Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4dba47b-d13c-3d4f-bce6-1db3c80e02f0.roa
File: b4dba47b-d13c-3d4f-bce6-1db3c80e02f0.roa (raw, json)
Hash identifier: djUhE0KLwPCfqGKn3z2Azb7yoCF3AQ/kjDsWoHk9aVw=
Subject key identifier: 49:70:0E:CD:76:32:C5:57:27:30:02:94:E4:8C:8A:80:3A:93:89:0C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7E34DAC3147C806672700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4dba47b-d13c-3d4f-bce6-1db3c80e02f0.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 3848
IP address blocks: 216.208.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:e3:4d:ac:31:47:c8:06:67:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=bf636aaa-cdba-43b9-aab3-a822ee50ecc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:41:25:e3:88:1f:25:0b:00:b0:28:07:d4:
e9:f7:52:bd:32:1e:4c:33:2c:a5:5e:07:cc:4c:86:
98:83:88:90:cb:62:03:23:0e:51:a2:54:a8:15:5c:
40:47:ad:22:c7:8e:4a:39:1f:a9:25:ed:c2:1d:30:
02:46:0b:8d:41:1e:94:72:c5:d3:6c:02:7f:dc:78:
e9:c5:17:94:a6:7b:bb:ae:1b:41:65:20:a8:19:60:
a5:fd:db:70:8c:60:70:7b:77:d1:ed:7d:77:52:09:
5c:cf:5d:90:bf:94:86:12:73:b9:e2:7a:a1:4c:7f:
cc:75:3c:b9:24:ce:64:0a:6b:2f:a5:9e:c2:0b:84:
70:8f:8b:d0:38:49:2b:44:7b:fa:ea:63:3d:28:f9:
3d:44:3e:03:15:bd:00:e0:17:f0:42:da:4b:21:3c:
54:bb:78:d1:46:b8:b7:4c:35:cf:11:fe:04:cc:34:
81:20:9e:94:3e:d0:b5:8d:98:1e:96:54:1c:e1:16:
8a:e4:12:5b:97:7b:78:89:f6:7e:2d:f4:91:e9:a1:
50:81:6a:b7:bd:5f:d0:b7:12:13:7a:9d:3e:2c:90:
e0:4a:d6:c0:ad:39:83:26:e1:1f:ec:15:e6:bf:e7:
0c:a8:f2:25:7a:bc:83:23:91:4e:a3:62:53:19:19:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:0E:CD:76:32:C5:57:27:30:02:94:E4:8C:8A:80:3A:93:89:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4dba47b-d13c-3d4f-bce6-1db3c80e02f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:45:b7:85:67:a6:93:58:42:c2:89:bc:4c:7e:e2:2a:c7:32:
aa:bd:a9:c2:1a:e2:b6:19:11:1b:cd:e2:3c:08:c0:ee:08:15:
af:c0:0c:b3:a5:12:9d:36:61:ed:11:7d:18:12:43:46:12:8e:
03:2f:cf:3d:7e:d6:1b:03:92:02:4d:cb:ad:58:c4:63:d8:44:
3a:ac:35:36:2e:9f:f8:fd:ab:69:46:89:26:24:6a:9b:01:06:
c5:d5:fe:24:36:d7:d9:cc:6f:f7:51:47:fd:38:61:6d:84:82:
da:2e:33:30:24:f1:55:09:e7:53:76:a8:81:b6:0a:32:ab:5c:
4d:2a:36:51:5e:00:5b:63:fb:42:aa:bd:fb:81:1f:d1:e0:7d:
ee:c5:29:23:1b:1c:3d:52:fa:b4:4b:54:1b:ac:b3:d2:2f:b2:
0d:53:4c:71:22:61:01:8a:fa:4d:b2:30:83:ff:99:7c:b2:0b:
d5:ea:25:79:8d:85:3f:90:5b:5a:57:9b:ec:50:1d:2d:f6:49:
e9:0e:00:f3:99:93:8f:26:d0:62:40:a7:e1:9c:2b:6c:81:2f:
4b:56:a7:e0:62:14:2f:df:57:cd:c8:71:b3:b6:71:ba:8e:11:
91:17:5b:d4:8f:0a:d5:22:70:4f:c1:6c:ab:2e:47:bb:f0:a8:
20:b0:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:18 2025 by rpki-client