Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cebceee-3ea8-30e9-bb77-38de025ea1bd.roa
File: 9cebceee-3ea8-30e9-bb77-38de025ea1bd.roa (raw, json)
Hash identifier: Xx+w0HELW0jChEOOJzZevM9sYc/6dvWsjiLACzfwB60=
Subject key identifier: F1:C9:8A:44:0C:70:2D:73:81:18:7B:01:90:EE:D9:66:61:A5:10:C2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29D8F65F85C960AE2545C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cebceee-3ea8-30e9-bb77-38de025ea1bd.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 10264
IP address blocks: 204.101.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:d8:f6:5f:85:c9:60:ae:25:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=f407acc9-ca30-4679-8d81-1548934e400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:85:a4:df:5d:4e:80:e3:cd:13:01:27:78:
25:19:d8:3c:2d:63:18:c0:bc:bc:a4:3b:fe:87:0c:
4b:a3:02:e9:ad:9f:2d:0f:3a:69:1b:09:5e:88:c2:
06:7e:6e:d0:46:99:1e:08:ac:7f:b1:1f:5f:3e:8d:
68:04:52:01:e6:f2:c6:1a:07:95:cb:6a:62:8c:fe:
f8:ab:c3:08:e3:86:c0:03:1a:29:cc:eb:fa:89:f4:
8b:bc:48:1e:32:89:7b:39:89:67:79:84:1a:62:c2:
f4:48:54:f1:89:99:e4:11:5c:d8:ff:3b:c6:34:2f:
4f:e5:59:a3:9e:93:b2:25:ff:ed:50:4a:c1:07:db:
19:56:20:a7:75:65:a1:2c:72:9f:81:1a:28:63:1b:
64:44:81:69:64:ba:c8:34:40:39:d1:0f:2f:c3:b2:
f7:be:37:44:8e:5a:2a:fd:cc:44:0f:64:d8:e7:65:
af:dc:45:1d:a2:4b:9d:e7:32:df:6d:f1:e5:c8:01:
d3:3a:ea:43:21:cd:e9:44:85:9e:05:42:3f:96:6f:
82:26:c1:a5:0b:ec:ad:b3:ca:ad:45:16:4e:78:aa:
ec:c3:ca:10:20:46:64:e1:16:80:68:ac:a5:2e:3f:
cb:9e:0e:56:a6:67:8d:09:40:2e:6b:91:07:34:dc:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C9:8A:44:0C:70:2D:73:81:18:7B:01:90:EE:D9:66:61:A5:10:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cebceee-3ea8-30e9-bb77-38de025ea1bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:bc:d1:dc:57:86:90:ba:4d:95:f1:b0:9c:08:fc:e3:3b:09:
08:40:15:3c:d6:e0:ce:c1:bd:bf:08:08:ae:d5:ef:c0:71:1a:
71:fd:08:4f:8c:70:4e:93:08:6a:4a:c8:f7:db:e3:cc:dc:59:
9a:74:25:10:6e:2d:83:ff:5c:6d:86:3b:25:a2:9b:4e:c0:35:
56:93:b0:15:f7:c0:c6:64:c7:e9:bd:7c:cb:eb:43:1b:c5:28:
9e:ff:d6:d8:2a:eb:f7:3b:a4:c0:b5:04:07:f6:bc:42:a3:02:
15:68:c5:1c:5b:a0:e8:a2:02:0f:5c:13:f2:ce:35:a0:d0:71:
64:d7:34:49:39:ba:6b:1b:c9:9c:b0:b5:62:4f:35:5f:3a:d8:
ab:a4:2c:59:21:95:0e:03:d0:cc:7d:0a:b2:09:ec:6d:74:0f:
8f:64:5b:73:c8:b1:15:4a:9a:6a:5e:5e:91:86:9f:19:f7:d5:
8f:bc:91:57:d2:e4:42:3f:14:0a:83:0d:b1:b2:41:12:92:73:
22:29:1c:e2:9d:e7:89:ec:8c:9d:4c:d6:3a:6d:60:4f:c3:98:
08:6b:ab:b7:c4:d4:2a:dc:ed:59:80:c7:6f:0f:a8:e4:93:47:
36:3f:ec:12:49:dd:81:09:a5:7c:e2:fb:b5:13:68:4a:f4:2f:
41:ee:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:22 2025 by rpki-client