Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a51519a6-da94-3e8a-8a93-1e0963f888f7.roa
File: a51519a6-da94-3e8a-8a93-1e0963f888f7.roa (raw, json)
Hash identifier: YEBg0Pi3PrK+puTJaFHX0lWZiqZTntRRB+MNGenF+E4=
Subject key identifier: FB:76:5A:53:26:CE:4C:C6:2F:FE:A3:AA:76:BB:F6:49:45:AF:4E:C1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6C0ED87947022CDBBC600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a51519a6-da94-3e8a-8a93-1e0963f888f7.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 206.108.110.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:c0:ed:87:94:70:22:cd:bb:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=0e7d1636-4474-4846-9787-3cd5f7852a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:da:55:59:97:12:70:08:88:bd:51:ba:90:
ef:63:11:0b:1f:ae:92:eb:49:03:91:13:bf:f0:41:
b2:40:6e:b6:26:63:e2:49:e9:2d:b0:22:15:8d:ec:
42:a9:56:0c:50:fa:3a:34:ee:7e:3a:20:84:83:27:
f6:c4:b7:8b:ce:f7:cf:c4:58:79:04:9e:61:f0:fc:
cd:cb:0f:ac:dc:1c:59:4f:5f:7f:c8:28:47:73:92:
d6:9b:c9:8e:4e:60:5c:cb:ba:b1:93:a9:31:e3:a0:
00:0f:c5:8d:0f:63:bd:c6:87:0a:93:02:f4:b7:6b:
19:b4:a9:cc:f8:a5:9c:2b:81:8c:0e:4f:fc:4d:e3:
d2:21:54:5b:ae:da:2f:60:7c:42:b1:54:50:82:9a:
b2:27:cc:32:40:ec:26:bd:4b:ae:30:8d:4f:bd:96:
bc:1c:38:1b:30:95:68:8c:d8:ef:ad:47:06:97:9a:
7c:45:e4:80:ad:9a:b7:73:9d:4d:92:b9:4d:30:e2:
56:e2:68:ad:fe:ce:84:54:7e:07:cc:83:dc:f2:b6:
cb:a0:ae:55:0f:5e:4c:1f:f9:4c:0e:06:bd:e5:69:
e8:a4:79:40:3d:a9:45:73:c0:45:07:97:ce:69:47:
d3:cd:0d:e4:40:08:fc:59:91:84:8d:93:a7:23:26:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:5A:53:26:CE:4C:C6:2F:FE:A3:AA:76:BB:F6:49:45:AF:4E:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a51519a6-da94-3e8a-8a93-1e0963f888f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.108.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:fe:b7:fb:2c:20:21:91:91:74:93:0d:35:26:42:ac:1a:79:
c5:0a:3c:67:6d:ea:94:eb:b3:17:85:48:49:28:6b:c4:48:a5:
cd:08:43:83:84:87:f7:06:01:da:57:a5:a9:80:6a:9a:8f:a2:
03:e5:0a:04:02:53:1d:ee:9f:02:76:aa:11:50:49:3d:2b:c8:
02:7c:fc:f9:11:c4:c7:b7:18:2c:ab:f7:c5:44:72:7a:1f:b4:
fb:07:c4:53:37:bd:60:ae:28:66:b7:cb:6a:d8:59:30:0f:77:
fb:41:61:32:69:e1:a6:63:8c:0e:a8:8e:e5:51:b7:23:3d:a0:
ad:50:cc:f9:cc:63:b9:26:db:06:2d:aa:67:14:95:9a:9a:86:
a4:c8:13:ae:5d:cd:44:90:16:0f:bc:ed:34:ee:f4:8c:b8:f0:
60:df:e9:53:6e:15:c1:7a:d7:dc:dd:e1:fb:e7:f4:9a:89:28:
c8:9e:7e:4c:08:1c:b0:2b:8e:94:a1:4c:be:fe:c9:73:3a:d3:
5c:67:50:47:e1:31:c9:e5:24:79:04:6e:60:75:32:45:f7:95:
fc:16:37:1d:b4:f5:f5:89:28:3c:b7:b3:12:f5:96:e2:0e:72:
6c:80:90:44:df:88:85:eb:d1:1b:98:cb:5e:41:64:bd:21:c6:
79:99:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:15 2025 by rpki-client