Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77f01b2a-9de0-3b66-a114-9a9f5f77cde2.roa
File: 77f01b2a-9de0-3b66-a114-9a9f5f77cde2.roa (raw, json)
Hash identifier: HRABGzusCpW1zOo7Wqhpah40HiZ3wnho34FSlmNSxiI=
Subject key identifier: 73:30:E8:02:73:C1:2A:2B:2E:FE:3E:0D:BD:34:0B:05:76:82:98:6B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7E9FA61C559915F705D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77f01b2a-9de0-3b66-a114-9a9f5f77cde2.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 3848
IP address blocks: 216.208.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:e9:fa:61:c5:59:91:5f:70:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=18266153-6984-4797-9dde-6ec71a2cda04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:2a:6f:17:55:1b:25:91:9d:c2:81:ca:84:
a6:85:12:82:7d:52:af:d7:20:48:27:af:5b:6c:91:
e1:f5:b5:8e:1c:9a:24:10:fb:e3:5d:83:bf:ea:28:
6b:07:14:6e:f5:13:32:9d:3e:c6:55:f4:0a:85:44:
e8:72:a6:06:82:e7:74:b7:c5:53:e7:00:38:20:02:
77:26:cb:d9:fd:d0:49:8e:98:94:65:91:78:d7:89:
5a:55:1f:86:af:19:3c:23:a4:5d:39:5e:df:6a:3f:
eb:2a:9f:e6:43:80:65:b0:0e:79:d1:69:d8:bc:b4:
04:ba:a3:31:de:d7:19:10:7e:35:b7:22:56:e3:52:
42:3c:a0:36:53:4f:eb:89:b7:9e:28:9d:f4:42:d6:
4b:72:77:25:6d:03:1f:ef:94:d9:94:b9:16:fa:e2:
cc:db:1e:fb:99:12:a1:ad:6a:15:86:2a:f6:be:77:
c4:45:ed:44:56:dd:95:01:97:aa:67:e4:2a:23:37:
8a:6f:9a:fb:7e:23:ef:a3:7e:bd:b3:e6:15:86:20:
cd:3f:0c:0b:f6:aa:82:ff:88:c6:cf:6f:29:54:4d:
4a:9c:c0:72:ce:f2:d9:ef:dd:ec:ee:cd:7d:c2:a3:
94:fe:a6:3a:2a:df:65:ee:e2:13:79:31:db:68:bc:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:30:E8:02:73:C1:2A:2B:2E:FE:3E:0D:BD:34:0B:05:76:82:98:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77f01b2a-9de0-3b66-a114-9a9f5f77cde2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:98:24:e9:6f:35:90:7e:c3:66:c2:b8:eb:0d:8d:8d:f3:69:
4e:c6:e4:32:b6:92:81:41:db:a0:00:31:2b:40:63:b2:5c:d1:
bc:38:32:69:0d:11:40:5e:4d:5d:d5:c8:96:e6:dc:e9:6d:23:
3e:5f:1e:f4:c6:d1:f5:fa:45:d8:c4:a1:20:6d:3f:b0:53:20:
1a:cb:f2:6c:82:d6:56:5c:d6:5e:fc:56:18:7b:bf:4c:67:b3:
0a:1d:c6:47:2a:38:86:00:38:5c:05:e4:f7:64:e6:3e:5d:92:
cf:43:c6:ff:91:0d:78:41:d3:61:22:21:eb:50:70:45:52:4d:
ad:ff:aa:62:45:e5:b9:fe:90:fa:25:9d:a7:37:bf:08:0a:be:
1f:c7:5b:36:10:cb:1d:15:c1:56:3e:b6:76:10:a9:84:a0:2b:
08:3d:c2:a4:ae:40:e0:28:79:22:b2:40:24:a6:92:86:a3:d8:
cd:9b:f5:1e:6e:16:20:cf:fb:27:d2:f1:f8:59:70:c4:25:bc:
3a:7d:ee:c1:37:a5:ac:1c:18:65:e5:5e:2c:2e:b7:35:5f:f5:
85:56:4e:15:d3:8c:80:d5:cc:2e:6a:56:f5:f2:13:b5:31:4d:
d6:1b:bc:fc:35:72:b9:f7:82:e4:52:7b:13:68:16:d1:8c:89:
5d:7c:d0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:49:30 2025 by rpki-client