Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c775b3a0-ab56-30fd-b525-691cba170956.roa
File: c775b3a0-ab56-30fd-b525-691cba170956.roa (raw, json)
Hash identifier: rMJy+6tsHWMYO+LaHSY+vw6ZlBvC2uULDd5wO1aeCAQ=
Subject key identifier: 75:10:A3:39:6C:63:F7:E8:12:F3:F2:F7:37:5B:F6:0C:04:47:4F:A6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFF0DBBE26C488F6D1B910
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c775b3a0-ab56-30fd-b525-691cba170956.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:f0:db:be:26:c4:88:f6:d1:b9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=2299d09b-a8f3-458f-8878-a99b4f0f79b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:c5:70:c2:5e:40:51:4e:79:aa:b0:c3:21:
dc:66:3b:d5:68:92:ad:62:16:ae:8b:81:56:f6:49:
b3:c4:b9:ef:7b:a3:7f:84:78:ab:0a:6e:a9:d4:1b:
12:95:33:30:3a:1e:8f:2b:27:f2:fe:36:4e:06:70:
5b:70:c5:a7:b3:d1:d1:05:9c:98:60:51:b8:22:7b:
9d:ea:7d:4a:83:66:c5:1c:67:af:7d:c4:68:aa:eb:
37:62:f4:cc:91:b2:3f:ab:e0:5e:62:40:51:80:9e:
3f:61:3b:92:bb:56:ec:b6:03:68:b3:d7:9d:e4:73:
19:80:b3:0e:c4:fe:76:d6:d9:4d:51:ea:3d:82:3f:
3e:25:37:95:7e:c4:eb:2e:68:15:3d:d1:99:25:62:
ff:33:98:3a:a3:16:6d:12:ff:27:4c:de:fe:2e:c1:
e8:f0:b1:9b:5e:18:28:05:bb:6e:44:d6:d0:bb:06:
1a:34:36:93:a9:6e:86:d3:83:6e:60:d5:c9:48:41:
a9:d0:bd:a7:39:a5:85:b6:9b:cf:84:57:4f:df:16:
6c:68:6e:06:89:3b:88:75:43:8b:77:2e:8f:5d:69:
21:d2:9c:de:2f:8a:cd:9c:b6:b7:c8:8d:d9:67:9d:
f3:94:80:a9:5c:d0:7a:9f:1d:b6:de:65:38:6d:65:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:10:A3:39:6C:63:F7:E8:12:F3:F2:F7:37:5B:F6:0C:04:47:4F:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c775b3a0-ab56-30fd-b525-691cba170956.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:72:f2:0e:a9:14:ce:b4:75:40:96:ec:35:ac:44:d7:ab:bd:
a7:76:3c:1d:6d:d6:12:c0:a2:8d:ec:ef:39:f5:33:4d:05:a2:
a3:ec:67:d0:55:b9:b8:cf:d1:7d:b9:97:3a:e9:32:23:f9:03:
aa:8f:d5:9c:f3:b7:77:6e:10:5a:0e:67:d0:b1:4e:d5:a9:50:
81:a9:77:9b:03:61:79:e0:83:b2:5b:ec:a6:72:47:0a:a5:f8:
5a:b9:fa:ef:b7:0f:2d:8c:a5:d1:9c:52:1d:43:18:76:64:9e:
9a:67:ac:0f:ea:ff:15:c8:69:8c:d0:70:d0:4e:b6:22:23:f0:
78:7a:d2:65:26:84:87:8a:8d:da:83:fd:00:bc:31:f9:18:33:
41:fc:24:15:ff:a9:3c:fb:d5:96:90:ab:19:90:3d:ad:bd:aa:
88:51:67:56:2a:8c:10:88:3f:62:e1:e3:f1:88:0e:4f:48:3f:
c6:fd:0f:97:ba:b2:05:bf:e5:a3:04:c6:6a:8c:e0:df:60:aa:
b4:b8:d7:b2:2f:7e:09:fb:41:8c:a3:a4:e4:95:f2:39:4d:80:
f8:29:5b:00:69:6f:78:5d:88:cb:d5:9c:e0:03:dc:55:ab:fe:
dc:ad:95:d7:18:fc:cf:f2:2d:85:42:5b:a0:8a:69:53:12:6c:
a6:af:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:30 2025 by rpki-client