Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7ddf2119-861e-3eb4-a65d-33f4a288074f.roa
File: 7ddf2119-861e-3eb4-a65d-33f4a288074f.roa (raw, json)
Hash identifier: wM38NBqQOOuQRuOnNSNkEI8lis4oO8/BRhOypQgso4s=
Subject key identifier: B6:8C:44:F4:A2:75:E4:25:98:BA:C1:5D:33:11:B5:29:25:2D:D0:34
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B2CED75EA45823E421000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7ddf2119-861e-3eb4-a65d-33f4a288074f.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 3848
IP address blocks: 209.139.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:2c:ed:75:ea:45:82:3e:42:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=5b4631c8-64f4-4583-bcae-025557c0752b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:a4:85:63:2e:ce:35:c3:28:21:e9:8b:62:
ef:2f:b4:38:90:3e:ad:c3:df:5e:d5:d1:e4:b9:30:
93:c8:ae:3c:0f:a7:07:e7:af:e5:19:bc:2f:59:3f:
e5:63:64:05:11:de:b9:cf:50:47:6a:03:78:71:64:
87:ab:1c:a3:d7:20:24:ed:32:61:04:2d:d7:c2:2f:
c8:b0:e0:35:55:36:34:4e:96:2e:87:3d:ad:cc:c9:
e5:1a:60:e0:79:f0:d0:68:51:df:1f:0a:e4:f3:19:
67:fa:ca:75:3e:e4:66:fe:f0:cc:bf:4f:ff:50:89:
ba:37:ad:c7:d0:05:92:5a:52:02:87:69:ad:28:e4:
1d:af:7c:da:36:61:62:75:a2:0b:6d:4d:4f:f5:37:
03:4d:6c:13:ac:6b:5c:72:35:56:2f:39:40:6a:c7:
bf:00:38:62:6b:3f:88:25:94:9e:24:e2:34:95:bd:
07:ac:8b:61:08:5f:69:51:0c:f6:ac:df:3c:40:a5:
3e:3c:b7:b8:38:a2:c3:f1:ac:9e:93:55:f9:d7:59:
85:7b:9b:4d:80:45:f6:54:7a:8c:fb:1f:82:3e:65:
bc:dc:f4:01:dd:24:12:bf:bf:48:bd:10:c7:39:a9:
aa:4e:fe:0b:5f:41:2b:5d:14:7a:a5:5f:5f:dd:62:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:44:F4:A2:75:E4:25:98:BA:C1:5D:33:11:B5:29:25:2D:D0:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7ddf2119-861e-3eb4-a65d-33f4a288074f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.139.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:eb:92:e4:0f:09:f8:fa:0d:85:93:b4:0a:d3:1b:b5:66:60:
06:5a:3b:36:65:ef:1f:5d:44:99:8c:ec:94:e0:02:45:d0:0c:
22:e5:9e:a2:7b:3e:5e:58:34:0a:87:a9:ef:cc:48:cc:79:0e:
3d:95:28:15:7f:81:c5:f8:b5:23:2a:af:4d:5a:f5:1e:e4:dc:
0c:34:1a:d4:e8:eb:f6:da:29:ab:9f:b0:ae:20:42:25:5a:3e:
b0:e4:f7:29:d0:40:6a:6f:8e:53:03:db:95:16:3c:ee:88:2e:
20:d0:e3:b3:04:86:b6:47:21:36:64:5d:e1:1b:a9:e3:80:4a:
e5:4c:59:07:90:83:71:c7:83:d8:41:f3:23:02:6b:90:fb:8a:
93:25:64:44:5c:d8:b6:b1:45:a5:0c:a1:72:f5:73:32:d1:77:
fb:0c:ab:dd:af:fe:d2:e1:21:2d:38:c8:2e:4c:27:7f:bb:17:
98:09:d1:51:bc:b3:04:7e:94:ab:70:14:6a:fd:99:cb:f0:78:
13:54:b9:86:69:6a:7d:ff:65:ad:8e:e9:2d:88:0f:7d:1b:94:
19:f2:51:b4:16:ad:a2:61:16:3b:83:76:93:31:85:2a:c2:6e:
94:5c:86:9c:b2:e7:b7:d4:bd:10:cf:08:ee:b3:f1:12:ea:ef:
cc:42:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:33 2025 by rpki-client