Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e3c4b2b-c2d3-3fa5-a984-3f2890d6faa1.roa
File: 7e3c4b2b-c2d3-3fa5-a984-3f2890d6faa1.roa (raw, json)
Hash identifier: H21QrW/hhYBxkIceG0Nt60nh13GNK7RK4Xvmb5EFsLw=
Subject key identifier: EE:CA:0C:7B:8E:35:4F:B1:17:87:CC:43:1F:EE:5B:6B:62:B1:39:7F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B73565A2204AEAC9C71F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e3c4b2b-c2d3-3fa5-a984-3f2890d6faa1.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:35:65:a2:20:4a:ea:c9:c7:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=09f98970-532d-4f1f-bb02-095053800ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:c9:20:b8:a3:d0:80:47:d5:7c:9c:b4:9d:
da:12:b4:55:09:9e:23:78:78:2e:b7:01:4e:31:9f:
21:03:e2:5b:f6:80:6a:5d:6d:ab:31:ad:93:78:1e:
7a:9e:7c:a8:8c:91:40:de:1e:93:58:a9:5b:54:84:
9f:1f:80:7f:24:49:a1:69:9f:1c:c1:b7:0a:c1:a1:
7f:93:af:b8:e8:32:98:ac:fa:f7:dc:34:46:22:99:
77:ee:65:b9:ce:4e:7c:f6:0b:3d:d3:4b:51:43:06:
82:ec:7f:8d:42:28:2c:ad:0b:32:dc:a6:b9:ff:b6:
78:fc:2b:33:cc:dc:c9:db:c2:51:08:3b:18:ee:55:
86:b4:ab:03:84:c4:63:d9:29:1f:94:70:19:54:10:
49:8e:1a:9e:59:9f:19:cf:b9:9a:4b:58:57:ab:3e:
fa:c3:81:89:ce:97:26:68:88:64:ed:51:cc:08:7a:
21:c0:41:85:fd:c6:cc:10:3a:43:ec:51:a1:d4:d0:
96:02:c4:00:db:18:58:9d:fb:ea:df:e8:f8:56:f7:
c1:e5:42:07:35:2b:f5:1d:3c:db:e4:64:a1:3f:6e:
d5:16:ce:ee:ed:43:28:3b:6b:e9:4e:6e:9b:1b:f3:
e9:82:91:76:a7:d2:a7:98:1e:80:5c:c0:d2:7f:71:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CA:0C:7B:8E:35:4F:B1:17:87:CC:43:1F:EE:5B:6B:62:B1:39:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e3c4b2b-c2d3-3fa5-a984-3f2890d6faa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:15:de:6e:dd:c0:64:2d:cf:7c:98:7b:59:dd:dc:90:b6:5e:
70:bc:42:af:d0:63:22:ed:cc:b4:1c:6b:bf:c1:c8:47:60:19:
e6:6a:e1:bd:42:e5:0a:fd:15:6b:41:5b:07:2e:8e:fb:80:a4:
25:bf:c0:72:a0:65:f6:8e:e0:9b:a4:95:aa:b3:60:22:19:1d:
e5:cd:44:df:4e:52:a3:b8:6e:2b:55:74:d6:5f:46:8c:af:fa:
ad:a4:f1:b1:d8:45:cf:ab:17:b2:3f:a9:61:d6:2a:e5:cb:33:
4d:e5:23:cc:78:8d:c7:78:90:37:9d:d2:57:79:b7:49:42:a2:
ae:40:67:8e:99:39:dc:e0:0b:9e:33:bc:74:58:73:c8:e7:69:
9c:be:05:15:d2:8a:ae:b1:a1:7d:56:20:53:c8:52:ff:c9:b8:
d8:8e:a6:5c:d5:72:3e:b7:49:1c:7f:6f:7e:6b:41:38:14:38:
41:c3:39:bc:ba:b1:c5:77:32:95:b5:fb:95:ed:c2:58:87:2d:
29:7b:a4:db:60:32:dc:46:ae:c6:f4:7e:a3:b8:bd:32:a5:bb:
24:c5:d2:12:d9:40:e2:92:fc:45:fd:1d:d4:77:ac:b6:fc:35:
1b:64:e3:95:33:a4:1e:29:7c:c5:3e:0c:8c:b6:9a:3c:15:d3:
97:38:f8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:37:20 2025 by rpki-client