Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d36f3fef-5893-364e-ba65-17f59cbcac00.roa
File: d36f3fef-5893-364e-ba65-17f59cbcac00.roa (raw, json)
Hash identifier: 5T1OPAVwlrvE7EYxx4MNH4FTWUFLPiOs7dzdte70RDc=
Subject key identifier: E0:31:91:E3:F8:58:C9:B9:FC:7D:86:2F:C4:67:6A:28:5A:35:7E:1C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6D99E6D1DF049B03C1800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d36f3fef-5893-364e-ba65-17f59cbcac00.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21723
IP address blocks: 207.35.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:d9:9e:6d:1d:f0:49:b0:3c:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=17a20e01-50a8-483a-a6dd-803d12eb8c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:ed:85:75:14:83:5c:59:07:9b:37:66:9f:
67:6a:6d:c1:fd:2e:af:ca:2c:0d:c9:fb:ec:5f:96:
34:22:67:78:c0:f1:8a:f1:0a:0f:f0:93:74:ff:ba:
21:ca:38:6a:66:ee:80:ec:9d:b0:38:84:ef:e0:95:
ef:2a:0e:8c:56:f0:00:78:3a:81:ac:ae:41:4e:1a:
79:f7:fc:52:0f:20:e6:1b:fb:67:e3:b3:b1:a5:0b:
3b:a6:cb:ab:40:cb:9f:88:b6:b2:c9:4e:57:25:d7:
91:a9:80:d6:2a:66:4f:83:e2:4c:81:e8:53:3a:35:
ac:06:0d:2f:0f:3b:f5:6d:9e:51:eb:1c:55:ab:4f:
2f:5e:06:7b:b9:d2:77:84:54:2c:6c:3d:29:d3:7c:
42:a3:61:98:8a:81:b8:8a:ca:ed:8a:e0:8b:48:db:
9c:63:e3:bb:71:98:53:c5:76:9f:a0:42:83:af:3f:
d0:e7:45:d0:60:b3:68:cc:4f:8d:d8:49:c9:db:4a:
93:21:d9:3f:6f:fb:75:16:ca:49:15:ac:59:9f:75:
fb:40:f7:02:d7:db:25:37:a1:14:06:71:fe:5d:53:
ee:a4:29:73:52:6e:cc:1c:8b:98:4f:94:3e:74:0c:
fa:67:73:a7:08:e1:e4:c8:d8:00:88:ac:9d:f7:34:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:31:91:E3:F8:58:C9:B9:FC:7D:86:2F:C4:67:6A:28:5A:35:7E:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d36f3fef-5893-364e-ba65-17f59cbcac00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:05:df:df:4f:b9:8f:c1:cb:c6:0c:49:f4:cd:f5:f1:f3:d6:
fe:32:b1:fd:55:f7:e0:be:8c:7e:a9:86:d5:4a:fd:9d:6f:61:
eb:69:c1:59:e6:76:9e:0e:27:c6:aa:53:58:49:d2:af:57:58:
12:6d:9b:83:f2:17:ea:3a:a3:fe:13:8d:dc:25:1d:9c:68:13:
c0:97:fa:25:df:c0:23:9e:84:73:22:b6:07:ef:87:1d:2a:f3:
78:41:0c:ee:f2:23:dc:c7:bb:18:cc:df:89:64:4f:a5:52:ba:
9d:a7:fc:e4:02:c7:cb:a3:6d:4b:e5:e7:6d:8c:54:7f:4e:1e:
0a:12:82:c4:aa:ae:f8:d2:f4:24:5c:d3:c8:3b:02:70:f1:85:
b1:de:5a:91:62:2e:d6:a7:ab:01:4b:a4:f8:c2:7c:c6:13:3e:
17:d2:aa:6c:ad:15:34:ba:e9:f5:b3:10:dc:82:dd:42:9b:a6:
10:5c:0c:f7:eb:47:90:38:cd:1c:8f:8c:bf:74:d1:c8:c1:2e:
ef:5c:5e:3a:13:81:49:42:5d:32:dd:e0:8a:b1:63:cc:48:fd:
ce:35:2d:e5:c8:3f:83:7c:f4:22:85:c8:22:12:5d:d6:d9:c1:
4e:89:11:0b:ec:36:c1:10:d4:2e:ea:3c:e7:df:92:9c:16:5f:
b0:64:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:18 2025 by rpki-client