Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/89e3e3f7-a75a-3b62-86b8-246262a3ca34.roa
File: 89e3e3f7-a75a-3b62-86b8-246262a3ca34.roa (raw, json)
Hash identifier: JwolGrSEvgoPA3rDo8vvc07FczLXNXzc2pnMHqwSaME=
Subject key identifier: 17:49:44:96:39:2E:49:59:00:45:9D:5B:9A:05:1B:A3:A8:FB:09:71
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29B0078C0A3816D0A10760
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/89e3e3f7-a75a-3b62-86b8-246262a3ca34.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 204.101.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:b0:07:8c:0a:38:16:d0:a1:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=1c14b73b-ee65-4922-bcf9-7923b63eab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:b4:5c:98:26:3c:bb:4e:46:15:ec:e9:26:
18:ec:b2:47:9c:a7:fe:dd:35:1f:ba:1e:e1:a1:9b:
9c:c0:64:d8:86:34:aa:20:63:18:63:23:20:25:af:
0e:bb:5e:89:1b:76:e6:ee:00:6d:7d:0d:fe:da:2e:
d4:0f:07:3e:88:ad:42:ba:d4:7d:52:b9:5d:b7:02:
77:37:45:26:f7:19:a0:5c:df:25:fe:2e:e4:cc:d5:
c5:2f:5c:59:2d:e7:93:9d:ea:d8:01:56:fa:39:25:
77:14:f5:ce:08:5c:63:d0:51:56:21:5d:48:a6:6d:
17:6f:27:9e:e7:59:d3:8c:06:ba:32:0a:85:b5:5d:
8c:98:c1:bb:f3:9f:1c:66:1f:59:d7:58:cc:a3:fb:
94:e5:06:e6:64:e8:af:b8:db:df:bc:3f:9b:25:33:
bc:07:5d:5a:63:65:3f:7d:e8:6b:f7:ce:ac:03:a0:
ec:57:f9:10:c2:e3:b8:c1:78:1e:e5:b1:c8:19:41:
79:26:4a:6a:91:e5:28:29:0c:fd:ec:85:c0:1a:dc:
e4:83:e3:4d:eb:f8:f4:a0:84:c0:5e:7c:d7:95:c6:
4c:ea:91:03:23:9f:ed:88:ad:2e:84:d0:e1:aa:b3:
a7:b8:c8:5c:dd:6f:0a:5e:c3:8a:9d:2b:64:fd:84:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:44:96:39:2E:49:59:00:45:9D:5B:9A:05:1B:A3:A8:FB:09:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/89e3e3f7-a75a-3b62-86b8-246262a3ca34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:43:3b:1c:77:0b:aa:c6:5e:4b:2b:99:39:9c:73:dd:e4:29:
9e:6a:41:4e:27:b2:88:b2:b6:a9:64:71:38:b8:ec:eb:b2:a6:
2e:f3:03:6a:72:75:7f:20:ae:47:66:eb:5e:42:9d:aa:2f:69:
73:45:b2:05:73:04:24:39:47:4a:f1:2d:9b:6f:01:18:38:58:
0b:e6:97:e0:ab:3c:4a:bb:f0:69:7c:4f:90:2b:42:1f:33:00:
f6:b6:67:d7:6b:c0:c8:ac:52:99:cb:fe:3f:2f:96:bc:ec:3d:
02:05:2f:c5:13:21:40:e2:68:17:4a:c5:52:87:bb:5a:87:e4:
90:f1:5d:58:fc:1f:8f:0b:f8:c6:89:53:da:d0:b7:bc:6c:dc:
c2:ce:44:d7:f2:74:01:97:d9:f1:5d:da:ad:e3:3a:3b:26:79:
11:8b:08:fe:43:1c:6d:5f:45:db:6e:7f:c9:10:b5:19:a8:d8:
be:95:48:c7:26:c2:62:33:64:83:4c:93:a4:72:24:35:66:80:
c6:1b:d6:ae:92:83:c8:36:97:b6:bf:ca:e7:ec:2c:ca:34:fa:
2d:04:1a:9b:1c:a6:64:87:e3:68:6d:68:1b:84:8f:dc:b0:63:
6a:21:7c:57:10:c1:14:fb:d5:3d:3a:06:51:40:1a:2e:05:3e:
1b:ca:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:43 2025 by rpki-client