Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2213f0c-2652-3f0e-88ca-fba0cbbc959c.roa
File: d2213f0c-2652-3f0e-88ca-fba0cbbc959c.roa (raw, json)
Hash identifier: jy4CJeMy5qEHmkEoUQN9jBXkzOUKtAOvIaCEVLEdfZo=
Subject key identifier: 5E:E4:1D:D7:69:B6:42:F0:AF:4E:B6:E9:0E:91:81:A6:E5:5F:8F:1F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B5D60AA190DAEF8B73F540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2213f0c-2652-3f0e-88ca-fba0cbbc959c.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 7122
IP address blocks: 216.55.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b5:d6:0a:a1:90:da:ef:8b:73:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=40c42883-0e2f-4ce5-9b97-a26e422aacd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:a5:5f:51:ed:ce:f6:28:5a:e3:35:b6:f8:
6d:7d:17:c8:71:7a:54:61:63:a0:e8:5c:eb:3e:d3:
8f:38:47:93:78:bb:9a:f4:2a:70:f2:e2:8e:18:a9:
0e:94:2b:b3:2f:35:b6:18:07:d5:29:f7:43:58:69:
d4:1d:cd:0b:da:c4:c6:7d:97:8e:17:fa:63:f8:9e:
9e:22:4a:7f:09:c5:8d:29:fc:51:18:30:01:a7:fb:
44:bc:ac:e4:3c:e1:4c:22:ef:9b:fe:b8:32:8f:ae:
43:32:3a:43:6c:f2:99:1e:6d:ab:bd:4b:ff:a5:b3:
7b:9b:bb:0f:1e:08:59:1d:68:35:05:e8:1c:6d:f6:
db:06:f1:4d:98:19:a4:ed:96:9f:3a:cd:63:50:1b:
40:3f:46:6c:0c:62:fc:d4:ec:c6:db:71:5d:ef:e3:
46:f5:37:b0:18:96:10:74:30:c5:16:a9:a2:02:8e:
44:cc:d2:7f:fd:85:1f:ce:ae:7e:6c:c4:a2:0e:69:
6b:21:01:f2:0a:5e:ed:28:3d:d7:8e:8c:e8:e3:4e:
22:4a:e0:09:ae:4c:da:84:db:08:bc:d9:69:eb:41:
32:dd:e1:d7:1a:5d:b8:4b:1e:6c:ba:bb:ac:62:a6:
f4:d2:8e:f4:12:06:3a:80:a9:31:67:af:d4:bf:e5:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:1D:D7:69:B6:42:F0:AF:4E:B6:E9:0E:91:81:A6:E5:5F:8F:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2213f0c-2652-3f0e-88ca-fba0cbbc959c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.55.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:d4:ed:b5:57:39:05:c4:36:4a:af:14:30:ef:23:62:1b:b4:
7d:19:55:ff:c5:9c:3a:4d:26:24:39:28:d3:24:c1:f5:33:64:
14:51:13:1c:0b:c2:0d:43:75:fb:c4:6f:09:96:f7:d9:7f:df:
7f:4f:df:fd:30:5f:ae:62:f0:64:8d:7a:f3:bb:d0:78:b5:72:
cf:af:09:9e:67:41:d8:8e:fe:e0:a7:80:fc:16:aa:7c:f4:d3:
cf:e8:7a:cd:60:0e:d0:e2:6a:6e:1d:a4:6f:99:ff:75:a5:db:
60:0a:2a:b2:bd:af:80:3f:dc:60:3f:19:15:81:fb:6d:a4:c8:
e5:40:8e:d3:0b:8f:53:49:f8:ba:af:5a:4f:81:f8:b3:65:43:
8b:12:6b:be:1f:63:29:b8:14:c5:66:15:93:39:b9:a0:a5:98:
4b:cd:7c:f3:90:b3:3c:1a:82:4b:f9:99:5e:1c:e6:38:8d:a9:
2e:8d:6f:2c:36:f5:84:87:84:fe:ee:ee:b9:04:8f:7b:20:4b:
00:14:a7:bd:4b:b6:5a:df:cf:34:c0:38:7c:ed:ed:27:fb:a0:
bf:3d:7a:be:6d:7a:02:9d:80:44:9b:0e:be:44:69:17:59:17:
a9:5a:83:1a:40:c8:dc:c3:e5:48:a7:38:23:6b:17:b2:28:bc:
58:17:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:51:56 2025 by rpki-client