Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/956eb1bc-9d68-35e5-8831-cc3182cbb56c.roa
File: 956eb1bc-9d68-35e5-8831-cc3182cbb56c.roa (raw, json)
Hash identifier: 0R3pirhq6AP3UAJ1RbWmLMElN9i2fgCrMfRW+ulv3dg=
Subject key identifier: 33:32:E6:70:EB:A7:A2:DF:FA:46:4C:45:60:10:91:9F:28:35:E5:79
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6FAFBBCD20B0CEB87A200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/956eb1bc-9d68-35e5-8831-cc3182cbb56c.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 10965
IP address blocks: 207.161.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:fa:fb:bc:d2:0b:0c:eb:87:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=a05fdedd-158c-43ca-bd4c-02fd2e3b2b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:12:ff:c9:2b:97:0a:15:e8:42:00:99:e9:6d:
a0:d3:7c:aa:60:ab:77:03:07:26:f4:68:4f:fe:31:
36:cd:a3:0d:65:95:a6:0d:9c:76:04:4d:b0:83:62:
d1:73:c8:97:2c:66:17:50:54:97:ca:2d:58:97:14:
16:e5:e4:95:03:dc:65:2e:f1:ce:a6:d5:43:91:aa:
9d:66:59:55:58:d1:9a:15:cb:35:81:f3:9a:33:9e:
a3:88:f5:db:f0:f5:cd:30:d3:59:bb:0a:c7:46:ea:
71:b3:b1:f1:9b:15:05:43:06:91:eb:6c:dc:8f:28:
92:bf:2d:fb:93:8a:65:65:08:c8:7d:7f:f4:0a:41:
4f:ee:7b:03:fe:e5:41:fe:08:40:1e:8a:40:8e:be:
60:47:b0:49:08:f6:be:6d:29:6b:47:60:21:79:b2:
1c:bc:bf:1e:b6:cc:04:3a:4d:88:82:b9:cc:22:d0:
c1:77:a0:56:02:9d:47:69:88:9b:c1:32:11:96:a4:
2c:fa:e0:b2:12:fa:b1:8e:d0:ab:3e:33:a4:6b:1e:
20:38:f5:ae:5f:dd:9a:d7:be:0b:6e:f6:16:53:68:
ed:ca:97:72:d3:96:30:ef:08:5e:38:f2:75:f6:c2:
fb:f4:0a:ea:9a:0a:1b:1b:20:e3:60:5c:a6:e6:08:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:32:E6:70:EB:A7:A2:DF:FA:46:4C:45:60:10:91:9F:28:35:E5:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/956eb1bc-9d68-35e5-8831-cc3182cbb56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.161.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:fc:84:2e:50:fb:3a:34:6a:97:0a:d9:ea:76:98:c1:6e:48:
18:ae:ee:5c:6d:0a:e5:5f:03:37:cd:ec:69:3d:db:51:da:82:
06:e7:c1:0b:37:52:56:29:c9:b3:93:42:3b:7a:a2:e0:a0:b7:
65:4c:ca:38:ed:e4:93:a7:c9:c9:05:25:a9:fe:d5:86:00:28:
cc:83:a4:a6:84:27:00:7e:a4:87:df:21:c3:49:aa:ab:a9:fa:
a3:ab:b6:c7:a2:30:f6:ad:a6:44:8f:ab:f2:b8:5e:e3:b3:45:
b9:ae:32:19:1b:a1:9b:dd:12:21:a5:1f:6f:a8:f5:4f:db:04:
c3:8d:0e:b3:a4:26:9a:72:00:c6:0d:12:7f:0d:a2:82:2d:2a:
c7:26:ab:3a:64:1e:8e:70:df:80:cc:ff:33:d9:36:40:a4:f2:
a3:31:62:ff:72:89:fd:2f:f1:5d:36:08:4e:06:13:c8:2c:3b:
5a:73:34:21:53:f6:41:97:39:1a:66:fe:2d:5f:17:d6:24:dc:
d8:36:e2:19:ca:65:aa:c9:68:0a:ad:3e:9c:07:f2:0a:df:62:
62:3a:5d:8c:4f:6d:42:46:51:8e:12:96:19:1b:f1:37:73:d8:
3e:53:e5:cc:b6:75:3f:e9:86:69:40:54:c1:31:e2:4b:30:50:
55:48:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:04 2025 by rpki-client