Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb9ce834-3e59-3bf5-8ac0-9ebddde225ff.roa
File: cb9ce834-3e59-3bf5-8ac0-9ebddde225ff.roa (raw, json)
Hash identifier: if23KIG5WtTQAaOkKy4/UQt+bOCQ/kM8Q6PiGbcOPgw=
Subject key identifier: 2A:44:2C:90:C5:28:D5:E2:BC:AF:AB:63:3D:6C:8D:10:53:82:88:C9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2A770672211845EEF9A000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb9ce834-3e59-3bf5-8ac0-9ebddde225ff.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21552
IP address blocks: 207.35.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2a:77:06:72:21:18:45:ee:f9:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=5bc7e250-34ce-43ab-8741-7ccc6d2d37ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:8b:d6:5e:e1:d4:0b:56:5d:65:30:4b:2e:
03:51:68:0a:b3:a1:77:a5:bc:95:af:64:d4:c7:89:
b4:63:cd:a9:a2:7c:61:1f:ef:95:79:9e:6a:72:0f:
98:c7:43:9a:dd:c3:ef:f5:21:7c:63:98:bd:bc:28:
4d:c3:78:fa:ca:21:e8:ec:04:87:c3:6c:c6:36:f1:
cd:e6:a9:85:f1:94:af:28:9f:9d:0e:d5:6c:5f:0c:
69:a7:bd:df:eb:03:fd:33:32:b3:e2:f0:a5:c0:a7:
92:a3:ca:30:61:6f:cd:c0:84:d6:20:d9:81:12:6c:
a3:e6:9a:8d:ee:06:61:c4:52:76:5e:c1:93:90:20:
87:33:0d:b4:81:51:aa:d3:e0:26:c6:fb:36:39:07:
ba:86:2c:c5:52:36:5d:5c:7e:72:d3:6b:2c:34:4a:
37:3e:36:ac:75:96:a6:15:b8:40:45:aa:4b:51:06:
0f:2f:b7:33:24:44:87:f2:91:1d:8a:1d:ab:b7:66:
be:f5:6d:35:36:c7:b1:c6:65:fd:a8:42:89:e9:b9:
bf:a0:f8:11:f4:19:3a:4d:d8:1c:17:f7:88:7e:56:
eb:79:22:f2:79:cf:6e:a2:3e:3c:32:d8:63:60:d8:
76:b3:8f:e6:74:44:24:c3:88:57:1c:a1:40:29:6c:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:44:2C:90:C5:28:D5:E2:BC:AF:AB:63:3D:6C:8D:10:53:82:88:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb9ce834-3e59-3bf5-8ac0-9ebddde225ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:bd:7a:f7:9d:7a:b1:0f:8f:5e:09:5e:7c:cf:97:43:59:b0:
f1:f6:a2:0e:e2:d2:22:72:ec:eb:55:26:7d:3f:7a:f7:19:50:
19:6e:03:70:84:8d:ea:e7:d0:69:c4:6c:19:01:a0:bd:cf:3a:
3a:e7:6d:16:71:ab:79:6a:ae:ba:9b:47:f7:a2:16:90:64:24:
0b:13:40:9e:8a:0d:e9:c5:05:34:e0:a1:49:06:af:dd:2a:55:
5f:c6:8c:03:ed:d7:d4:35:e8:da:2c:40:f5:e5:d4:38:8e:51:
eb:d8:db:25:39:65:4d:fd:3a:1c:52:4e:0c:6e:92:54:92:95:
0a:23:b9:c7:18:f5:ae:48:a2:f4:61:5f:ac:34:6c:4e:2f:4c:
d2:01:2c:d8:fc:2b:57:0a:fd:7d:88:c1:2e:df:f8:cf:ee:06:
7c:70:8c:e7:71:a0:07:66:5d:ff:79:ce:a5:17:38:ea:2e:60:
4e:31:07:13:bd:83:03:e0:15:93:b8:a2:a1:e0:1e:25:2c:49:
82:25:6b:ca:84:34:6a:80:0c:6a:83:71:99:7c:87:f4:d2:5e:
16:b9:87:2a:e5:71:13:bd:96:41:85:38:8b:97:b2:21:9d:e0:
d7:e9:da:1f:b3:7b:8b:97:ee:8d:34:b7:4d:da:09:d7:d3:fb:
a5:37:41:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:58 2025 by rpki-client