Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a7d86c84-5acf-31c3-a7b3-c53cc3e25082.roa
File: a7d86c84-5acf-31c3-a7b3-c53cc3e25082.roa (raw, json)
Hash identifier: kQQZ0/3xpglgKgOspTedEsnafYXVQ4DtT78pFYfdrg0=
Subject key identifier: A3:25:7E:56:32:31:EC:99:BF:93:1A:2E:80:28:CE:68:ED:F5:C2:40
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF762142F1292B80D9EA9B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a7d86c84-5acf-31c3-a7b3-c53cc3e25082.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 3848
IP address blocks: 216.208.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:76:21:42:f1:29:2b:80:d9:ea:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=ed7907f8-a6e2-4258-90d0-8e8f7eb2641b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:92:8c:60:65:35:49:d3:75:f9:ff:ea:09:f3:
b6:5c:a0:26:59:5b:95:e6:8b:eb:4d:9e:79:a8:ba:
ad:41:b7:72:e3:fd:e1:96:4f:54:ec:69:2b:d2:65:
74:f3:9c:71:26:d0:0c:8b:cb:84:54:0a:15:30:d3:
ff:45:c9:cc:01:f2:a5:f6:fa:8f:03:a2:a0:7f:40:
dd:40:83:1f:1b:19:ec:38:63:c7:24:43:40:dc:50:
c4:d3:f1:cd:c3:54:3b:03:c4:74:71:4b:c0:55:7a:
6b:67:a6:fe:76:d5:13:a7:39:72:52:6c:51:05:44:
19:af:fa:a3:57:24:c0:60:cb:91:98:e8:fe:bb:23:
ef:6a:40:fa:a0:74:91:bf:6a:87:0d:5f:43:da:da:
d6:d2:1a:02:91:ac:5e:bb:84:46:36:01:0f:1d:48:
95:e7:ac:d3:29:e6:ad:30:64:dc:e7:81:f2:1d:d6:
e1:83:31:41:6a:36:d9:ba:85:bf:58:42:3c:af:81:
9a:f6:cb:dd:87:e0:88:a5:f5:a0:0c:ab:01:12:a7:
5c:7f:7a:99:5a:32:6a:d3:fe:33:a1:3d:c9:7b:df:
5a:a6:73:4a:d7:d9:76:64:c9:d5:17:7c:4c:8d:95:
58:54:54:63:ca:f0:97:cc:09:1f:c3:cc:49:f9:32:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:7E:56:32:31:EC:99:BF:93:1A:2E:80:28:CE:68:ED:F5:C2:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a7d86c84-5acf-31c3-a7b3-c53cc3e25082.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:65:bb:bb:a4:ac:85:05:16:42:d1:f1:db:32:93:d8:69:e6:
e3:df:87:23:52:91:a7:09:9a:b7:40:77:2d:e1:8a:f6:0d:e8:
2a:01:bc:d3:7e:d9:1e:d8:96:e1:15:34:75:ca:a4:e7:e3:c2:
cb:e0:08:70:a6:00:9c:8c:88:eb:e7:fb:d1:cf:f9:04:a1:fe:
84:cd:e2:80:9b:19:8f:c2:dc:d9:e9:b7:89:72:be:ab:99:8f:
53:5c:af:ea:5f:7c:16:31:4c:ee:ba:b5:41:8f:f5:70:07:2c:
27:d0:ac:e8:31:a0:ce:73:ee:69:6f:12:d6:20:9b:2a:36:5e:
eb:a6:c8:46:50:ac:73:f7:11:b8:05:5d:80:76:20:44:b7:bd:
36:97:a3:b0:37:64:b3:4d:66:bb:91:45:61:58:10:74:cf:8b:
52:63:bf:98:ec:3d:f4:9b:9c:2d:ab:29:bb:c4:3d:d5:36:c7:
a0:ef:8b:8d:5f:4c:6a:c0:b5:19:1f:22:e5:e2:18:cb:7b:8e:
b3:57:12:90:4c:82:25:9c:bf:d0:af:5f:7b:13:47:82:a4:6c:
6e:d4:63:b6:7d:b5:96:1a:78:fd:51:3e:d8:8b:1b:b4:8f:dc:
31:40:1d:d2:da:23:b9:11:55:d7:25:21:3a:54:6c:da:a0:44:
35:ee:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:51:50 2025 by rpki-client