Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9fca81f9-a555-3cd7-a509-7c0dd85bb463.roa
File: 9fca81f9-a555-3cd7-a509-7c0dd85bb463.roa (raw, json)
Hash identifier: AXsNIDcgoFhgRmwbg7nXbSAhrgFbvtHP+B+O0+3VVVg=
Subject key identifier: 65:0D:60:53:54:C6:7F:7F:6E:2C:C2:B1:6C:A4:97:A2:42:9A:77:62
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B53DB2C9D012226EF7272C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9fca81f9-a555-3cd7-a509-7c0dd85bb463.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b5:3d:b2:c9:d0:12:22:6e:f7:27:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=cf632b5d-42aa-4760-8cf5-1369fc5d4a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:c4:bf:f1:a1:37:5f:77:5e:71:65:b4:f5:
d0:e6:8d:f7:4c:a9:32:81:73:04:40:4c:48:e0:84:
7c:b5:3f:7c:7a:e2:e7:c3:3d:bd:ab:94:3a:8b:30:
e1:e7:af:5b:34:94:63:4b:33:87:77:05:3c:ea:16:
29:ba:06:a4:82:6f:e4:fa:e7:5f:72:0a:59:1b:0d:
50:2d:33:e6:0d:3d:2f:09:30:f6:17:22:e2:04:4b:
63:16:2f:a1:9d:76:49:08:02:70:62:b3:2a:7a:b3:
5f:d3:55:60:59:3d:e8:8f:45:8d:cc:0b:ee:d5:da:
67:4a:8c:50:16:b4:61:7a:40:23:dc:d6:5c:39:50:
84:2f:34:ec:cb:b4:dc:c9:cd:21:94:3e:e9:95:eb:
03:66:02:2a:18:29:25:67:3b:2d:71:0d:7f:fe:b5:
3e:19:65:1b:92:ec:61:6f:2f:81:16:61:40:c6:44:
c5:63:b8:e4:ce:d5:b9:5f:26:d6:df:89:da:e1:a5:
f3:57:e3:1d:ac:a5:6e:39:07:82:0c:e5:62:a6:02:
47:06:14:31:67:9a:43:01:6c:b8:6e:96:91:80:3f:
72:bf:b2:8f:c3:ca:e5:0e:91:e2:59:ea:74:87:96:
9d:bf:11:54:dd:c3:cc:20:49:ad:12:10:a8:5b:7d:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:60:53:54:C6:7F:7F:6E:2C:C2:B1:6C:A4:97:A2:42:9A:77:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9fca81f9-a555-3cd7-a509-7c0dd85bb463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:b0:34:06:8b:38:e2:ef:53:f2:bc:2a:48:08:bf:40:bc:35:
44:7b:05:d2:ab:5c:d8:9c:9e:2b:95:34:95:8c:7b:c4:00:90:
bf:5f:9a:72:98:f9:95:a2:24:77:3e:01:9d:dc:77:de:e9:3b:
e6:b4:42:d2:a5:bc:63:b2:7e:68:da:91:96:62:11:ed:ad:71:
e3:01:b7:a3:7c:e9:20:d8:ac:a5:bc:1c:c5:e9:c5:dd:32:48:
20:ff:21:e5:07:64:1a:65:96:86:70:d8:b0:5c:ce:ec:6a:f5:
95:a0:0b:bf:5b:a1:a8:73:a0:1c:30:fd:91:54:1a:0f:ec:4e:
5f:a8:54:af:dc:29:84:a6:2d:a4:e8:c3:a5:84:41:35:0b:de:
21:bb:ae:78:9c:8e:dd:b5:90:e1:0c:d2:5d:32:77:47:2c:10:
c8:36:6b:03:b1:14:a2:aa:40:a6:27:7d:95:87:db:d5:32:d9:
81:90:b0:08:c6:e1:8d:6e:9d:cb:ef:0f:f3:43:71:dc:d2:bb:
71:4e:39:a2:f3:53:ea:dc:b3:9e:07:b3:d4:a1:17:9b:f1:b5:
b3:ac:fd:00:cd:a2:e8:63:93:81:a8:20:23:f7:c4:e4:dc:6c:
bf:9b:71:4f:59:48:10:d1:81:e5:7a:14:b3:a0:c7:cb:1d:3f:
ee:29:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:42 2025 by rpki-client