Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba2502e6-6fc5-30f0-b2ec-17cc63ab86db.roa
File: ba2502e6-6fc5-30f0-b2ec-17cc63ab86db.roa (raw, json)
Hash identifier: b6znD9zETMIu49NldiMzb4P0QzqCYf0BjpbU0IvFGO4=
Subject key identifier: A1:56:D7:51:F9:B0:51:CD:BC:61:70:07:9C:E1:2F:57:94:49:4E:A2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314C97027DB614BF505B8A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba2502e6-6fc5-30f0-b2ec-17cc63ab86db.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 3804
IP address blocks: 199.243.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:c9:70:27:db:61:4b:f5:05:b8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=e9aa35c7-d669-484b-96b6-e0c28490c715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:27:b3:59:2f:15:74:73:2a:1c:54:b0:45:
ff:ea:26:64:3b:89:c9:70:ef:e0:63:bc:46:77:7f:
36:a4:b4:5a:e0:9b:e6:33:7e:ca:ee:52:eb:96:0a:
c3:20:bd:1f:c6:f0:99:d4:ca:3c:9b:e6:39:59:e4:
9c:70:7f:23:03:3c:58:7b:fe:8b:3a:53:a0:b1:22:
89:77:d9:a4:f0:b4:04:d0:29:03:52:ac:8a:fa:66:
79:64:a8:a7:6d:13:d0:b6:c7:70:a4:38:84:b3:1c:
be:ba:c4:fe:ac:69:d6:01:40:c8:68:d5:5d:a6:ad:
7d:eb:7b:6e:73:32:00:62:87:2c:0a:bc:d4:98:7f:
2f:93:dd:4a:14:98:3a:b8:89:8b:d7:e3:97:45:53:
b3:6e:d4:4c:8f:88:25:4a:61:a1:77:42:b0:77:9b:
f8:be:9a:33:76:34:da:33:41:06:eb:18:7d:c6:46:
1c:2d:45:82:34:a9:5b:a2:40:dc:3b:02:22:fd:2a:
d2:68:e9:d4:f5:8b:37:68:4c:74:3a:5b:73:30:c3:
d1:01:ee:89:4c:f4:8e:b4:ce:c7:41:bd:20:9d:49:
78:a6:35:9d:0f:05:c1:be:8b:4b:64:d7:f4:c3:40:
41:78:88:dd:ed:ae:01:65:0b:2e:94:67:f5:5a:20:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:56:D7:51:F9:B0:51:CD:BC:61:70:07:9C:E1:2F:57:94:49:4E:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba2502e6-6fc5-30f0-b2ec-17cc63ab86db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:1f:57:90:a8:bf:74:76:9d:b7:2b:1e:41:9a:f6:a7:2a:52:
cb:54:d1:32:95:5a:37:fd:c8:83:ee:fe:f4:38:f5:fb:c4:f8:
01:2c:c0:9e:73:f6:e5:70:fe:1b:e8:00:05:78:e1:87:ca:24:
03:51:d5:28:68:40:75:8e:d6:ac:cd:46:f2:63:9c:26:e9:2d:
f3:01:01:c9:33:14:5c:b0:c2:8a:15:a0:e6:eb:60:a0:67:18:
1b:50:c6:a9:7a:e9:61:09:da:e2:b5:56:fb:a0:a3:4b:a5:81:
0e:7a:b3:23:21:f5:c8:a6:a4:d4:56:91:8c:76:18:0d:57:a3:
e3:34:7a:b4:5a:b1:5f:57:21:d0:e3:87:23:f8:5b:3e:5d:ba:
50:ca:0a:79:35:1c:79:ff:8b:d2:ad:ce:30:02:32:12:f9:9e:
1b:ee:34:22:7f:ff:bd:83:5d:aa:4f:89:f6:7e:a0:45:cd:73:
62:c2:de:97:62:2a:19:71:b9:3a:5e:65:9b:79:4a:ef:d4:eb:
65:a5:24:50:e8:57:63:e2:ee:f5:28:a9:0d:4a:e8:8d:97:25:
48:0a:ca:a0:12:25:d0:9b:18:5b:4f:93:77:03:80:95:b1:7c:
53:1a:d8:23:7b:08:a1:51:d3:ea:72:04:85:5c:32:b8:09:38:
73:91:1a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:15:57 2025 by rpki-client