Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/950a2109-97b1-3825-81d7-c58fe5b8fa62.roa
File: 950a2109-97b1-3825-81d7-c58fe5b8fa62.roa (raw, json)
Hash identifier: 4KaI+vkIHoOB8P86nniIjXEzn+/GEIDZ9mYpeyhAEUE=
Subject key identifier: 83:6A:71:77:55:44:4D:16:B7:90:AA:6C:37:35:57:FA:2A:EF:AE:18
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29A756CC02F6052BC39600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/950a2109-97b1-3825-81d7-c58fe5b8fa62.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 199.243.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:a7:56:cc:02:f6:05:2b:c3:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=edcfd095-19c2-4976-b5ac-4d76e26b3e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:68:ef:13:59:7e:27:9a:09:a6:e4:03:b7:
29:cc:8b:7c:9f:d1:9a:3d:7e:92:63:83:1b:ad:85:
8a:d9:e8:0d:79:b9:e0:7b:6b:dc:75:39:55:f9:e5:
02:12:67:39:31:23:c9:8d:ee:97:30:0a:57:8c:fe:
9d:e6:97:19:de:9b:9f:a0:84:27:52:12:bb:92:22:
e9:78:12:3c:bb:03:fd:62:1c:4d:a3:c1:00:59:1b:
e2:86:cc:57:e1:ec:cc:dd:13:0d:9b:20:90:f4:72:
26:96:50:dc:a4:3c:93:90:54:7b:f3:26:e6:b6:41:
5a:17:39:43:1a:32:11:6b:f0:0c:69:53:a2:7f:5d:
0c:10:36:97:6e:65:52:49:a0:ad:52:63:68:d7:84:
be:74:2c:1d:83:84:9e:9c:bb:03:96:27:da:b0:bb:
0d:93:8d:23:20:c1:2c:07:26:43:6a:15:40:5f:34:
6b:a8:c3:d3:19:39:d3:ba:b9:d0:04:c5:b2:b6:ab:
f8:57:ab:e8:e4:10:77:16:01:29:dd:42:6d:3d:9f:
b2:57:d6:e7:e4:43:35:e7:59:72:f9:98:4c:96:88:
31:93:ac:88:b5:48:3c:17:e9:1a:22:f6:8c:59:6e:
e3:2e:a1:c4:f6:ca:0a:99:89:45:ee:87:e8:36:59:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:71:77:55:44:4D:16:B7:90:AA:6C:37:35:57:FA:2A:EF:AE:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/950a2109-97b1-3825-81d7-c58fe5b8fa62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:da:85:55:e9:b4:ae:b4:a3:1c:80:3b:d3:af:5f:fe:12:8c:
ed:5b:3f:f9:f2:10:ee:e5:e2:5a:8d:5d:6c:7d:b2:7b:94:b6:
b5:55:9c:e3:5e:12:2a:f7:31:fc:57:2d:44:bc:c3:ef:34:87:
25:35:f0:a3:8c:68:88:e6:52:6a:e0:dd:d6:98:bf:00:93:25:
6e:99:f1:55:c7:60:25:7a:38:f3:6d:a5:37:77:b6:7f:67:0b:
be:e2:c6:61:f0:dd:e6:87:ab:6b:36:f5:90:ef:1f:64:89:db:
18:86:04:18:b3:2c:cb:c8:68:f7:42:98:16:52:b1:c2:39:8b:
9e:e5:e2:9a:a5:a8:72:90:cb:e2:00:8e:f4:78:38:53:d6:89:
da:69:70:d3:56:3b:16:ed:a9:13:ab:0d:3b:d2:ad:0d:28:a9:
d9:d8:b4:03:35:08:24:8d:74:3b:4f:67:41:9b:35:86:1b:d0:
88:57:86:3f:e7:08:76:70:c1:a5:c7:42:d1:c7:0b:ca:16:5c:
a3:2e:e8:3f:02:fd:29:9d:96:f4:b0:fd:04:33:04:2d:1c:17:
87:44:3a:11:e2:95:cf:68:cf:50:11:61:61:81:b6:9e:56:78:
b2:58:8c:0e:f0:cb:01:ab:e3:45:6f:bc:c7:63:f7:85:c1:da:
a0:1b:01:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:41 2025 by rpki-client