Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d689eb88-d780-34c7-8325-a963b8e4e75b.roa
File: d689eb88-d780-34c7-8325-a963b8e4e75b.roa (raw, json)
Hash identifier: aSRzRH09CcDcLC70As5DFsQnv6ONmn1poh4TSACK8Fg=
Subject key identifier: E7:8C:20:61:78:0C:82:92:C9:5A:15:23:49:D2:4D:43:D0:8F:A3:AD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B089A449BE127F867D500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d689eb88-d780-34c7-8325-a963b8e4e75b.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 30336
IP address blocks: 207.236.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:08:9a:44:9b:e1:27:f8:67:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=13425701-6724-4346-86a3-d47945c0ae00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:9f:28:23:bd:a4:3c:6f:6b:c1:2a:62:4c:
48:60:2a:e5:be:ae:de:9b:44:15:8f:1f:ff:ed:0c:
67:bf:7c:eb:a8:f3:6c:24:08:26:67:5f:a7:2c:8a:
c2:ac:15:b7:20:e1:fb:f1:ca:7a:cc:d2:16:05:f6:
46:f4:f2:ba:8f:49:7d:fc:8d:08:88:9f:6c:bd:f7:
6b:30:9f:0d:4d:5a:cf:de:99:ef:2d:cf:13:08:bb:
99:a8:72:ec:5d:16:3c:e7:09:45:f1:6d:f7:54:37:
34:0b:a6:ae:76:17:b1:44:46:53:fd:5d:84:28:ef:
94:7a:e6:c9:d6:a5:bf:4f:26:a9:fd:55:4f:ff:83:
17:44:07:3f:d0:80:c2:bf:23:9f:60:68:d3:df:35:
84:a0:27:08:19:b4:2f:f5:95:fa:8c:69:75:ad:84:
21:e6:66:17:db:7b:0b:7e:a5:21:1b:14:36:a0:46:
b1:5c:b8:51:7d:4c:cf:ff:0d:41:d3:c8:9a:dc:b1:
f8:f7:de:16:f7:22:83:50:3e:b1:58:a0:a6:3d:5d:
22:02:5d:f1:60:90:aa:82:f1:6f:e2:f7:83:55:6b:
91:28:87:3d:99:d4:7e:23:39:c2:c0:dd:70:75:5e:
eb:f2:76:72:d2:5d:5a:1a:1a:23:33:a8:28:5d:52:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8C:20:61:78:0C:82:92:C9:5A:15:23:49:D2:4D:43:D0:8F:A3:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d689eb88-d780-34c7-8325-a963b8e4e75b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:11:b8:e1:84:45:c8:46:eb:6e:75:cb:6e:5d:76:c8:ff:93:
5e:e5:ac:7a:56:74:e2:e1:c0:c5:39:7a:ce:f7:3d:56:23:67:
a7:10:91:45:49:89:eb:49:29:76:f0:71:9b:44:9d:93:50:6a:
7a:3d:df:d7:58:07:ae:e8:2b:51:8f:0c:3e:49:2b:31:a2:8c:
d5:72:f6:92:64:01:86:05:d4:33:04:39:0a:e9:0f:c5:27:ed:
19:03:7e:4a:af:65:c2:30:17:c6:b8:11:f9:25:36:b7:5a:9b:
72:86:c7:51:a7:0f:0c:3d:d3:19:e5:65:ca:63:91:eb:0b:6e:
03:47:9f:d1:88:53:76:22:45:e2:bf:14:ab:c1:c2:b3:6d:d2:
0a:b1:ae:9b:ce:bc:45:06:d9:fc:fd:ec:55:a1:1e:57:1f:5b:
d0:89:8a:0b:97:15:88:53:08:ac:6e:f2:59:e5:23:28:54:fc:
d7:7c:7f:71:c6:23:4e:d3:ab:1e:84:e7:3c:dc:5a:08:77:7f:
4e:3e:89:ca:78:e7:de:ed:de:32:b7:87:bd:ec:d7:d5:f1:44:
1b:d0:3e:37:12:2d:18:99:8f:e6:4a:2d:b0:14:90:ff:24:a9:
8c:04:3e:80:19:2e:14:a8:86:34:ab:9e:5b:18:34:14:ca:ad:
ac:b3:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:27 2025 by rpki-client