Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/624c5cae-0686-30cb-896b-75fc1db1d9ec.roa
File: 624c5cae-0686-30cb-896b-75fc1db1d9ec.roa (raw, json)
Hash identifier: MmvF5WAHbLI7BfZBzfjzHM41qKPgMnA6npgtPJ02eZk=
Subject key identifier: 47:52:C9:49:DA:75:71:A6:45:79:86:67:9B:08:A6:4E:CB:A4:12:E3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2ADC18EB10EF52DAD6ABC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/624c5cae-0686-30cb-896b-75fc1db1d9ec.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 17170
IP address blocks: 207.179.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2a:dc:18:eb:10:ef:52:da:d6:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=7d061822-3c23-49ae-a482-bc16cf01ed28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:e2:05:17:a0:bc:16:a0:8c:36:78:95:cf:
5d:89:e1:33:50:16:50:16:b6:d0:b3:5e:05:6d:a1:
bd:d1:fd:a3:8f:fc:65:a1:9d:66:cb:46:5b:64:aa:
99:c1:0f:e1:30:df:64:e8:3d:c9:07:d8:f5:00:29:
6f:e2:f3:6b:7b:08:46:48:2d:fc:32:4e:a1:68:fd:
e1:a2:d4:e3:63:19:b4:e1:28:cd:86:a9:92:13:86:
65:a7:86:73:cf:cc:92:b1:7f:6b:37:5d:d1:09:ed:
ed:1c:e8:46:65:6b:9e:ae:a4:ac:96:b8:93:bc:6b:
73:2f:b2:53:74:c6:f4:a4:b7:14:9f:8e:95:bd:c8:
b7:34:f3:7e:f5:24:f1:b3:a4:11:da:4e:55:ef:12:
82:8f:2d:67:91:d4:fc:43:33:d1:ee:c4:b3:f3:7d:
95:21:47:0b:ce:11:82:e8:40:76:cb:bb:82:67:98:
aa:a8:d0:4f:c9:77:8a:d8:59:26:8f:ee:f4:0c:1c:
f6:16:2c:28:1a:81:58:9c:b6:55:59:c9:8e:93:33:
5f:59:c6:07:fc:47:27:33:ff:3e:ae:bc:99:94:cd:
e6:ab:f2:2a:48:65:e9:47:99:43:93:2a:35:10:85:
e4:8d:56:aa:10:1c:a0:48:bd:e8:b7:99:7a:2c:00:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:52:C9:49:DA:75:71:A6:45:79:86:67:9B:08:A6:4E:CB:A4:12:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/624c5cae-0686-30cb-896b-75fc1db1d9ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.179.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:f9:7b:28:ce:6e:6a:36:6f:1e:8a:ed:27:74:7b:bc:d6:e2:
8b:7b:5f:62:b9:fc:53:98:14:c7:73:d9:85:9a:3e:89:89:ad:
ba:64:0c:42:1a:cd:6e:4d:73:d8:56:58:37:4d:37:dd:2a:c9:
59:1e:f2:93:e4:d3:b2:20:8f:c2:c4:24:1b:62:88:32:31:ea:
fc:ab:69:c1:cd:bd:5f:a6:01:5f:45:2a:27:21:f1:46:af:53:
e8:8c:93:c2:88:f1:5f:55:79:d2:68:2d:40:64:94:c7:2b:a5:
0c:ef:98:8a:4f:83:86:0f:29:a5:44:7e:64:f0:8b:75:6d:c5:
39:c8:69:80:62:24:61:4f:29:9e:a6:3b:b7:e1:a6:a6:97:8d:
aa:5e:d2:02:e7:96:f8:7a:3f:cd:2e:54:02:e3:8a:7f:af:cb:
1d:2a:51:46:04:f0:c3:7f:66:2e:20:65:ea:dd:19:b3:51:eb:
2f:df:cc:98:f4:08:65:75:79:64:b2:51:14:7b:bb:c1:32:6e:
98:49:9c:3f:98:36:78:3e:2d:1c:a6:c7:db:fd:47:7f:fd:03:
f7:3f:93:a8:62:f3:7d:08:f4:e2:e4:30:9a:98:79:fe:30:8c:
f3:ee:5a:da:43:cd:64:c0:f0:46:da:96:88:60:41:03:e0:51:
f8:e1:26:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:56 2025 by rpki-client