Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7e2c369-0e5b-3329-b471-f69727e0db7f.roa
File: b7e2c369-0e5b-3329-b471-f69727e0db7f.roa (raw, json)
Hash identifier: C41e4IYFWvV3JQjAtS3Yf/dKkydUGBIBQ26vTtgZx84=
Subject key identifier: 62:CA:4B:B5:30:7A:54:D1:37:7D:C9:40:BD:95:3A:FC:79:E6:EA:7A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B630DC31062DF88F932320
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7e2c369-0e5b-3329-b471-f69727e0db7f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 10264
IP address blocks: 204.101.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:30:dc:31:06:2d:f8:8f:93:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=96bee9d0-67cd-460d-927a-f481a152b642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:70:32:32:f4:6e:51:f9:12:b0:dc:a6:f8:
21:5f:fe:f3:59:05:82:7a:dc:06:79:47:fa:16:99:
01:d3:3e:42:f6:5f:7b:12:67:12:ef:a4:41:bc:4b:
36:b5:ba:79:52:ec:df:d1:d8:da:fc:eb:0d:15:5e:
84:84:ca:b6:f5:07:65:7a:9b:99:94:5f:8c:7f:67:
5a:4a:64:22:34:b6:20:34:9c:d4:d0:de:2a:20:51:
b0:84:7a:52:8e:3a:20:9d:11:d9:ce:7f:55:fe:95:
60:45:82:89:4e:52:9e:73:3e:9f:9f:09:b5:14:be:
e7:d6:86:99:1b:48:2b:73:56:58:24:69:ab:c1:b4:
92:84:0e:06:82:13:4c:11:47:da:99:85:be:4d:02:
9c:55:4b:6a:81:d7:69:95:74:f1:ff:86:4d:8d:c6:
93:19:7c:03:db:a4:78:e4:4b:fa:1a:ac:4c:a2:3a:
c8:38:b9:9b:54:f1:b6:15:f7:9d:a3:ce:35:c8:70:
ba:f1:ad:cd:ce:58:6d:4c:4c:7e:7d:b7:58:8f:95:
45:b0:99:7f:6d:f3:3d:03:81:51:48:21:eb:3c:f8:
1f:0e:45:49:60:f7:55:a1:c6:70:c9:2a:37:ae:01:
51:cc:4e:4a:4c:ed:2f:7d:f5:fd:17:f4:3a:d3:5a:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CA:4B:B5:30:7A:54:D1:37:7D:C9:40:BD:95:3A:FC:79:E6:EA:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7e2c369-0e5b-3329-b471-f69727e0db7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:84:51:3f:a3:ba:84:57:2b:34:0b:71:89:3c:d1:c2:64:fb:
ca:64:2a:b8:19:37:51:cc:19:96:70:94:3c:ae:83:80:df:28:
4f:32:d2:c4:c0:f2:04:e8:66:df:6c:fa:ea:10:d0:de:86:3d:
3d:67:09:0a:fb:b2:34:de:8f:1a:cd:63:89:24:cf:66:82:e5:
3c:cb:72:18:21:b9:a8:7a:ca:60:8f:b5:2a:6a:78:db:70:3e:
58:65:44:fa:8d:45:ae:f5:c9:51:d0:bc:0b:c0:27:da:27:07:
93:77:af:d3:c0:e8:13:12:72:6d:8b:9f:0b:ba:04:2e:4e:81:
06:2f:2a:9e:b6:59:f6:60:f7:61:52:ad:93:17:86:25:84:b6:
4c:1c:cb:cb:95:46:10:71:b9:b5:f3:ce:b2:01:80:30:3c:3a:
da:71:97:43:10:2a:ad:b4:f4:5d:5d:e5:4c:97:ac:6c:2e:be:
2f:d5:a4:fd:7c:15:cd:7d:bd:46:a2:5b:61:11:71:85:6e:90:
20:37:27:26:0c:42:3f:fa:45:85:64:07:05:be:d7:33:90:d4:
0f:12:1c:0d:fc:a9:76:21:6b:ea:da:78:01:85:a4:9e:7b:57:
f0:95:3d:b9:16:4c:4c:12:42:81:ab:d6:29:74:2c:d4:6e:7e:
07:b5:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:37 2025 by rpki-client