Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3259b3d-dbad-357d-9d1a-74d7c76452f7.roa
File: c3259b3d-dbad-357d-9d1a-74d7c76452f7.roa (raw, json)
Hash identifier: BvZgeyl4AOHKgyRPtn43uV5hhgWD7+F6d2JIjEZnoTM=
Subject key identifier: 05:2D:5A:F6:90:80:55:FC:2F:21:3B:F2:B3:C0:00:B7:2A:F1:73:39
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6628AFF6E9D190CAB8B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3259b3d-dbad-357d-9d1a-74d7c76452f7.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 33017
IP address blocks: 204.101.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:62:8a:ff:6e:9d:19:0c:ab:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=335d0e52-8ae3-4dc0-9223-1887c779ed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:5e:32:3f:f6:bd:74:ec:34:d9:a8:20:2b:
60:be:36:88:da:17:e8:51:a4:c3:b1:3e:a8:3e:9e:
91:b4:dd:11:33:fb:e7:69:70:f9:45:43:1a:c3:56:
4d:82:7f:5a:77:17:b7:8a:b3:2b:86:4d:df:8b:c2:
07:c4:26:aa:8c:10:4e:c8:7f:ec:09:d6:66:b9:c8:
08:35:0d:bf:c4:b3:72:70:41:f1:8d:17:0d:a0:43:
80:e3:ce:2f:4f:a0:88:22:4f:0f:db:26:23:97:9f:
9a:7b:11:11:e8:bc:ae:35:4c:f4:38:5d:eb:5b:ee:
de:bc:7f:8d:d0:9b:c9:4c:43:ae:54:d2:2b:ca:24:
a6:9d:af:f5:92:5d:ce:98:aa:95:c5:ac:2c:4c:a6:
dd:c8:e1:b0:e0:71:56:8f:1d:92:22:92:f6:b0:08:
e8:7c:15:14:06:63:75:7f:35:21:b2:94:d2:dd:a5:
35:6c:b1:ac:1c:49:41:e3:bb:e0:da:9a:d4:5a:b2:
91:69:45:57:27:ee:27:d0:5e:0c:0e:4b:27:9c:58:
65:a8:b0:ea:15:6c:99:25:e4:8d:4b:fa:10:2b:9d:
0f:c0:56:24:43:96:71:d0:20:eb:45:66:ba:c2:ba:
9b:97:88:88:44:a7:11:f4:8b:4a:c6:2a:50:05:d1:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2D:5A:F6:90:80:55:FC:2F:21:3B:F2:B3:C0:00:B7:2A:F1:73:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c3259b3d-dbad-357d-9d1a-74d7c76452f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:6e:ec:1a:4f:fb:b5:96:8f:4c:4a:7a:98:8f:26:ae:71:02:
07:b6:5e:75:21:18:0f:44:b6:bb:dd:3e:81:63:82:75:a1:cf:
bd:f8:7f:fc:7d:67:09:6d:17:9b:20:8f:f6:87:61:3f:a0:b0:
be:3c:9d:6f:02:2e:be:e2:06:a6:53:af:ef:10:bf:d3:ad:f0:
72:3d:d1:3c:75:ef:46:0e:0e:f6:4f:6b:a7:50:0d:d9:d9:1a:
99:62:32:3c:1b:d7:7d:d5:3d:be:e7:bf:e8:2d:15:00:ff:9a:
cc:ae:fd:05:00:10:0d:1f:ff:d1:70:f5:b0:8f:9e:34:66:f0:
db:fd:8c:36:56:06:60:c3:8f:56:c3:68:49:0f:81:a7:76:48:
46:ba:1b:de:03:7e:4d:91:0a:a1:c7:a4:ca:53:72:b0:7a:74:
1d:ae:23:9b:e8:61:62:7f:c2:65:8d:85:a9:c0:ff:55:5e:e1:
51:ec:58:74:f4:03:24:22:08:0c:e1:de:1f:48:2b:47:47:03:
29:ef:a8:2d:41:37:06:a8:74:8a:2a:e8:4a:0b:93:b0:67:25:
f4:a7:ed:30:a5:77:7d:f3:5c:16:56:be:fa:59:a0:3d:84:1f:
bd:8d:0f:2a:a4:50:54:7e:31:3a:6b:92:fa:80:8d:b1:56:9e:
80:2c:15:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:48:41 2025 by rpki-client