Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88a20b05-7e60-3836-855e-f4d42481c812.roa
File: 88a20b05-7e60-3836-855e-f4d42481c812.roa (raw, json)
Hash identifier: HChClEg2i/gx3lctr63tQzcjxMghZpk0B/ARkdYQg4g=
Subject key identifier: 39:3C:8D:E9:12:8B:DA:4C:F1:57:2B:5A:4C:45:D2:57:FD:FD:5B:C6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931599653436A6BB8F212320
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88a20b05-7e60-3836-855e-f4d42481c812.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 21552
IP address blocks: 207.35.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:99:65:34:36:a6:bb:8f:21:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=768a5559-7441-4266-bf30-53fe06c22cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:f5:6a:ec:7b:e7:a2:2c:1c:ee:fc:5a:dd:
66:0e:1d:90:79:d5:80:21:e2:c2:50:fd:ef:a6:03:
67:31:4b:e3:63:d1:6b:d2:cc:dc:68:3c:a7:af:4c:
b6:a5:4d:bf:6c:cd:89:c9:b2:31:36:93:11:26:1b:
08:65:8b:59:3b:4c:c5:b0:0b:45:f1:b4:25:b6:4c:
99:33:13:b8:af:3e:cc:66:2c:a0:aa:87:43:5a:3e:
a1:19:1d:58:e2:bd:58:ed:d6:d9:e9:42:81:32:79:
c3:a9:27:21:ed:34:a3:20:d3:2c:0c:ae:f3:3d:dc:
43:03:98:1d:a3:ae:3d:e4:8b:37:50:71:57:4d:73:
49:9e:28:c1:fd:cd:e1:6d:df:88:14:cc:cd:22:e7:
19:1c:29:37:b3:1d:aa:12:2c:7f:83:ac:5a:3c:56:
53:b6:92:96:c0:07:bb:b6:cc:37:26:71:93:64:14:
a1:d0:d4:79:93:cd:30:7f:98:5b:8f:a9:dd:46:4e:
09:b8:35:a6:6a:01:61:98:95:6a:00:eb:ce:04:b1:
63:d1:a2:c9:43:3f:f5:b0:aa:29:74:37:3f:d7:30:
37:d4:2c:6b:c9:e2:eb:d3:46:cb:51:05:95:35:e5:
2e:57:dd:dc:ca:d7:46:21:86:ba:bc:29:46:7e:0a:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:8D:E9:12:8B:DA:4C:F1:57:2B:5A:4C:45:D2:57:FD:FD:5B:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88a20b05-7e60-3836-855e-f4d42481c812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:4c:9f:d6:b8:be:1e:cb:a0:7a:96:e6:d1:dd:b1:64:db:33:
da:60:1b:85:47:f9:34:ce:37:a3:21:e0:b6:6d:96:0a:4f:37:
3d:cf:c4:a4:b6:d0:ed:8c:7e:50:04:9e:ef:cb:c8:59:50:f5:
60:6a:d5:34:7f:9a:0d:ba:43:c1:fb:c7:b4:d3:ea:9a:38:e7:
93:63:c3:3f:e6:57:4c:e7:8c:6c:6f:52:64:15:70:33:08:b8:
24:d7:8f:2b:d7:d2:6a:76:6f:a1:fa:e1:41:cf:ad:a6:31:08:
2f:2f:73:f7:be:71:a9:18:1f:9f:77:3d:64:c6:e8:f4:c7:fc:
a3:ce:8e:03:2e:3c:94:b1:fe:87:50:83:99:25:d1:76:e0:19:
84:04:fa:18:96:ff:c7:50:e7:80:bd:a5:1f:42:02:7b:a7:42:
d9:f6:4e:22:23:b7:58:1b:83:2d:c4:35:ec:57:e5:be:3b:69:
88:07:7f:12:98:65:cf:2a:6b:98:f0:a9:af:51:9f:a3:41:6d:
45:0c:db:1f:e2:a7:5d:f0:65:d7:7b:d6:bf:e7:c1:4d:b0:85:
7d:7e:61:f0:0b:8a:8b:30:85:40:f9:08:31:79:f2:80:be:fd:
27:51:3d:42:00:35:ee:60:47:d4:3b:42:24:f2:7b:a1:1e:41:
c9:f3:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:35 2025 by rpki-client