Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e3321d6-9330-3fed-88b0-279a2d406c5c.roa
File: 6e3321d6-9330-3fed-88b0-279a2d406c5c.roa (raw, json)
Hash identifier: +jZmjIySoEJXCEZqetvZDzOWpQhGfG2z8YCOQ7OxvqE=
Subject key identifier: 54:BF:AF:22:E6:66:6F:E7:1F:FA:DF:B1:3D:5F:B2:DD:56:48:64:C9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7832C6E0F97B53CBD32A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e3321d6-9330-3fed-88b0-279a2d406c5c.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 40575
IP address blocks: 209.128.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:83:2c:6e:0f:97:b5:3c:bd:32:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=d92cb40c-fce3-4547-902d-8840d8b98639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bb:72:88:c0:f0:55:78:29:03:9a:2e:60:76:
6c:ed:00:0e:ad:d9:d0:bd:f4:1f:d9:f6:b1:f3:52:
d4:75:b9:d1:c0:71:37:42:9e:d7:30:b4:46:60:91:
7b:c9:ca:f1:5b:34:d1:02:87:55:92:09:62:dc:b0:
31:44:f0:4b:25:94:4a:24:68:80:6e:04:77:1b:7c:
df:39:d7:75:5b:bb:f3:82:9e:07:bc:99:ec:86:79:
47:08:47:ed:b6:c3:2b:4c:57:6c:a0:46:cc:58:2c:
a1:36:05:34:c5:d6:23:86:0e:f6:75:01:0b:b6:84:
6b:47:48:90:1d:76:24:7f:8c:d4:75:39:12:e8:50:
ac:07:f2:0c:35:83:7f:ab:90:4a:d7:ce:01:d3:60:
e7:20:32:c6:ea:52:e8:86:f1:63:14:17:85:6c:52:
0b:bf:ac:94:81:a4:a5:68:8d:11:9b:ac:4c:89:2e:
ea:e1:45:51:75:f0:2e:27:2e:72:fd:02:e4:1f:9a:
86:53:6f:e3:0a:d0:3e:5d:b1:e7:4c:20:6c:e5:27:
6f:59:90:3f:af:d9:6a:7f:d7:84:31:2c:62:ff:e6:
53:b6:1d:4f:c4:28:9e:17:cb:ea:63:d6:06:4a:23:
93:69:0c:f2:58:9a:c1:2c:e7:42:4c:1e:e8:e2:6b:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BF:AF:22:E6:66:6F:E7:1F:FA:DF:B1:3D:5F:B2:DD:56:48:64:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e3321d6-9330-3fed-88b0-279a2d406c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:75:ad:dc:00:8e:5c:6c:98:0f:22:9b:59:fe:d7:c8:4d:a8:
a2:d9:89:b2:3c:2e:1c:88:cf:8a:81:c3:6e:2a:38:95:a4:4e:
ca:18:c7:37:f1:1a:7e:b6:45:d0:04:ee:9b:46:69:25:bf:1d:
a6:40:95:82:3a:f5:81:26:12:f7:0d:91:69:64:25:69:b2:4e:
ab:00:bf:96:7e:c4:69:ca:39:18:17:03:3f:39:d7:e1:f8:29:
82:75:1e:38:10:ef:9d:aa:f4:96:5f:3c:67:2e:98:97:7f:6d:
af:a5:c0:f7:f3:29:75:63:49:b3:e3:f9:06:f1:b8:1f:fc:80:
d9:b8:6f:ab:8c:d5:9d:42:85:44:d7:1a:ca:4c:b8:78:4e:b0:
6d:0a:02:a2:8c:ed:d7:b6:a0:93:47:9d:4a:ea:15:cc:76:57:
74:cd:3e:55:b0:41:a5:d6:25:55:bd:ef:bb:b6:f3:20:af:b0:
77:50:5e:1b:ba:04:d1:3b:ee:6b:4f:f0:46:84:a7:b7:64:a3:
eb:51:92:b6:06:48:02:6d:3b:88:35:fd:e7:8d:f7:59:4d:ed:
3e:45:a8:b8:b1:0b:cb:75:6c:04:fc:94:18:74:56:ed:13:ef:
72:4d:db:81:90:db:52:12:fd:41:68:6e:ad:2d:9d:b7:3c:91:
e3:dc:f5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:09 2025 by rpki-client