Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65e296a1-e0d1-3bce-a464-9326be32883f.roa
File: 65e296a1-e0d1-3bce-a464-9326be32883f.roa (raw, json)
Hash identifier: mMpMUCSdh9qwwlIBrkaXpAPm3b5CKqzpdRA0IyqMI5Q=
Subject key identifier: 34:BF:AE:AE:E7:B5:1E:DC:2F:72:2E:60:2F:8D:6F:2C:F9:87:C3:B4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B66CF7306EE3C0E5229EE0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65e296a1-e0d1-3bce-a464-9326be32883f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 30028
IP address blocks: 205.200.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:6c:f7:30:6e:e3:c0:e5:22:9e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=fda3d301-f9f7-4cae-9632-d9effa0dccea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9e:a3:6f:56:56:1f:fc:cc:2b:78:42:46:bf:
bc:1b:8a:4b:64:82:83:bd:6a:ee:c0:6f:15:ea:d3:
77:7d:39:95:a5:60:6a:b3:2f:e4:fb:78:2f:d1:38:
d1:e7:6f:bc:d2:71:2a:d3:82:b5:94:7b:7a:30:e8:
a1:37:4b:be:90:6b:d6:07:09:d8:f2:c5:cb:0d:ef:
bc:9e:08:cb:47:d9:3a:62:39:a3:a5:b4:ab:37:05:
86:31:24:54:01:64:f0:75:81:5a:b0:76:e2:00:c1:
5b:ec:df:b1:6c:81:57:00:8e:ae:fb:27:49:08:8c:
b2:9c:9e:b4:58:09:2b:71:75:aa:c4:96:2b:76:4a:
86:11:d2:34:f8:3b:c7:b0:f8:d5:b0:51:0a:4f:a7:
54:b8:cd:c2:f4:88:c5:99:02:77:a6:f4:95:ab:dd:
ed:cf:4a:2e:64:c7:55:6f:27:06:82:01:47:e7:b2:
ca:f7:38:8d:07:52:c8:d9:3a:0b:d0:27:14:0e:0f:
51:a8:c7:35:9f:66:55:87:6f:82:3e:a7:27:eb:c0:
8f:c2:da:17:83:ef:50:3f:b7:26:85:1a:95:92:73:
e9:5f:af:cb:e3:d9:e5:86:29:b8:b7:94:74:fb:3d:
55:64:76:e2:b8:06:dd:78:36:7b:ba:de:3b:bb:74:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:AE:AE:E7:B5:1E:DC:2F:72:2E:60:2F:8D:6F:2C:F9:87:C3:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65e296a1-e0d1-3bce-a464-9326be32883f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
205.200.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e7:72:7a:3f:34:44:26:94:33:1d:7e:cc:08:b4:ad:71:6a:
b9:58:1b:71:5a:52:40:f4:fe:d1:f8:65:07:0a:7e:46:2e:42:
48:57:cc:0d:97:7a:19:d4:58:e5:0e:ce:18:97:0d:d9:d5:a3:
7f:13:19:f3:16:3f:4e:52:88:af:06:7c:8e:91:63:9d:d2:04:
1a:0c:54:6c:9d:eb:28:b2:57:a4:ee:ae:40:45:99:cb:f5:59:
32:04:be:2e:fa:de:f9:c9:b0:c5:d9:95:1b:95:46:55:00:a6:
73:c1:71:aa:96:43:3d:8a:6c:ab:be:93:80:4d:62:78:56:a7:
1c:ca:83:1b:7d:bb:ed:2b:22:6f:85:ae:72:65:3a:a7:29:53:
d1:bc:60:ea:11:92:b3:46:de:5c:b2:6c:01:86:80:83:3c:d8:
a8:43:5a:b2:08:cb:48:bb:24:dc:b7:89:7a:74:d2:41:fd:53:
cb:cd:33:3c:3d:cd:9c:1c:95:02:23:4b:c0:c7:8d:08:88:16:
e9:92:a9:11:78:c4:b8:f5:99:90:2a:ad:2a:ab:18:71:26:a4:
69:65:7e:c1:ca:05:94:b1:ed:23:ab:5d:cd:df:46:3d:f3:7e:
3e:a2:6c:98:5c:b3:ff:a4:21:0a:8c:44:cc:31:2b:68:95:5b:
5a:6d:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:43 2025 by rpki-client