Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d01637c-8ae4-3cb5-adb3-e5bf89152a25.roa
File: 8d01637c-8ae4-3cb5-adb3-e5bf89152a25.roa (raw, json)
Hash identifier: BAN+w6ly3muaxBUZW2A+d7vA1Cb1m7XQJwOu2tg4860=
Subject key identifier: BF:92:E2:39:B9:2A:63:F0:41:49:7D:4D:D5:15:31:D3:25:EC:4F:E0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B78BDB9A84A12FC12C7A40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d01637c-8ae4-3cb5-adb3-e5bf89152a25.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 62846
IP address blocks: 209.202.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:8b:db:9a:84:a1:2f:c1:2c:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=7f1102be-5e2e-471c-bebd-dcda7971bbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:d5:91:dd:dd:3b:63:f3:23:d9:7a:07:42:
3f:b5:70:86:10:7c:4d:a5:43:56:bb:6d:cc:fb:ef:
b3:e7:c4:ea:f9:4a:2c:99:59:d1:19:43:11:40:84:
bb:c4:d0:57:f4:e9:6b:82:cf:8d:03:f5:eb:77:ab:
92:7e:e7:c6:57:cb:b3:cd:62:0f:59:fb:a3:7f:49:
e9:07:c9:0a:65:23:ef:b7:54:19:98:97:5b:0d:95:
e9:f7:e9:cf:02:99:98:05:50:49:b7:35:f9:1f:96:
93:14:a9:74:11:ba:fb:4f:92:11:c8:17:b7:72:8f:
6f:77:c7:da:1c:9e:1c:5f:da:48:1b:8b:50:30:8a:
23:a9:8f:3b:7d:77:17:75:2b:50:6a:db:b2:26:9c:
a9:9a:c3:07:0f:90:16:a5:dd:35:cb:25:4e:a5:a1:
7a:13:b6:82:90:e3:7e:2b:be:17:7a:4a:dc:de:4f:
db:70:9a:87:58:9a:89:4a:92:ef:46:08:69:ee:cb:
12:35:64:41:10:80:7f:68:20:88:a5:44:4f:68:25:
ad:8d:a5:98:54:7d:6a:28:6d:25:88:53:3e:b1:13:
27:a5:79:39:19:0e:e5:15:aa:a3:bc:aa:f0:18:7a:
4a:a6:d2:92:09:cd:44:a0:90:c4:05:8d:73:7b:18:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:E2:39:B9:2A:63:F0:41:49:7D:4D:D5:15:31:D3:25:EC:4F:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d01637c-8ae4-3cb5-adb3-e5bf89152a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.202.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:6d:5b:47:4b:26:3f:ed:ed:f4:f5:2c:25:1f:ec:a9:d4:c1:
c3:54:53:1f:69:ce:59:27:af:ab:05:0e:a9:50:06:26:04:21:
77:0a:98:e3:33:72:7c:24:47:b3:54:8a:2b:38:45:25:21:47:
7a:86:69:37:7d:1c:16:77:57:9e:c6:f8:a2:bc:fd:61:ac:2b:
f6:1f:84:be:d1:4b:6e:69:76:b6:17:f1:d7:69:da:10:05:9d:
29:7c:14:13:4e:ec:6c:2a:08:d0:c6:58:63:cb:64:a7:90:56:
c4:05:c7:00:99:79:6b:58:d9:88:3d:b9:3f:96:80:a7:4c:0a:
a3:ed:01:71:b9:bd:ed:14:e4:b6:2a:0d:73:bb:4e:cf:32:b1:
12:d3:f2:ec:36:af:27:d8:bf:50:ec:6f:89:0c:05:f1:c8:d1:
ea:0e:b3:21:61:c2:89:cd:65:65:00:c2:60:ad:28:42:c5:25:
a1:5b:c7:e4:0e:79:49:f5:95:c7:f7:e4:fa:de:82:ea:04:13:
19:c8:4d:01:e9:22:24:1a:f4:31:46:94:7e:b6:4e:00:85:db:
8d:2a:d5:51:2d:62:b4:c6:b7:40:71:a6:c2:24:7f:2e:d2:bf:
bd:26:8a:4a:7c:81:a2:95:3c:b9:27:39:c1:e5:aa:a5:e5:96:
42:78:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:51:47 2025 by rpki-client