Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8a6133b3-4066-3c70-95b5-cc2c14d031e6.roa
File: 8a6133b3-4066-3c70-95b5-cc2c14d031e6.roa (raw, json)
Hash identifier: 6ViBjmpz5j1qU+NI3LOSBTYmF5Td75i7R0dYIAJ3MX8=
Subject key identifier: FC:9E:FC:04:4C:C8:8A:EB:0B:34:D8:26:A9:13:99:C1:B0:CF:FD:F2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315D7386BE99377AC557D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8a6133b3-4066-3c70-95b5-cc2c14d031e6.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:d7:38:6b:e9:93:77:ac:55:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=aaa0c2e0-72ba-48b7-96ce-fedb1783a4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:ad:a0:04:5f:01:d6:52:37:48:46:d6:7c:
2d:19:8b:25:df:df:a3:96:c4:8a:2d:3c:7f:a1:10:
bb:da:40:4c:a5:60:3e:da:47:38:fb:93:75:de:ed:
d1:64:76:9e:53:2a:d6:40:f6:9b:4f:66:f0:ec:82:
1e:aa:ad:dc:1d:6b:c3:73:b4:60:73:96:f7:75:8f:
2c:7a:0a:b9:b5:30:c1:e1:6e:3b:a8:f4:0b:f5:d8:
56:9e:da:b9:55:ab:89:7d:f6:f7:31:7a:55:45:d8:
f4:1f:05:a6:f8:00:d8:ec:cf:c3:23:c6:a9:59:2f:
f6:0d:f8:19:d6:6d:be:f3:74:1a:33:d0:a0:36:4a:
ce:f9:23:c4:a4:7b:c4:00:55:dd:33:b3:5e:3c:d2:
05:7a:cd:32:22:41:33:47:08:b4:2f:da:89:f4:da:
04:8d:b6:b4:c0:5e:61:cb:3f:ab:ea:76:81:da:23:
8f:92:43:09:ed:52:1c:4a:a1:b1:a4:2b:67:d9:e9:
bc:18:62:3c:5a:74:7b:ce:69:a7:c5:0c:f0:31:8c:
eb:10:4c:f9:ba:7c:9d:5b:0e:ab:43:ab:b2:90:a0:
67:90:40:be:46:7c:f3:b7:4d:f2:65:f1:58:a8:cb:
ed:61:a7:27:55:cd:09:02:c5:3e:2f:9d:2d:c0:9c:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:FC:04:4C:C8:8A:EB:0B:34:D8:26:A9:13:99:C1:B0:CF:FD:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8a6133b3-4066-3c70-95b5-cc2c14d031e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:cf:2d:ab:9c:05:97:b3:04:3f:1e:e8:e8:57:37:bd:95:3a:
20:c5:e8:a7:51:7e:da:0b:1c:b4:9c:ad:ba:50:26:10:54:71:
e0:bf:91:65:da:ce:86:36:e7:66:f0:38:ae:c7:a3:1e:c0:77:
0c:9b:4e:d8:e1:3a:3c:84:eb:98:ba:7e:c5:21:6b:1b:44:26:
fb:1d:4e:33:ed:8b:95:92:38:a2:c3:b7:b4:2a:7e:2e:2a:0a:
7d:a3:14:6a:24:3d:c4:6c:d0:dd:b2:d2:03:21:d6:34:8a:2e:
7b:1d:92:e7:36:88:cb:43:d7:02:50:92:49:68:7c:78:35:77:
08:33:0f:78:75:11:41:06:60:df:51:a1:07:33:bc:4f:a0:00:
46:01:7b:7c:1f:ea:c8:ab:9f:94:78:3a:b4:94:29:cf:d6:85:
62:d4:25:c0:6c:5c:0c:e6:4a:48:e9:cc:f7:99:23:81:84:d0:
ae:a5:fb:a7:a0:2f:1a:e0:53:9e:92:46:67:5c:97:ee:35:b2:
b9:a6:7f:ae:d6:96:4b:ea:8b:a6:21:2d:07:66:f9:3e:59:38:
18:6d:57:2f:3b:e8:d9:db:76:66:7f:e5:58:ef:69:95:16:37:
98:65:17:07:c2:86:cf:03:ea:18:38:d9:f9:64:d9:fe:37:3f:
72:f5:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:03:02 2025 by rpki-client