Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/763e4643-eab0-3e81-9d85-1093f9a896ac.roa
File: 763e4643-eab0-3e81-9d85-1093f9a896ac.roa (raw, json)
Hash identifier: airEs5FcsdZGUMUedIQ4hT4JOJyHKqbFzOIxYQzs89k=
Subject key identifier: 08:19:09:21:CE:60:71:79:1C:5B:E4:8F:43:49:B7:AB:DE:DA:84:23
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29F1BCEFC976D6B09F8F68
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/763e4643-eab0-3e81-9d85-1093f9a896ac.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 32678
IP address blocks: 204.101.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:f1:bc:ef:c9:76:d6:b0:9f:8f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=fc41eb5c-d7fa-406c-b52f-70267f87e2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:09:03:48:b3:2b:62:3b:c0:58:69:b6:7b:
c8:44:3d:7c:f9:4d:37:7f:2b:33:dc:7e:27:8b:0a:
10:6f:2a:48:d3:75:a1:33:1d:2a:b0:67:9f:d8:b5:
b2:23:ef:46:0b:3a:c3:7c:32:a8:88:8d:b6:1f:77:
22:fa:af:91:81:96:61:3f:fa:92:86:5f:bf:d4:70:
8a:74:dd:1d:1c:5a:75:4c:e5:af:d5:2d:f3:ac:a8:
84:46:90:59:bd:ec:f3:44:6b:a5:6b:df:59:c0:95:
56:52:aa:b0:69:18:08:a7:97:96:21:50:e9:0e:bb:
5f:63:ca:86:5b:2d:4b:60:d1:73:d0:c0:24:a5:3f:
0e:dd:7c:48:24:44:a1:ae:3d:79:fd:9d:57:72:90:
90:72:ab:55:45:5c:83:df:b3:4f:07:e5:5d:75:fd:
16:70:4d:9d:42:16:75:03:1d:b4:86:c7:94:da:8f:
ba:e9:23:e9:19:65:bc:5f:f4:3c:38:61:1e:ca:f1:
85:79:2c:f8:01:77:25:f3:a7:f2:23:8e:4c:dd:a5:
be:8e:44:12:97:b4:92:bb:06:19:a3:53:92:98:74:
96:b3:9a:3c:a7:7a:e5:a4:df:83:f6:dd:df:fc:f2:
92:80:9e:6d:33:e8:39:0c:84:da:1f:06:c3:e6:de:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:19:09:21:CE:60:71:79:1C:5B:E4:8F:43:49:B7:AB:DE:DA:84:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/763e4643-eab0-3e81-9d85-1093f9a896ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:51:f9:50:97:d0:c1:50:f3:aa:a4:7e:84:81:cb:b8:65:1d:
30:ad:b1:b8:59:4a:cf:ca:27:1e:83:c6:54:dd:40:89:da:9a:
54:6f:62:4d:6f:d7:0c:b0:46:76:06:18:de:ef:19:87:40:55:
64:24:10:a9:5c:5d:aa:66:14:59:e0:f2:3f:7c:a9:22:7f:18:
58:20:57:c0:39:5e:7e:74:a3:d1:fa:90:11:aa:6f:53:e9:13:
7b:d1:71:86:36:3a:32:71:43:bf:97:81:e2:02:bf:da:2f:ff:
1d:67:d6:9a:f8:d0:f9:a7:b8:d9:03:53:1a:b8:a3:94:4e:58:
02:7e:91:95:40:2d:99:2d:af:45:69:dd:c2:73:9d:da:85:15:
91:9d:c2:39:93:c5:50:19:4e:df:88:18:97:ef:69:89:22:43:
01:2a:0a:4d:05:71:2f:70:89:bf:55:dd:8f:a5:3f:94:c5:5d:
02:f7:01:89:34:d3:34:43:2f:96:bb:0e:7b:bb:14:52:02:11:
21:dc:d7:94:28:9b:27:79:4e:56:fa:d4:ac:d6:3c:5d:90:53:
7a:20:bb:49:fe:a3:1e:a0:15:3d:56:36:32:c3:c1:63:11:c4:
f4:64:2a:76:15:1c:bc:9d:b9:fd:b2:e6:7b:40:96:92:19:e7:
8f:1f:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:49:11 2025 by rpki-client