Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/98a859a0-a435-3082-9f75-3fc5402ae391.roa
File: 98a859a0-a435-3082-9f75-3fc5402ae391.roa (raw, json)
Hash identifier: h12O8ZmAzQuruYUge0+JjsbtbzOen8CRKLQVmdEwbhc=
Subject key identifier: 86:F2:61:3B:BB:0B:C7:64:5F:81:31:19:46:4F:18:35:19:06:40:81
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29E619946D8247ED4C1E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/98a859a0-a435-3082-9f75-3fc5402ae391.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21723
IP address blocks: 204.101.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:e6:19:94:6d:82:47:ed:4c:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=cb59e02d-e51e-4526-92ea-a159211884ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9e:e5:b9:27:3e:e3:1d:da:1c:b7:f8:87:2e:
1b:66:23:72:fe:5a:32:55:1c:6f:a6:cb:51:d0:8e:
8a:7f:21:83:d5:0f:d6:95:c5:76:ea:11:58:91:fd:
cc:77:40:90:5d:85:be:e7:fc:d5:4b:46:13:61:c2:
ca:44:8d:0f:e7:4f:d0:bd:85:53:b5:81:d0:3d:70:
26:60:4c:ba:2e:d3:72:91:7c:33:f3:39:2c:ca:8c:
56:4d:c1:ad:83:1e:14:8e:4c:80:a1:98:c2:e0:6c:
b1:97:7d:3c:8b:89:05:81:5d:41:d0:a4:0e:40:31:
79:e8:e1:fc:9a:2a:50:65:37:c9:8e:5a:2d:73:97:
40:4d:aa:1a:57:0f:79:f1:65:6a:66:2d:ef:cf:8d:
94:c3:44:1b:71:9f:63:08:3d:08:78:62:9d:10:e2:
84:02:72:a8:fd:d2:3d:ad:4a:46:e7:b6:e2:c7:93:
c0:18:66:ed:6f:8d:fd:ec:97:d7:06:c3:df:a9:00:
50:6d:b0:bd:9d:26:20:45:f2:01:8c:a0:a7:80:f0:
58:a6:93:2b:3c:ab:c6:2e:20:b7:d6:38:09:a5:5f:
39:bc:c9:20:f3:c8:86:b4:2a:32:9f:95:56:3e:4b:
99:7b:b5:95:db:43:46:f2:4d:b8:09:58:d7:a9:9f:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:61:3B:BB:0B:C7:64:5F:81:31:19:46:4F:18:35:19:06:40:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/98a859a0-a435-3082-9f75-3fc5402ae391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:dc:ca:df:e5:82:ec:2b:c2:d8:f1:c3:dc:a4:53:79:30:98:
62:c1:03:53:3f:a3:af:63:24:71:a0:f2:58:9f:bc:d8:58:90:
3c:cd:fe:b0:9c:fc:fc:20:b3:31:6d:a6:35:dc:15:95:0d:dd:
c9:1f:b2:93:06:39:3a:4d:78:3a:db:05:06:3a:81:c9:43:01:
31:e2:d1:7b:c4:6f:bd:19:fb:1c:a4:ad:1c:9b:86:65:2c:ee:
30:0c:c4:8c:6e:8a:52:14:cb:92:8f:65:c1:bf:66:23:5c:51:
8c:06:3c:aa:fe:de:0a:f8:41:e4:ef:68:7e:8f:3a:88:9d:91:
a3:be:2c:1a:df:4e:04:c9:af:b7:f2:17:36:4e:0b:d6:56:9f:
e3:a3:fc:07:26:ab:ae:ad:5a:db:a1:b8:ea:0e:0d:4d:86:bc:
03:4c:e0:2c:eb:c1:8e:ef:5b:92:29:40:d9:63:de:40:0e:0f:
8e:11:cd:fe:a6:2b:8a:39:f9:33:ed:ab:ab:23:de:e2:a5:ef:
8b:a7:4b:8b:1e:a6:ff:ef:b8:bd:2e:fe:e0:81:62:e8:71:2f:
86:05:be:df:51:8b:6e:8d:d4:42:60:dc:49:6f:31:c9:a6:01:
9a:15:4a:97:84:f4:f0:46:b8:d5:fb:f3:02:e3:ae:00:82:2b:
58:af:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:32 2025 by rpki-client