Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8a528f0-75e4-359d-9ea9-50b7cad81dc2.roa
File: d8a528f0-75e4-359d-9ea9-50b7cad81dc2.roa (raw, json)
Hash identifier: AIEnSmWJ09wsPk0r2oOttUTg1Xd991z8M70NF3xUvaE=
Subject key identifier: FE:4B:3A:DB:2B:54:74:26:2A:D3:C8:A4:03:27:95:F1:12:27:71:7E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493162C1EDCD26471F825E000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8a528f0-75e4-359d-9ea9-50b7cad81dc2.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 30336
IP address blocks: 207.236.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:2c:1e:dc:d2:64:71:f8:25:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=24e19243-f74e-46c4-876c-0fa6cb9e487f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:1a:67:f2:11:24:e3:a2:67:ce:3c:cd:1e:
0d:92:18:9d:52:dd:2a:45:15:e7:46:8e:53:9b:40:
cf:0a:92:22:f7:ad:6e:34:a1:c2:43:3c:5b:b3:7c:
ba:7b:ed:de:a5:d7:31:8e:6e:f9:c3:75:49:40:ea:
a4:f7:c8:ff:41:e9:cc:47:72:1e:60:6e:62:5a:2a:
5e:51:ea:88:d4:fb:c2:3a:71:47:44:ea:b3:d3:25:
09:6a:b7:ab:35:76:d4:b3:bd:ba:39:8d:18:74:0e:
bc:e5:90:68:99:9f:06:a4:b9:be:1b:b2:03:7a:c0:
57:d3:46:75:b9:23:b1:2e:6f:83:9d:5e:5e:4d:96:
04:ba:a6:bb:ce:6f:77:e6:b7:59:10:99:19:76:0e:
4d:e8:fc:6a:b8:2f:b4:2d:1d:13:b5:4e:60:eb:8d:
a4:57:86:9b:d2:92:eb:4a:3d:cd:3d:07:50:c2:9c:
04:43:9a:fe:b0:9a:17:dc:e2:5e:28:47:2e:c1:97:
c3:37:70:bd:7d:dd:ac:6e:8c:3a:1c:70:84:09:70:
a7:0b:40:56:94:0c:83:f2:fc:7d:e9:45:ec:01:3c:
b5:e9:2a:69:23:20:64:85:8a:44:55:17:54:62:b1:
c8:9c:e9:39:f6:74:57:8d:1a:7a:69:fa:11:28:5b:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4B:3A:DB:2B:54:74:26:2A:D3:C8:A4:03:27:95:F1:12:27:71:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8a528f0-75e4-359d-9ea9-50b7cad81dc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:ce:05:ec:01:60:c5:27:3b:ba:43:2c:3a:4d:7b:dc:c1:6c:
af:f9:6f:84:d3:27:99:2f:98:26:36:a2:46:47:51:a2:0b:0e:
59:16:a6:7e:38:c8:dc:9c:f8:d7:89:21:54:19:52:4a:0f:00:
e9:c0:b1:db:45:49:e3:ee:39:ef:13:fd:08:c0:bd:ab:b3:a3:
b8:7b:ba:54:d9:e9:69:a1:17:49:79:2f:5b:17:c1:85:cc:ba:
87:82:ed:62:65:af:71:ac:59:af:a8:f3:58:7d:b0:23:35:41:
fa:f7:cd:c2:fd:6c:0b:f1:ee:6a:6f:26:e5:ed:68:66:44:93:
70:f2:55:a0:5d:ec:52:34:98:60:6a:fc:5f:4c:69:7b:09:26:
95:1b:36:87:99:5a:4d:f3:f8:d6:ff:df:b7:dc:ce:94:e5:0c:
c5:54:db:a3:f5:01:0d:94:2f:ba:6a:8a:fe:1b:96:e9:a1:33:
8d:f9:da:8d:9b:55:ba:1c:e4:c2:b4:fd:99:fc:8d:f5:d7:ae:
d8:b0:4e:9e:54:1f:82:a6:41:8a:84:b2:90:42:74:2f:94:d1:
1a:2f:ef:0b:1f:03:b3:c3:02:12:57:37:9c:3b:ff:1b:e6:21:
8a:98:44:1a:b1:11:8c:43:0c:4e:fc:47:92:3b:4a:ed:5d:4d:
78:bd:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:31 2025 by rpki-client