Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/998c7df2-b7cf-3874-abc2-615c399fc01f.roa
File: 998c7df2-b7cf-3874-abc2-615c399fc01f.roa (raw, json)
Hash identifier: /fpWY8uH47luoeabaPRYp+zNpuVqIWdhsOB5kDoJFzQ=
Subject key identifier: 2E:34:52:6E:0D:55:9B:24:6B:D3:EE:C1:78:D3:1A:9A:A7:59:F1:23
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B3C443D138CC9F2D7DBB80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/998c7df2-b7cf-3874-abc2-615c399fc01f.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 577
IP address blocks: 184.150.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b3:c4:43:d1:38:cc:9f:2d:7d:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=6ba6b7ce-9209-4cca-8c46-811e85c8d84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:81:70:1e:29:75:e1:33:7d:02:5e:12:cc:
d0:8c:0d:04:12:08:90:12:77:21:24:ec:de:06:cf:
b3:ba:bb:77:7b:20:13:99:53:7f:e1:b4:cf:1c:0b:
39:c3:c5:7f:13:4f:77:b9:42:70:b6:95:97:c3:a8:
34:74:36:df:dd:09:0c:07:89:9d:16:69:17:87:86:
02:e9:39:e9:0a:ff:b0:f8:16:46:b4:74:1c:fc:ef:
d1:66:91:a8:f8:5e:9c:37:83:0d:b0:aa:c6:5c:11:
71:86:d5:78:27:e3:c7:2f:3d:cd:6e:02:5c:a2:43:
2e:aa:b3:4f:55:2f:3b:dd:1e:0d:83:26:08:bb:c4:
00:45:59:7a:ba:31:19:49:5b:b6:1d:c7:e9:16:fd:
67:53:ed:82:24:62:22:fd:81:e4:39:3d:c9:38:16:
47:42:d2:f8:fa:0f:59:1d:f5:36:ce:37:df:db:19:
fe:49:7d:df:5e:28:13:75:78:2f:af:92:8d:e1:af:
a8:71:4d:ed:82:b9:b5:05:68:95:7e:eb:d2:31:e2:
9c:ba:da:02:ed:d1:29:57:d7:17:fb:cc:9a:10:ef:
f1:00:a6:f1:6e:cf:db:74:aa:40:8d:0f:e2:31:46:
0c:d3:46:82:b8:e8:e3:59:23:ef:44:07:c7:d1:99:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:34:52:6E:0D:55:9B:24:6B:D3:EE:C1:78:D3:1A:9A:A7:59:F1:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/998c7df2-b7cf-3874-abc2-615c399fc01f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.150.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:c1:ab:7c:89:e6:85:4e:4c:78:bd:57:73:79:b8:d6:36:6d:
b3:13:b9:44:2c:07:ea:38:24:13:d6:a7:7e:59:00:61:fa:86:
7d:90:dc:7b:51:63:ad:7c:5c:cf:67:5c:15:ce:a4:50:7b:b3:
03:29:72:ff:02:2c:a5:2a:93:86:6f:8f:b7:01:42:3f:be:48:
c4:59:59:69:8b:fa:84:5a:a9:28:11:0c:94:cd:eb:21:ac:89:
14:cb:26:ca:37:27:e4:a5:2e:db:28:8a:ba:0d:e0:02:e6:cc:
96:48:c8:9d:c7:1f:cd:0b:6b:59:39:de:40:49:74:5c:95:2b:
ab:85:5f:48:fc:79:d7:f9:d1:ab:6a:cf:bc:f9:04:50:03:ee:
21:10:87:0e:2a:72:db:04:45:1e:07:3b:22:e8:57:7f:5f:1f:
ed:63:d5:c7:e5:cf:6f:f5:3d:46:e8:2c:14:b7:f3:51:f9:84:
a1:1b:76:4c:4a:7b:64:2c:d9:d5:3c:09:89:a4:e8:95:e5:2f:
ab:0e:0e:95:0c:30:6b:27:ca:87:b7:b8:c9:8f:a3:18:78:7e:
15:d4:16:86:37:5f:f4:30:b9:ca:44:83:62:a3:a7:80:e1:90:
b5:ea:25:ba:b4:d5:94:54:9e:c4:4f:0b:70:92:b9:f4:06:24:
b8:bf:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:38 2025 by rpki-client