdGKceHkWYg2HoXzg=
Subject key identifier: BD:AE:74:09:DF:8C:46:4D:C1:E2:5B:C5:71:3E:BD:0E:CD:83:09:9F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6D7439B062A9ACE8BCB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e5ccc23-a0d7-325b-9820-a4a47a4b8b5b.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21723
IP address blocks: 207.35.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:d7:43:9b:06:2a:9a:ce:8b:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=7195e3d4-5b99-4b67-848b-607708eb61c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:30:7d:3b:c0:19:e8:ee:b4:73:68:d4:8b:
f1:e7:04:32:17:71:bd:b6:4a:45:d2:78:c8:a4:9a:
c2:82:2f:78:30:8e:eb:d1:57:c7:ca:37:81:6f:98:
0c:25:38:a8:e0:1e:0c:0c:86:96:d9:5d:94:c7:1f:
1c:1a:3e:fe:38:82:18:d5:09:0f:d1:8e:a3:50:88:
f3:c7:cb:1c:d3:b8:67:83:30:cd:3a:7d:63:fd:c1:
a3:0c:af:d4:67:49:d3:88:7a:c4:21:5e:d5:87:53:
ac:5d:d5:ce:bb:71:31:fa:2d:9e:3b:b8:7b:54:ff:
50:4b:d6:68:9e:02:de:f4:9f:39:71:91:53:1f:52:
d6:b2:02:a2:dc:60:76:e4:e3:72:c9:db:36:60:ee:
6b:31:08:7b:4f:3e:b4:4f:72:53:17:18:4e:31:10:
8e:3c:e9:cc:bc:59:ef:6f:f7:cb:97:f2:5c:ac:d4:
58:26:de:6b:d7:ad:eb:ad:32:8f:09:7a:16:da:b2:
3a:58:15:96:81:7d:5c:3a:d4:2d:fc:cd:ea:66:1a:
c8:f9:5b:51:5c:ed:5e:76:6c:b9:96:26:de:9c:6e:
33:3f:91:3a:a6:05:76:3c:a5:60:a5:d9:5c:55:14:
d4:90:ae:79:9a:15:20:79:89:43:f2:25:06:15:30:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AE:74:09:DF:8C:46:4D:C1:E2:5B:C5:71:3E:BD:0E:CD:83:09:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e5ccc23-a0d7-325b-9820-a4a47a4b8b5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:99:35:24:e0:67:16:cb:10:3f:b8:d8:6b:d4:fa:0a:6e:6f:
bf:65:c0:3b:bf:0d:59:43:75:76:46:a5:c8:d0:29:84:af:61:
f4:08:85:cb:d4:23:af:df:1c:44:b0:bc:fb:68:d7:c8:b2:62:
39:4c:5d:8a:52:0d:d6:96:13:fb:96:4d:22:d6:b2:1c:05:ee:
b7:2f:44:ed:9d:2b:68:59:73:c3:8d:eb:9c:80:7a:46:0d:d7:
aa:d2:00:f0:f1:f8:cf:5b:cb:3d:0b:2c:fe:23:8a:b3:53:e6:
29:48:b3:78:85:f4:ee:0c:99:25:31:f5:a1:cc:b3:af:5c:e5:
81:fb:a1:d8:de:b1:dd:bf:0e:86:43:9b:35:d4:7f:b8:1a:32:
30:7b:68:66:94:40:f9:9e:35:60:f2:12:ab:ba:e4:d4:ba:7d:
c5:57:a5:9f:3b:ec:16:63:cd:cb:24:aa:25:7e:e3:1b:6b:9e:
f3:a2:d5:ba:76:6a:cf:f0:c4:85:68:2d:26:f3:c5:47:1d:5a:
77:b8:d3:02:c1:bb:f5:66:64:87:fc:e1:b9:d2:83:71:08:4c:
40:8d:1f:a3:f4:4f:0f:7d:71:8b:e0:0c:da:b2:5d:3c:d7:84:
10:7a:89:5f:ec:a9:37:1f:cf:49:12:cd:c5:6e:fe:97:d1:c9:
df:f4:c7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:05 2025 by rpki-client