Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5dba64b-e058-35cb-b42b-5d74063e4191.roa
File: b5dba64b-e058-35cb-b42b-5d74063e4191.roa (raw, json)
Hash identifier: 5zwDqXeWtukmpD9Q8Inv0z7L25d6pKvCMgVII5yK5c4=
Subject key identifier: ED:D9:13:05:13:D7:FB:76:F0:9C:7D:58:E5:A2:43:08:00:F0:AE:7C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7FE2F18DA3610C64F0A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5dba64b-e058-35cb-b42b-5d74063e4191.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 216.208.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:fe:2f:18:da:36:10:c6:4f:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=ddd74c7c-dfcf-45bc-9720-41b262a88aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:85:d8:c5:b3:7f:f8:12:c3:10:60:bd:23:
5a:fa:73:e5:18:ae:93:23:1b:52:c4:99:96:c0:03:
fe:24:58:95:00:9c:79:70:4c:b2:24:3b:47:b6:8e:
89:48:ae:1b:2c:c7:5b:c1:97:e5:48:52:91:8b:53:
17:50:10:e4:52:95:01:89:de:3e:ba:7f:39:47:fa:
61:94:f6:da:8b:28:4d:45:5e:26:44:c0:8e:89:d2:
83:3f:bb:3a:66:6e:a4:68:de:7b:fa:4e:d2:2f:80:
89:09:39:70:b3:36:fa:35:63:34:cb:5c:6d:8f:3b:
a3:d1:97:de:68:a1:56:45:2a:cc:ee:64:21:42:0a:
01:c3:21:17:9d:f8:32:bb:f2:02:38:74:37:be:f2:
68:bd:70:6d:be:d7:9b:68:38:9e:e6:0b:d5:9b:f8:
39:3d:72:86:c8:4d:d8:6e:86:8f:f9:94:f7:39:69:
a5:30:6b:e2:6f:a1:2c:5e:a1:8f:87:22:f2:ec:72:
02:f3:0a:1f:e1:00:e5:ad:37:e0:b6:56:05:96:b7:
70:93:54:b8:19:b4:f4:ff:0a:76:e0:38:40:74:fe:
3e:09:a0:ee:de:41:af:4e:d7:af:10:cf:ba:5c:33:
68:a5:12:26:2e:5c:d1:64:97:cf:14:a7:ed:0e:08:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:13:05:13:D7:FB:76:F0:9C:7D:58:E5:A2:43:08:00:F0:AE:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5dba64b-e058-35cb-b42b-5d74063e4191.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:ec:f8:db:4e:f3:7b:ec:8d:2c:70:a1:da:bc:82:e7:da:98:
4a:89:f3:90:fc:0d:98:33:2e:f7:ab:c7:c0:6c:b1:1e:e8:23:
01:df:00:ad:7b:27:29:96:9e:d8:e7:85:23:12:2e:ee:30:2b:
9c:a7:76:aa:93:e6:03:97:78:b9:73:07:25:a5:71:75:20:95:
6e:ea:f0:1b:1a:e3:c7:f1:e1:13:3d:e5:65:fe:a7:70:bd:0f:
1b:c4:4a:bc:be:e9:83:95:ee:19:df:15:ac:db:8f:60:e8:43:
90:10:fa:b5:93:cf:ce:53:0f:aa:c9:36:25:73:73:61:55:6a:
8b:58:27:1c:c3:72:ad:e6:c8:1d:d0:00:51:6f:93:d4:44:9e:
d0:13:2a:ef:96:31:6a:80:97:a3:fe:10:86:ca:40:3a:c0:21:
6a:ef:01:d1:5f:61:5d:75:03:6e:f6:e1:d6:49:0b:71:4c:d9:
9c:d2:56:85:a1:9f:41:a0:e0:3b:dd:a7:13:5c:c1:61:d6:01:
d1:be:96:30:b1:55:82:e4:fa:28:c4:8b:d5:9b:1b:ca:35:94:
12:4a:ce:d8:57:1f:9a:50:02:b2:eb:7c:9b:a6:49:93:91:9e:
57:67:db:b3:61:d6:98:4e:fd:b1:01:ce:7d:8f:af:59:6d:0a:
55:fc:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:56 2025 by rpki-client