Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b65c9c9-57cb-39ab-8d5c-4209c1a481e5.roa
File: 9b65c9c9-57cb-39ab-8d5c-4209c1a481e5.roa (raw, json)
Hash identifier: Xez00lzS1WaShVQGdpt96E1dbsLpz/WwpzBMZpeikXg=
Subject key identifier: 8C:47:D0:6C:46:8D:A7:0D:03:ED:5B:6A:F4:39:F6:26:8D:C7:5C:98
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B59C45926CF6BAD3F87960
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b65c9c9-57cb-39ab-8d5c-4209c1a481e5.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 35911
IP address blocks: 209.226.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b5:9c:45:92:6c:f6:ba:d3:f8:79:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=aef2316f-dee7-49e2-9159-b9f02349a5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:25:f6:0c:98:4d:b3:c9:df:2b:b4:5d:e7:
95:46:4c:38:b7:9e:91:9f:a1:f0:8f:82:c4:8f:e9:
58:c3:da:1c:f2:6f:d0:f5:c9:2d:04:71:01:c8:42:
17:70:fd:7f:de:2d:a0:35:0e:ea:d8:9e:f6:77:31:
e5:1c:6f:de:cf:d4:cf:36:35:ed:1f:06:15:87:88:
44:c5:52:b9:76:41:f3:14:5a:98:b1:3d:87:3c:a9:
9e:b0:bf:21:1b:3c:4e:13:ba:98:84:3d:fe:ec:95:
db:d3:d6:e9:d9:36:aa:3f:52:16:a2:bf:53:01:30:
08:39:36:bf:fa:f1:ca:66:99:03:58:70:76:36:bf:
4e:1f:62:3e:c5:4e:85:99:5d:a8:e9:ac:79:45:ce:
da:c0:1f:28:9f:a0:9a:29:d0:e1:a5:df:7e:97:3e:
9c:af:81:02:0f:99:1e:47:0f:11:c6:f7:4d:ea:c6:
94:a6:ef:ac:42:30:75:b6:84:42:c9:22:b4:56:ee:
4d:aa:41:55:ef:56:8e:39:1d:2d:22:f7:4b:05:37:
8a:03:0e:af:8f:bc:66:95:84:75:05:bd:a2:ad:a8:
d4:90:a3:f0:72:27:73:a3:90:0c:19:c1:f9:fc:8e:
3a:6b:4f:68:ce:44:0c:d2:64:95:7f:43:a5:37:3b:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:D0:6C:46:8D:A7:0D:03:ED:5B:6A:F4:39:F6:26:8D:C7:5C:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b65c9c9-57cb-39ab-8d5c-4209c1a481e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:fd:7d:72:73:e3:61:b6:1c:8f:f1:aa:8a:a5:44:fb:cd:1d:
0c:44:55:60:2b:7f:01:a8:70:ba:47:12:84:4c:b6:14:16:8b:
e2:35:37:5b:7c:67:69:bb:53:a5:02:98:21:08:57:c0:d3:4c:
de:b0:82:19:1a:d7:f7:11:c7:7d:b5:38:71:0c:39:35:d1:57:
b0:c4:b2:07:92:78:10:62:a2:45:af:0f:cd:99:5a:31:ff:f3:
06:5b:f3:0d:1a:19:18:47:23:a9:f4:fb:19:48:c7:a4:55:66:
2e:10:f6:aa:0c:e7:6a:34:f6:bf:09:2a:ee:29:e8:86:55:f0:
56:5b:f8:61:81:23:ec:d4:f7:ab:63:e5:70:3f:3c:83:77:5d:
c9:93:c7:a3:94:7a:d8:ee:30:29:08:63:05:4e:59:34:73:2b:
48:bc:fa:b3:ee:d5:66:da:8e:44:ee:8d:13:33:a2:7a:7c:6a:
44:89:0f:43:01:49:6c:3a:8c:c6:71:de:e2:c7:b4:91:9d:08:
dc:de:61:6a:08:a4:e0:e2:60:53:dc:c8:f3:b2:ee:d8:d8:a8:
3a:3b:7d:40:9d:3d:87:dd:1b:89:48:66:68:30:d3:2e:c5:09:
7f:e2:42:6a:de:51:3f:64:52:48:ba:5f:c6:46:80:47:fc:75:
f5:ad:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:42 2025 by rpki-client