Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b2d69937-e1cb-319b-83e8-1b30b9e95d96.roa
File: b2d69937-e1cb-319b-83e8-1b30b9e95d96.roa (raw, json)
Hash identifier: UPgi+r8aUWhRociGiIqu9ktdKsk0B73SOHW34vGs4JM=
Subject key identifier: 42:4C:1D:DF:5E:DD:A1:7B:63:A7:55:12:0B:ED:61:50:12:21:43:01
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B655BE8823658EAE7FD080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b2d69937-e1cb-319b-83e8-1b30b9e95d96.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 32678
IP address blocks: 204.101.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:55:be:88:23:65:8e:ae:7f:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c1cac811-d0d0-4e54-b651-ef6ebd8f75c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:29:ba:9a:00:a7:94:df:18:95:fa:a9:34:
70:b1:3b:9f:b9:30:fc:9c:82:0b:76:7f:ba:73:7c:
85:ba:89:1a:11:37:7d:17:ee:20:09:73:75:f4:d9:
c3:ea:51:6a:38:89:41:85:73:5d:5a:73:aa:45:cb:
98:98:d0:0e:fb:c3:e9:32:70:f7:09:bb:26:dd:86:
d4:65:97:13:00:10:78:a0:48:5e:c8:b8:f4:05:5e:
ad:dc:6b:e5:30:c6:e4:41:8f:83:62:50:f5:13:67:
60:d6:61:5d:1e:6e:5d:1b:c4:de:b2:5f:dc:72:c3:
9b:30:99:24:72:20:97:e5:82:e2:2b:1e:7c:e5:f3:
5a:ce:ad:82:cb:04:05:5b:d6:85:57:5b:e8:22:0d:
fb:c2:a5:c6:a8:6b:94:1d:2c:f5:c9:bd:93:fe:4f:
3b:92:be:33:4e:a2:e5:70:73:7c:81:83:1c:e0:6d:
9b:75:87:bc:bf:e2:0f:ab:5e:24:c9:e3:44:15:57:
95:90:be:f8:03:5e:36:d0:08:17:64:29:54:d8:57:
9a:6e:1e:35:95:45:de:bc:59:34:36:c9:05:3a:c7:
da:bb:b9:c6:33:c9:71:04:11:8c:64:a7:06:4e:a5:
26:74:e9:54:a0:7b:58:93:f0:2b:70:0b:94:74:cb:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4C:1D:DF:5E:DD:A1:7B:63:A7:55:12:0B:ED:61:50:12:21:43:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b2d69937-e1cb-319b-83e8-1b30b9e95d96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:7e:e2:8e:57:c9:41:fe:87:f5:aa:d6:39:d7:6b:03:2e:a9:
39:99:31:82:af:84:32:55:92:4b:5c:a6:71:b4:f0:5f:67:66:
f4:d5:fb:bc:17:fd:24:e5:2a:20:c3:43:22:13:58:c6:69:23:
c6:dd:30:02:d7:01:2a:21:b6:a7:9e:29:6f:cd:dd:59:44:af:
09:c2:b1:c0:e7:6b:28:59:99:2e:21:ce:e9:2d:d5:e1:5c:27:
4c:ad:f9:72:97:35:a1:16:41:25:b8:d6:72:27:ee:34:ba:2b:
79:c0:94:69:9f:c9:f3:9b:b4:9d:c9:84:df:a4:3e:00:95:f2:
d0:10:79:50:3e:3f:83:c3:d6:2e:a8:2c:bb:14:80:d8:4e:37:
09:19:99:cc:a9:25:3f:09:8b:67:9e:31:92:5a:ff:9e:e5:a7:
1f:fc:26:90:f3:07:c3:43:7a:ac:93:df:bb:5a:f4:be:11:6c:
9f:0d:35:d2:d7:e5:7c:d7:86:0a:1a:0e:30:cd:64:a8:81:0e:
f3:23:18:b4:e1:c6:d3:2c:69:a0:ed:6c:3e:4e:b1:bf:fb:56:
2c:72:2b:40:a2:93:16:31:7b:4f:7f:50:22:97:42:b1:c2:d3:
3c:f8:29:fb:c2:39:9b:68:67:4c:35:56:2c:e9:d1:69:1b:93:
b0:f2:83:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:47 2025 by rpki-client