Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a4b69c3c-d5c9-37e2-9ff8-203d266a5c59.roa
File: a4b69c3c-d5c9-37e2-9ff8-203d266a5c59.roa (raw, json)
Hash identifier: fdaC2OP6JdSvhejoKROnIomQ+zbl3Vd7wvB7NhKCjn8=
Subject key identifier: 3A:5C:20:EF:CE:30:BB:76:72:10:5E:31:8C:A9:BD:72:39:3B:D7:53
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B809376DFF4A6975000280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a4b69c3c-d5c9-37e2-9ff8-203d266a5c59.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 216.209.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b8:09:37:6d:ff:4a:69:75:00:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=2f67f702-35d2-421a-9503-3a387e1038bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:83:17:b5:dd:7f:17:67:98:c2:28:5c:c0:
ef:11:78:ec:2a:77:1a:98:c2:2c:67:33:42:30:aa:
0c:79:82:c5:fb:cb:d9:69:a8:1d:bb:46:56:1d:f2:
c4:02:8d:61:54:d7:8c:dd:9c:85:f4:4e:c6:72:98:
f7:67:e3:b9:18:c0:1a:3b:14:1e:c0:f7:b1:2d:af:
f3:d2:d6:b5:5c:67:76:68:03:3f:27:3f:a0:0d:2c:
0d:9d:0c:e6:45:03:67:b0:b6:97:fd:40:c1:30:8e:
5a:57:09:55:14:49:ab:87:2e:4f:10:c0:46:ad:cc:
cf:7f:be:77:b7:73:78:b5:d2:aa:39:62:33:c4:f7:
50:66:e3:00:a3:f3:47:06:15:68:a5:f9:cd:58:9d:
c4:ce:63:73:2f:07:85:5f:b7:ed:65:93:64:f8:54:
03:42:7c:5a:fd:e6:58:4a:26:f9:ce:e2:ce:a9:5d:
97:e6:6b:83:54:89:db:90:0b:14:dc:3f:b9:43:79:
21:1e:a8:70:c2:ee:88:7e:6c:05:19:4a:f2:ba:0f:
bd:1f:93:32:49:b6:b7:79:21:d3:f5:01:40:de:42:
eb:cc:dc:80:c3:56:0d:51:a7:af:f2:9d:dd:eb:f7:
cd:30:97:3b:43:58:dd:59:d0:d3:42:bb:b6:1c:3b:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:20:EF:CE:30:BB:76:72:10:5E:31:8C:A9:BD:72:39:3B:D7:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a4b69c3c-d5c9-37e2-9ff8-203d266a5c59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:85:0a:3b:ea:87:b7:f5:56:9a:07:22:b4:b6:9c:a0:89:eb:
5e:1a:21:3a:35:74:2a:70:b9:8f:e8:ca:0d:aa:ac:f3:de:8d:
5f:75:23:ba:39:86:2c:1b:6a:40:39:5c:9e:a9:c8:6b:60:44:
d5:f6:1c:96:06:00:8c:8c:41:9a:d4:73:57:17:e4:f7:c1:32:
a5:67:5b:47:74:25:ab:10:04:00:10:90:26:95:90:49:f1:94:
e8:37:5f:53:3e:b6:d5:ad:2c:f3:21:7a:c4:98:af:ed:c9:05:
16:b2:65:76:4c:2a:2b:02:ed:78:d7:a7:22:9d:52:e4:ad:a4:
d9:a0:b2:f0:c8:62:3b:2b:7d:c7:c9:b0:4f:47:77:45:b2:2c:
53:76:09:2d:cd:ee:8e:d7:86:77:47:58:6c:a3:e5:02:a5:9a:
90:b4:23:b1:0f:78:02:1d:5c:3d:7f:44:b8:92:63:03:bd:fc:
21:75:75:81:a4:20:ae:30:73:e6:c0:7c:58:b9:bd:a4:42:fd:
fc:81:58:f2:8e:3d:77:88:46:78:1c:cb:a2:3c:ee:b5:4a:55:
ae:06:1e:07:c2:ee:49:d8:9c:5c:21:c2:8a:64:5d:3b:fa:50:
3f:41:52:10:3a:9d:d5:e7:98:e3:aa:8e:aa:04:35:8a:a6:5e:
96:45:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:25 2025 by rpki-client