Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c89be061-bffd-3d28-9af8-bd4ae691dc35.roa
File: c89be061-bffd-3d28-9af8-bd4ae691dc35.roa (raw, json)
Hash identifier: m88sywBSxlkaPdxEHs/kbx74q+UjBMn+bFZyuFlosfM=
Subject key identifier: 5D:FC:40:9B:76:D5:EA:A2:63:BF:F9:78:EF:14:D3:E2:19:7C:12:00
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7F6428FF3E75EB6559900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c89be061-bffd-3d28-9af8-bd4ae691dc35.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 12132
IP address blocks: 216.208.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:f6:42:8f:f3:e7:5e:b6:55:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=45932fe5-9eb1-46fc-bd83-cb96b53168e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:6c:7c:20:6a:d1:d8:bd:5d:32:82:15:7d:
20:c7:50:1d:3d:18:c4:ad:fe:1d:d2:fd:04:7c:8c:
9c:f5:82:47:22:eb:72:fd:15:47:00:be:07:bc:59:
1e:6c:3c:dd:28:16:4d:6f:30:fe:58:89:5d:a3:71:
de:cc:81:60:bd:8c:dc:14:00:dd:58:64:02:f7:62:
d5:91:89:7f:cc:3f:a6:f6:af:9d:2d:1d:19:c0:1a:
8e:4d:c0:ed:ea:0c:37:ad:a2:55:c4:62:be:31:97:
94:b7:18:ce:cc:d7:80:06:8d:79:1d:00:bd:5c:cc:
49:4e:ca:1e:be:d3:aa:25:eb:5a:1d:e7:72:e8:b7:
18:92:6c:0b:f4:b4:de:9d:6d:1f:c5:9e:7e:10:7d:
ae:b7:00:bd:29:a1:0d:8a:1f:8b:31:6b:51:5d:9d:
dd:00:c8:55:1f:c2:7d:67:6b:39:7c:cd:a9:25:29:
e7:7b:c0:27:f4:b8:3b:c4:0a:b8:d9:74:66:84:a7:
18:1e:6b:f8:15:01:1a:d2:6a:86:38:46:8c:6d:b6:
24:d8:15:5c:03:ba:01:e2:42:3e:35:7f:55:ef:90:
cc:45:75:56:f4:6c:20:e7:8a:ba:e5:03:c4:ed:14:
75:e1:d7:0c:c4:d8:0e:2b:47:e2:d0:64:71:9e:7d:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:40:9B:76:D5:EA:A2:63:BF:F9:78:EF:14:D3:E2:19:7C:12:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c89be061-bffd-3d28-9af8-bd4ae691dc35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:af:d2:5d:a5:98:58:be:c5:e4:9c:ec:dd:a8:b3:0c:00:79:
74:85:59:76:d9:ed:30:9c:88:8a:fb:94:3d:4a:e5:86:8b:23:
7b:2b:1d:7d:b3:c3:bb:b2:75:fe:72:43:9e:9c:64:25:45:b9:
cf:91:36:94:44:d4:eb:e1:28:fd:9d:bd:52:96:ae:88:8c:06:
11:3f:0a:e5:18:4e:ce:d4:03:ce:85:03:cf:56:8c:cc:07:5c:
5d:99:af:6c:f2:90:c1:0b:6f:31:9d:e6:7a:03:3c:61:d5:79:
29:2f:e7:c7:f4:0c:7e:15:2d:ae:6f:52:da:97:46:fb:95:b1:
5a:a5:c6:e2:73:45:b2:c6:5a:28:bf:77:b7:c0:79:14:e7:ff:
42:dc:e6:9f:be:01:a7:8f:43:88:b8:c9:e5:d3:a1:87:4b:38:
28:d8:45:3d:a4:3e:17:68:ce:14:9c:c4:d2:99:73:8c:da:ac:
d9:b9:ea:f8:f3:57:b6:ac:ae:85:b5:aa:9a:00:b2:05:a5:ca:
bf:fd:06:0d:90:69:ae:ae:b1:b9:3d:04:c7:2b:67:ec:0e:aa:
ec:4d:67:bf:0c:23:4e:58:a8:d7:a8:5c:c6:da:03:07:0b:d7:
f1:2c:eb:1e:ab:60:3d:1a:b8:69:82:e2:f5:36:50:b2:30:db:
b7:41:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:23 2025 by rpki-client