Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b9d2c1f3-1330-3232-9a0b-eb8367565423.roa
File: b9d2c1f3-1330-3232-9a0b-eb8367565423.roa (raw, json)
Hash identifier: Cz0otH3SylybL94Ron4atLgSX4Yuf5mpkREVZejNGTY=
Subject key identifier: 46:43:A1:71:81:07:01:98:66:F9:CE:E1:90:64:40:48:C8:B7:6B:9A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B752AE5183DF398C2D6460
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b9d2c1f3-1330-3232-9a0b-eb8367565423.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 207.236.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:52:ae:51:83:df:39:8c:2d:64:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=7f6120c5-7c1b-4c6d-bc38-ea53ec2e6a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:d5:06:ac:c4:77:06:1c:ed:4f:39:96:8d:
9d:84:6c:c0:84:af:b0:17:69:1f:13:68:4e:55:73:
02:ca:a3:c9:22:80:a1:a1:c4:87:90:b2:4a:20:81:
1b:5f:e4:e0:00:31:59:81:6b:cb:22:ef:85:c4:75:
8e:6c:f2:57:08:2a:81:89:71:47:18:e5:f4:4d:81:
7d:cf:7d:75:ff:96:0f:f7:bf:27:db:2c:24:b3:83:
e1:5b:af:8a:b9:3b:da:ff:7a:f0:98:fc:90:02:c1:
20:d7:f5:fb:d9:6f:67:18:b2:95:78:c6:8d:93:e4:
0e:d2:7b:e4:b7:50:35:c3:8f:85:74:eb:b9:df:e3:
30:18:3c:24:ec:11:58:42:68:ee:c0:0e:8c:8c:34:
03:8e:0e:6e:89:e1:11:06:74:63:9a:20:73:48:e7:
7f:ce:04:c4:4f:f4:dd:63:fb:8c:f1:f1:2a:b6:ed:
27:0b:c4:94:bc:84:a6:55:dd:c9:90:34:51:28:30:
00:f0:3d:2f:98:82:0f:66:2e:28:f8:bd:a2:c3:23:
8a:4c:90:80:29:cc:f8:31:4f:a6:cd:89:d5:ba:f1:
12:0f:bd:ab:32:2b:28:d5:34:b0:58:ec:f3:61:c7:
bd:ff:e8:8f:6c:e1:c2:d2:87:d2:f4:3d:ae:fb:4e:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:43:A1:71:81:07:01:98:66:F9:CE:E1:90:64:40:48:C8:B7:6B:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b9d2c1f3-1330-3232-9a0b-eb8367565423.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:aa:e3:ca:7c:85:21:1f:fd:62:46:51:37:3e:b8:c1:d2:97:
a5:f5:af:90:c8:46:da:e8:83:1f:a3:49:8c:95:bd:45:cb:46:
c9:73:60:74:24:ac:dd:ca:10:51:e8:fe:df:86:47:27:38:b1:
0e:44:6b:0a:c4:84:3e:cf:bf:7b:38:fa:3d:af:ce:45:01:49:
09:9a:1d:c2:ba:10:5a:e7:a6:9b:36:b3:9a:a4:9d:53:d4:0a:
77:ba:f7:4f:c0:9f:9b:75:37:e7:8c:5c:9d:97:d0:b9:51:0c:
1d:6e:07:f1:03:a5:74:cc:4d:c5:a7:b1:85:64:ef:ab:61:3d:
ff:02:b7:2d:54:e0:f8:4c:16:5f:e8:29:d3:85:66:8e:30:3d:
b2:c7:4c:9f:1c:7d:bd:c7:26:33:0b:69:62:7b:08:d2:07:6e:
0d:52:c0:96:2f:4f:90:51:e1:46:8b:fa:27:7d:e1:61:0b:74:
bd:33:20:35:5b:4f:08:68:be:e1:4b:df:df:02:ad:9d:63:41:
4f:a9:fc:4b:8c:25:16:6a:03:69:87:ad:42:c8:77:51:48:89:
ee:3a:a4:c5:2a:c3:32:4a:cc:6d:e1:1c:9d:05:a6:36:73:7e:
4f:ad:07:48:f6:73:1c:d6:12:b3:ad:9f:c2:06:b7:4b:c7:1b:
64:81:6c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:44 2025 by rpki-client