Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c0c6733f-5bd4-39f8-a173-0ae9cadd9e41.roa
File: c0c6733f-5bd4-39f8-a173-0ae9cadd9e41.roa (raw, json)
Hash identifier: NoKPt+hQwZ3skzw5Hv8uusUISpg1MAPZ3TfnAJ7d/IY=
Subject key identifier: C9:84:E3:3A:13:4A:C2:8E:3D:B2:EA:E3:E0:B9:70:80:42:86:74:8A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B477D1A47BE74439F53C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c0c6733f-5bd4-39f8-a173-0ae9cadd9e41.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 394422
IP address blocks: 205.200.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b4:77:d1:a4:7b:e7:44:39:f5:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=fe066167-aaa2-49f2-9efa-b85a187a7111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:5c:7f:7a:21:51:72:a8:d1:a8:35:11:94:
f5:46:1e:00:81:e3:29:ca:74:fd:e2:68:ff:04:ab:
80:e7:c2:15:32:fa:93:87:21:16:7c:56:ec:6a:06:
a0:87:ae:a5:cc:a3:f4:1e:34:9d:7a:67:01:f2:36:
94:06:f6:fa:68:e7:af:9f:e7:87:5f:32:f8:e5:10:
f8:26:45:e9:5c:06:9e:fc:c3:60:1a:e9:e4:39:76:
6f:66:1e:75:d5:33:a7:f3:81:ec:17:25:e5:82:38:
16:bc:9d:4c:08:78:ab:72:c7:32:b0:22:44:86:e3:
f8:c6:78:04:45:59:ce:a5:c8:87:c7:7e:44:82:34:
58:65:90:ef:8a:57:ee:ed:e2:1d:6d:46:c4:f7:7b:
fa:5d:cf:e0:43:85:bd:8e:a4:b8:32:22:de:12:15:
41:19:f4:c3:c0:63:2f:b9:35:a1:c6:e1:85:2f:04:
d9:6f:92:a2:85:dc:b4:64:9d:02:ca:28:98:46:ba:
fc:37:25:4d:f3:cb:ee:e7:51:5b:f5:aa:48:a3:30:
46:7e:8a:f9:18:5c:b7:83:47:02:86:a1:98:20:23:
6e:b4:2e:1d:33:fd:8b:15:9b:44:97:3e:8d:0d:8e:
45:ed:3e:2c:1d:eb:b9:75:54:46:9d:ac:3a:59:9d:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:84:E3:3A:13:4A:C2:8E:3D:B2:EA:E3:E0:B9:70:80:42:86:74:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c0c6733f-5bd4-39f8-a173-0ae9cadd9e41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
205.200.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:2f:af:d5:98:f3:77:ea:5e:2c:d7:de:a5:2b:24:6c:c6:90:
cd:14:65:08:cd:0d:c9:04:3b:0c:fe:89:31:3a:c9:cd:f0:88:
ec:d9:71:0e:64:bf:75:6a:88:e2:a4:b1:58:0a:1d:4b:15:85:
2d:70:7b:d9:49:e2:c0:02:d4:9c:53:e1:04:50:89:28:36:a7:
d5:b5:7f:9f:6a:68:1a:ae:1b:93:0a:99:da:96:a8:b3:9c:44:
73:b0:aa:29:ce:d5:d6:7f:6a:03:81:3c:16:40:79:3c:c4:9c:
a3:cd:56:5a:18:25:d7:32:8c:0c:d3:85:11:86:36:ea:ed:4f:
77:b9:36:80:c5:25:c4:e0:1b:e6:bd:f9:9b:69:11:10:de:b8:
fe:ff:dc:fa:9d:74:c7:6d:15:db:85:f0:38:cb:1e:ca:0a:2e:
2b:76:82:05:3c:75:b6:e0:16:89:96:4f:8b:ab:2f:e6:02:7d:
0a:63:1a:07:88:07:54:23:a1:c3:e6:43:a4:b4:86:19:40:3a:
2c:5a:83:3a:12:00:2a:15:2e:65:42:d1:a5:cc:76:22:d5:0d:
b1:29:77:4e:28:35:de:ae:54:c6:66:76:df:a6:d4:aa:31:a4:
91:d3:37:65:af:58:59:ad:d9:54:13:b3:0f:15:3a:e0:f1:c6:
b1:0f:86:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:05 2025 by rpki-client