Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7985af1e-04de-3aeb-a0d0-b46b4435ac2e.roa
File: 7985af1e-04de-3aeb-a0d0-b46b4435ac2e.roa (raw, json)
Hash identifier: L+7duL1H2jGF1FMQGDa/fnqeCzPvfux0K/tjnuthteA=
Subject key identifier: 25:7A:5A:21:DD:6B:24:74:63:F5:F1:B7:57:48:9C:A1:C9:C8:A0:89
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315B5A7916FA1CC69125600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7985af1e-04de-3aeb-a0d0-b46b4435ac2e.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 33017
IP address blocks: 207.61.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:b5:a7:91:6f:a1:cc:69:12:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=7c0448b3-47dc-45c9-8562-dce82b79c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:dd:e0:a9:b9:16:8b:8d:b7:9c:20:af:8f:
26:ce:a9:bc:3a:84:ee:e5:f5:24:1f:09:a3:e6:cb:
d3:8b:50:91:2d:ba:20:8e:c0:6f:00:3c:7b:59:7a:
ee:79:33:d3:fe:bc:ca:bf:d4:74:a6:10:7f:6f:b8:
9b:91:52:89:98:54:23:74:3a:6f:1e:c8:10:a7:3e:
4b:54:8f:6a:78:dd:b1:70:eb:fc:57:14:73:35:19:
c2:3d:bc:ab:f5:f6:9a:44:f4:5e:4d:ea:e6:91:2d:
5d:e4:8b:8b:41:80:7c:e8:3c:ce:a3:d6:10:55:39:
ec:0d:42:1c:80:e0:cb:c3:52:db:62:02:15:a0:90:
19:b2:65:8c:01:62:6c:8b:9e:c2:a6:99:48:d5:72:
80:c9:87:5f:c0:57:33:f8:32:05:76:c8:76:2a:50:
d5:e9:dd:a3:3e:8a:58:8d:b3:72:9e:c7:3a:09:f5:
9c:0c:bb:0f:f7:8c:c5:ee:27:ce:ca:35:fd:c6:92:
9e:21:5c:5e:2a:4d:5b:a9:ff:60:1d:ac:bf:fb:0d:
dd:61:24:9d:eb:b1:87:67:0e:e5:cb:61:e5:39:07:
39:90:56:20:8a:55:9c:e1:53:56:3f:71:ac:cf:ff:
25:9b:09:bf:0b:e9:27:26:6c:a4:9f:6e:84:be:d9:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:5A:21:DD:6B:24:74:63:F5:F1:B7:57:48:9C:A1:C9:C8:A0:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7985af1e-04de-3aeb-a0d0-b46b4435ac2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:c9:42:45:48:4c:fb:a4:77:20:7b:ba:4c:05:0b:c0:78:c9:
6d:04:41:ee:64:27:d2:79:3b:b0:11:2c:d8:0d:56:fe:55:17:
9c:22:cd:88:f8:02:30:94:d7:f3:7d:56:01:80:ce:f3:09:fd:
cd:00:4f:1f:9d:60:2d:2d:40:e9:25:8d:d4:b9:42:a8:5d:52:
9a:d2:15:f3:d1:a8:7e:9b:b0:56:28:c9:d8:17:f6:34:52:1d:
a5:28:1e:01:7d:2c:8c:c8:92:d0:69:3f:2b:75:53:d2:6e:09:
95:72:7a:96:84:f3:47:55:e0:d6:f4:60:72:77:77:2e:fe:8e:
a6:0e:c8:0a:fa:96:f0:7f:b3:b4:03:9b:bc:22:12:80:34:4b:
09:a4:d3:d0:0c:50:00:66:0e:d6:53:8a:2c:e1:f2:1b:bf:21:
35:ca:6a:e4:76:3e:44:3c:88:73:06:d8:6e:1d:74:37:a0:5d:
7c:54:9f:a3:d3:02:f6:38:14:8e:40:c3:b9:32:54:b2:ca:6b:
7a:ca:95:7e:b4:14:22:b8:4b:1a:84:c8:28:ea:5d:ca:06:43:
1b:be:d2:38:3a:29:1c:ed:23:ef:10:dd:f7:6d:6a:30:8c:b5:
f8:a1:a3:cf:0b:37:68:2c:a1:c9:8f:7c:9e:e0:28:3c:aa:85:
9f:07:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:39 2025 by rpki-client