Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e6e1572-966e-3dcf-b6f2-129727506950.roa
File: 7e6e1572-966e-3dcf-b6f2-129727506950.roa (raw, json)
Hash identifier: cpGZgibL4UtZGPK2rC4T2gnJWqzsqOk3MwzCKt9Ns9o=
Subject key identifier: A8:0B:42:B6:F5:8D:41:58:58:2F:02:74:35:C9:FD:60:9C:81:7B:9E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6832E671F0AA956F97E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e6e1572-966e-3dcf-b6f2-129727506950.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 206.47.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:83:2e:67:1f:0a:a9:56:f9:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=3860de63-bdb0-42a2-8b18-54dd7a834fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:d5:67:52:0f:df:6e:51:26:55:c6:d0:42:
d7:86:dc:0b:3b:50:39:4a:31:ef:9c:b5:c9:10:25:
23:7f:dc:84:1e:22:bc:97:f5:28:cd:dc:92:82:87:
59:1b:a4:bf:d8:4e:bf:94:59:77:e9:6c:e7:88:f4:
22:50:ca:77:39:ff:de:af:96:10:0d:d4:fb:a2:6d:
cf:dd:ee:0b:5a:c4:51:e5:e9:93:69:a3:77:6d:2d:
98:ab:5e:a8:3a:95:99:93:1c:67:0a:0a:57:dc:6e:
25:4d:ee:40:40:9c:f7:9a:1f:81:08:f7:41:f6:49:
c4:fa:eb:09:ac:79:63:f6:e4:58:00:8d:67:56:b5:
71:2a:7e:b8:0f:dd:80:41:07:7b:22:15:0a:f9:96:
8e:5b:af:89:84:b8:ef:69:cb:25:cf:13:24:f9:6a:
e8:df:05:c1:0e:cd:6c:5e:f2:75:74:f0:35:54:31:
a4:74:2e:a6:5c:77:e3:54:42:75:00:61:16:6d:f2:
ab:70:ea:b8:53:dc:9d:ee:ce:a9:7a:ae:d3:1e:f1:
7b:51:aa:3a:04:e0:c2:3f:2c:27:4a:c2:84:1c:b0:
b4:8d:71:dd:35:57:74:c2:24:41:34:2c:f4:f2:48:
ba:c7:ee:47:65:b9:80:44:a1:62:f8:5e:f3:51:9b:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0B:42:B6:F5:8D:41:58:58:2F:02:74:35:C9:FD:60:9C:81:7B:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e6e1572-966e-3dcf-b6f2-129727506950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:d6:79:88:7b:00:f6:87:55:a4:b9:ca:d8:a8:73:fc:d6:6d:
b9:e1:06:2b:1a:58:c1:82:92:42:4f:f4:3e:bc:ad:ca:55:7f:
82:4d:f9:41:98:6f:94:5a:f4:9d:75:93:0f:a0:f8:95:12:4b:
5c:4a:cd:bb:77:8c:b5:05:d7:e3:b3:1b:63:be:f6:94:12:97:
77:34:67:73:dc:1b:39:5f:ea:ac:9c:6d:03:7a:61:18:67:20:
bc:3f:ad:00:e0:ca:3c:13:9a:8f:80:34:46:03:70:36:06:d0:
1f:fc:76:5f:2a:39:62:8a:b7:b9:e9:e4:e3:1d:dd:94:99:ed:
a7:81:d4:ac:08:18:3b:c7:52:fa:74:b4:80:2c:07:3c:e0:a5:
74:d7:60:24:d5:5b:5e:46:49:c0:79:82:51:af:e6:da:2c:31:
d9:b2:87:b3:98:d7:88:a1:f2:8d:d5:90:7a:37:ff:d1:da:13:
e1:f5:4c:5f:d4:21:b5:bd:c7:59:da:f7:af:fd:1f:c6:26:49:
42:8b:90:08:23:04:e6:90:32:f1:4d:31:6b:a4:11:7d:39:0d:
6d:d0:17:1f:5e:0b:43:36:d3:f2:20:54:74:96:64:cb:89:f9:
63:75:13:79:70:cd:8a:bb:a4:5e:2f:6a:ba:eb:fe:e6:f1:0d:
17:b4:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:55 2025 by rpki-client