Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd9e80bc-0022-3197-9228-aed43b51e6db.roa
File: bd9e80bc-0022-3197-9228-aed43b51e6db.roa (raw, json)
Hash identifier: JE+6q0GtiBrLpW0jYFUMhe3R+3Y8GQSrTdZPJolkBUQ=
Subject key identifier: 53:44:91:63:28:61:24:19:42:D5:69:A6:3E:88:24:BE:97:6B:A9:49
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2A3C3FDD9D66C8526C3880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd9e80bc-0022-3197-9228-aed43b51e6db.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21723
IP address blocks: 206.47.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2a:3c:3f:dd:9d:66:c8:52:6c:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=8570bb4a-5ae7-4322-8f2b-113ed5140eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:c9:47:37:b5:b7:18:7b:86:a8:9b:16:fb:
db:0f:f7:fd:e7:f0:74:f6:df:b1:92:65:75:40:97:
63:21:4f:2e:98:02:22:4d:41:24:df:74:52:53:be:
1b:a7:0d:6d:14:7c:59:a7:f2:94:91:4e:02:37:0c:
e1:69:02:20:39:cc:6f:c9:82:72:ac:45:fb:30:1b:
cb:5a:fa:31:0e:d0:c9:b1:ba:59:3a:1b:e6:59:c7:
d0:48:57:36:a0:b9:49:fc:73:d0:7c:15:28:84:a0:
00:8f:de:d1:1f:65:a1:77:67:32:a7:e1:97:ab:95:
a1:06:c4:79:c5:8d:f2:96:b1:2a:51:8f:8d:25:6e:
a6:ab:8b:aa:f4:8a:17:66:b8:8e:52:b3:c7:46:5c:
4a:13:e0:02:ff:b7:a4:8d:67:2b:e9:29:fc:56:2c:
22:8c:41:c3:6b:2d:89:a3:3e:00:8c:e8:ac:2e:69:
31:35:bb:29:98:24:65:3b:aa:95:19:ad:f2:9d:d6:
99:5c:70:54:8b:ab:3f:53:98:9b:6e:87:6a:2a:dc:
c3:02:af:c7:7d:70:69:87:a2:e7:d7:9b:8e:08:ea:
53:62:ac:a2:8a:73:00:f8:29:47:65:f4:07:1c:28:
0f:6e:63:22:31:4a:51:26:0c:0e:e6:b0:bb:87:ad:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:91:63:28:61:24:19:42:D5:69:A6:3E:88:24:BE:97:6B:A9:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd9e80bc-0022-3197-9228-aed43b51e6db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:9f:be:05:b3:00:70:a9:a3:18:3d:9e:fe:11:39:72:21:3d:
ae:06:3e:e0:23:1b:89:c0:1e:2c:cb:81:78:ac:c1:3a:e7:87:
ae:d6:07:78:33:c3:bb:9c:3e:fc:97:e0:62:96:82:14:09:50:
61:94:0f:01:2a:52:86:e0:a3:0a:70:bd:a9:9d:58:85:5c:60:
5a:59:89:12:4c:5e:d2:c5:25:23:2c:62:e8:88:82:7c:b6:8b:
b9:eb:33:b3:c4:3b:34:98:87:be:d8:8f:19:f3:1e:15:ed:be:
fd:ae:d1:21:cd:0a:55:2d:99:aa:57:ff:02:7f:0e:62:c7:e4:
90:2e:41:bd:82:b7:fc:c0:10:cf:d6:c0:12:3d:75:79:9d:cd:
b1:6e:08:b4:db:ed:08:3c:0d:ba:aa:c3:ca:84:51:4e:04:0c:
73:17:4d:8d:29:2d:fa:d2:18:8f:cb:c1:1c:78:de:52:8e:eb:
43:b9:dd:85:7d:ff:15:df:21:6f:71:51:d2:36:17:b6:f2:81:
b6:71:cb:37:21:78:58:2d:29:19:fb:c9:93:57:61:31:5f:d5:
0a:1c:5a:01:f5:b4:e9:c0:65:16:ff:b8:f2:2f:9c:3b:10:6b:
75:d7:ba:2b:bd:e8:25:39:a9:1c:73:4a:3a:d4:4d:27:a3:5d:
dd:f3:e0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:26 2025 by rpki-client