Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a18f49c5-fdbe-3591-a900-2f28eaf00b5f.roa
File: a18f49c5-fdbe-3591-a900-2f28eaf00b5f.roa (raw, json)
Hash identifier: STFBML+DYkKrCrkn9KGomjYvMHp9K+69KXq1zhb+DSY=
Subject key identifier: CE:D7:12:96:B7:3D:17:3D:43:92:52:30:5A:AA:7A:CD:05:F9:2F:8A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B78AAAEA759EC13C2C7E40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a18f49c5-fdbe-3591-a900-2f28eaf00b5f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 7122
IP address blocks: 209.202.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:8a:aa:ea:75:9e:c1:3c:2c:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=00711f5a-c0a3-4af1-8b48-7bace0fbd640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:70:9d:d0:e4:f4:25:49:a4:69:0d:38:93:
5d:0f:5b:09:eb:55:bd:75:5f:35:c2:be:6f:3d:df:
41:50:36:71:71:01:9e:15:50:2a:55:46:84:f3:f5:
ea:a8:88:5e:9d:57:77:d4:f7:a7:23:73:0b:cb:c9:
c9:5c:bf:14:9a:65:00:17:88:e7:ae:01:64:14:32:
46:1b:6a:ae:db:93:c0:7f:90:b5:b4:10:c9:54:21:
3f:36:36:30:bd:23:8e:42:52:ed:29:cc:63:6e:7d:
02:8e:a0:67:6d:82:22:30:ee:5f:a8:2b:4a:ed:92:
15:89:39:ea:17:0c:81:19:b3:53:59:42:bb:ee:42:
32:50:93:43:55:65:13:c8:92:46:e5:45:05:ef:2e:
59:7c:f7:93:bd:69:8c:c4:59:35:b0:b8:f3:14:f7:
a3:35:d0:54:ba:58:c0:23:42:ea:39:d3:b3:64:c8:
7c:ef:1e:59:61:db:5d:7d:86:c0:74:69:00:a7:c4:
3d:e2:63:19:e3:16:b2:f9:3c:91:10:f1:b6:b2:ef:
f8:07:25:6b:f1:ad:e1:d6:1e:13:dc:a0:8d:38:24:
77:a4:d2:eb:db:f5:4b:59:2f:c9:4b:e4:92:11:1a:
96:de:e6:2b:03:d2:96:56:69:6d:7e:5f:fb:57:7e:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D7:12:96:B7:3D:17:3D:43:92:52:30:5A:AA:7A:CD:05:F9:2F:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a18f49c5-fdbe-3591-a900-2f28eaf00b5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.202.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:d6:37:bf:38:ec:1a:6d:39:1e:a6:fc:f9:d0:60:4e:d7:c3:
bd:76:1f:04:e6:09:6d:aa:cf:00:76:05:52:bd:46:78:25:db:
e2:d0:e5:f6:d3:57:a9:37:08:f0:82:c7:ce:b6:34:0d:a8:93:
01:0b:f8:83:88:f8:dc:30:03:d3:a0:d1:a6:34:3d:0b:93:d7:
25:91:b4:f7:bd:fd:98:8c:df:d2:54:9d:40:eb:63:07:54:70:
b9:81:2c:37:c7:15:f9:32:e1:ff:69:83:8d:58:51:33:2b:1b:
80:a2:77:60:40:5d:1a:f2:7a:43:ea:95:9b:fe:57:34:f8:6b:
c8:ba:95:b9:9e:b0:ae:32:be:77:a1:72:d5:b0:61:be:03:fb:
ae:bd:4f:2e:ce:2f:5b:f4:94:b8:89:75:8d:d4:f3:59:52:73:
aa:15:bd:44:80:f3:25:87:21:d9:5a:47:6b:72:07:23:b3:73:
8a:ad:af:74:83:33:b3:54:15:6f:00:68:ab:50:ef:e1:da:fc:
c8:20:95:b2:fc:e5:c6:45:cf:3c:24:30:c9:9a:eb:f7:59:a5:
fc:79:39:60:1c:81:ff:db:ff:d4:dd:da:6c:d4:a3:f7:ba:5e:
e4:1b:d8:88:ec:51:6c:3b:76:27:cc:4c:51:f0:83:fc:3d:2a:
32:3e:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:22:16 2025 by rpki-client