Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c366fe64-3dff-318b-a0ca-f9e63ae85fd5.roa
File: c366fe64-3dff-318b-a0ca-f9e63ae85fd5.roa (raw, json)
Hash identifier: ZgNF1kLVBSlfm4qBPVFdYRApThj99waZEJFJofU3LPE=
Subject key identifier: 16:BC:69:C0:67:CB:A9:90:5C:72:C5:97:29:7D:B9:8A:6B:A4:79:EB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B777B09C7C2C43834F9A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c366fe64-3dff-318b-a0ca-f9e63ae85fd5.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 11831
IP address blocks: 209.17.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:77:b0:9c:7c:2c:43:83:4f:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c33ff988-c9bc-43bf-bc31-31b75ced949c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:a2:3c:8e:54:81:ae:fd:19:4e:f1:04:ab:
1a:02:05:80:ca:12:24:c7:09:22:59:4a:18:1e:4c:
72:41:b4:f1:4a:a1:93:59:75:d1:4d:f9:d5:92:bb:
2b:05:76:00:ea:e4:0d:f6:55:6c:d9:30:71:45:97:
a5:8f:fc:56:47:63:21:c8:0d:5a:1e:a1:e3:40:2c:
99:09:c9:18:60:6d:b1:6f:36:05:cc:d6:c3:cc:a5:
10:83:12:c7:79:5b:93:e2:e8:5b:81:bd:2c:21:a2:
49:32:8c:29:c0:21:12:72:b4:44:0e:b9:72:6a:67:
03:e9:fc:94:c4:e4:76:8a:22:4d:27:cd:da:62:3e:
15:b5:05:04:bd:6e:f6:3b:11:87:24:aa:2a:b2:e5:
86:2a:ff:00:58:9f:b1:a1:c0:ac:f3:4c:be:58:03:
a1:4a:47:e2:20:81:65:b4:2e:12:da:9b:8c:c3:0f:
8b:ae:ec:19:ce:9a:8b:d3:97:c8:db:cb:77:21:ea:
db:87:fe:ca:d4:a3:16:7c:3d:37:ae:5e:89:3d:53:
29:9a:0a:32:7f:e2:4d:7b:b2:61:4c:38:7c:a4:f5:
e8:86:e9:61:97:e8:65:5e:0a:37:d0:05:42:e0:a9:
de:f5:28:4d:42:10:57:59:0a:48:5f:c4:b4:58:70:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BC:69:C0:67:CB:A9:90:5C:72:C5:97:29:7D:B9:8A:6B:A4:79:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c366fe64-3dff-318b-a0ca-f9e63ae85fd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:7e:3a:4f:48:01:50:f7:32:4d:21:77:10:6d:20:05:78:4b:
d3:1c:2e:5e:ce:f2:f4:da:0a:da:a3:ad:62:5a:1f:77:e6:8e:
b2:6b:b2:85:44:73:3b:e4:09:ac:38:f9:2a:50:fb:34:9e:bf:
5a:c7:7c:be:11:ce:3c:89:dc:69:4b:26:ba:25:01:6d:10:89:
6e:24:f9:f8:c5:e5:49:f9:8e:47:0a:72:1e:f4:e8:0c:7e:85:
55:7a:f5:bf:32:ab:8f:54:6b:09:47:fb:23:61:e1:40:de:d4:
6f:79:d0:cb:9f:99:f1:6f:00:c1:33:b1:65:e9:69:cb:46:23:
90:d4:2c:ac:fb:42:dc:d5:a8:bc:45:68:49:e2:a7:83:83:9d:
81:29:84:14:07:d4:61:22:e7:8d:16:28:78:e4:6a:f7:e7:ec:
09:87:4f:f1:64:d3:e3:94:3d:0f:83:7e:60:66:77:ea:be:4a:
6a:b8:46:9e:b0:14:1a:7b:86:f4:77:c1:3e:19:3b:4e:e0:88:
29:d6:e7:f9:96:fc:3c:ab:c5:e0:9a:6f:9c:0a:2f:8e:1f:19:
79:bc:bb:4b:e9:64:ce:50:00:47:7f:77:b2:71:63:c0:35:87:
ef:82:93:e3:48:0b:eb:6c:fd:96:b3:05:5e:84:36:4e:e5:1b:
74:0a:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:49 2025 by rpki-client