Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c6f5a425-50bb-38bf-971c-0096ab243425.roa
File: c6f5a425-50bb-38bf-971c-0096ab243425.roa (raw, json)
Hash identifier: LyIM3fEjfJdVRIevrTGSjEsmb8pDox6RRLuLJjne3oY=
Subject key identifier: CA:B1:21:6E:FE:BB:C8:E1:D8:A5:59:6E:6A:6A:DB:16:9E:D4:91:50
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6354221DFEAA15F05EB60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c6f5a425-50bb-38bf-971c-0096ab243425.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:35:42:21:df:ea:a1:5f:05:eb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=e6156402-f12e-4cb8-b323-a0a9940b0e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:b5:35:a8:0a:10:d1:f9:c7:f6:01:0e:3d:
aa:a1:fe:d9:9c:1f:74:bb:75:bf:10:41:f1:5c:58:
d9:cf:4d:ac:90:06:09:72:f0:ef:3d:4d:69:42:c1:
29:4e:b8:42:79:da:5d:4c:90:0e:4a:1a:51:3a:16:
37:06:00:c3:04:e3:e9:9e:45:c9:9c:43:ae:c1:af:
03:62:c8:41:be:17:6f:fb:8f:76:7a:45:fa:fe:b7:
9f:5f:45:10:08:fd:fa:e5:3b:85:07:24:47:f4:d1:
aa:73:09:a5:3d:ca:e8:9a:9c:3a:16:f6:26:2a:2f:
28:4c:c4:49:ba:8f:4d:2d:84:ae:4e:28:0a:af:41:
18:74:17:48:62:c2:04:18:0a:ed:7e:9e:38:7f:d3:
10:4b:63:af:f0:1f:70:b6:ca:54:85:02:85:43:ee:
4c:2d:b6:94:68:07:d8:4f:02:2b:1f:3a:73:cd:03:
18:34:12:1b:32:1d:ab:15:53:8b:00:a6:fa:28:45:
16:32:91:07:20:c0:f8:4b:d9:07:eb:ea:3e:49:da:
e2:e1:e2:d8:26:15:bb:71:cc:a3:9e:81:02:18:e0:
bd:22:20:8e:d7:a9:d9:9b:e3:e1:c3:6e:ff:51:a8:
d3:d1:2f:b3:9e:92:60:7f:9d:01:01:a5:29:a3:fb:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:21:6E:FE:BB:C8:E1:D8:A5:59:6E:6A:6A:DB:16:9E:D4:91:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c6f5a425-50bb-38bf-971c-0096ab243425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:10:2b:74:5f:14:6b:00:bd:23:2c:4e:0a:9a:34:10:ae:73:
6f:64:57:dd:26:e1:df:f1:96:a3:92:18:ea:1e:e3:dd:ac:eb:
77:eb:1a:96:19:68:ca:da:4b:e2:87:02:12:d4:5f:c4:52:9e:
aa:5f:85:bd:3b:17:6b:b8:93:79:0c:95:33:c6:00:a3:88:88:
09:85:26:f2:2d:ba:3d:81:a7:75:43:7c:06:68:ff:ff:b2:03:
4e:8e:9e:df:fe:7b:89:42:92:01:81:8b:53:b3:25:e4:09:9a:
e3:36:75:a2:a0:49:d3:2f:d2:b4:5e:36:85:46:e8:73:bb:10:
6b:d3:cf:38:9c:f8:d2:e9:13:84:ef:25:52:7b:84:e4:0d:d5:
7d:52:63:7d:61:72:d6:4e:13:f6:42:7d:46:60:72:92:6f:e8:
66:f6:59:02:27:7e:18:0d:b2:18:d3:31:dc:59:66:d3:49:7d:
65:35:a2:2c:59:82:a5:bf:d5:73:a4:7b:fd:2f:7b:7f:a1:22:
c0:74:d8:21:13:8f:b1:7f:c7:49:3e:65:48:fb:67:b3:23:b4:
5e:70:bb:a4:98:02:ce:db:8f:b6:b4:df:e4:d1:b4:38:9a:47:
0b:46:1b:85:17:01:30:61:e3:cc:cd:86:69:71:92:97:60:e0:
61:52:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:14 2025 by rpki-client