Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/998dde86-46cd-3c9f-9387-9b529704ed41.roa
File: 998dde86-46cd-3c9f-9387-9b529704ed41.roa (raw, json)
Hash identifier: qlKanla5R1aJHZMEzOyg+Mfcybuks73b3HFDtr+QmMw=
Subject key identifier: FF:71:F0:C3:08:51:FF:9F:3B:55:C0:73:14:E7:27:45:94:72:E9:28
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B75C741B0AB85811009DA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/998dde86-46cd-3c9f-9387-9b529704ed41.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 207.236.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:5c:74:1b:0a:b8:58:11:00:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f8533042-851c-4057-aae2-b3de5f250c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:7b:70:42:bc:06:06:ed:22:34:ab:4a:f4:
88:50:5c:e5:87:97:66:84:df:e7:41:87:fb:a8:61:
21:2e:97:77:47:02:6a:7b:ce:01:65:b5:72:76:ec:
10:59:f0:86:35:4c:da:df:be:13:d4:55:90:da:5c:
66:32:21:34:25:77:c9:cd:97:a1:07:73:fc:c0:c2:
6b:38:4e:ad:d0:e2:2e:1a:09:2c:47:8e:ac:39:f6:
e7:83:c7:2d:25:a1:15:56:1c:6e:24:dd:7c:9b:c1:
a1:6a:48:e5:ae:69:04:00:a9:ee:9f:cd:d5:69:53:
e1:b6:09:49:57:47:6f:02:39:c6:e0:82:1f:f2:8f:
5f:56:e6:1a:b5:36:b8:33:a9:ae:e4:d0:33:89:57:
c0:c3:4c:d7:c9:8f:87:b5:b9:db:30:fc:c2:1f:fd:
37:fa:53:fc:ec:f1:a6:32:91:fc:26:fe:dc:9a:94:
7c:3a:76:ea:6b:2a:0d:59:7a:89:53:86:70:a0:cc:
e2:65:b1:cb:49:29:c9:00:d7:01:c7:d4:93:74:56:
1a:2c:e8:51:3d:ca:ad:f0:00:e0:31:9b:43:49:69:
08:b1:d0:7b:f5:9d:73:22:d6:74:11:dd:09:cb:ac:
fe:99:28:a2:3e:c6:7d:a6:27:a7:16:73:1d:49:0a:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:71:F0:C3:08:51:FF:9F:3B:55:C0:73:14:E7:27:45:94:72:E9:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/998dde86-46cd-3c9f-9387-9b529704ed41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ab:ee:73:2a:38:97:ba:a2:90:4a:66:6e:de:8d:37:71:23:
83:8f:d7:c2:d2:d6:49:7e:bc:f6:3c:ae:d6:b4:fc:1f:1c:6a:
aa:d3:36:d9:3f:bb:41:76:04:87:1e:24:42:44:fb:50:1a:50:
22:10:a6:16:24:3f:e7:87:58:fa:b6:e7:c8:6d:4e:3c:f0:29:
db:11:74:f8:b6:cb:e8:77:6c:a9:31:1d:52:6a:30:59:23:81:
86:4d:56:db:b6:d1:76:77:fb:ad:bc:d6:d6:e4:df:4f:5c:27:
81:64:04:e4:99:62:82:b8:1a:49:91:64:d4:f9:07:03:f1:d5:
cf:6b:d6:47:7a:e6:16:80:de:94:38:c4:05:06:95:a7:eb:fa:
bb:71:ec:10:dd:fe:d7:51:f3:57:f5:f3:79:61:cc:89:ed:65:
69:34:4c:f4:a8:98:69:ff:1c:4c:a0:d9:c9:0c:bb:b0:41:f2:
8b:dc:94:db:85:c2:d7:a6:5e:44:5d:53:a6:e5:f6:6b:0e:9c:
3d:6d:d7:97:0b:5f:f3:56:ea:ea:8c:1e:88:da:4f:a3:9f:04:
f3:0b:17:56:e4:cf:99:b6:e7:bb:a1:f3:ba:0b:2e:84:2b:f4:
01:b5:6c:17:06:8d:d5:27:21:22:ad:61:eb:79:e0:74:0e:cd:
65:fd:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:12 2025 by rpki-client