Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/da529f3c-a7d9-3594-b37c-eea8753e5490.roa
File: da529f3c-a7d9-3594-b37c-eea8753e5490.roa (raw, json)
Hash identifier: HtAf9H02XaORKzqAwn+G7tyQ2Dsa1gkn2l+TH1zmO1Q=
Subject key identifier: F5:99:1A:DE:EF:73:3D:00:5B:4A:F7:8F:8E:F3:5D:B0:44:8C:8A:3E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7A450E29DB56CD6FE9800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/da529f3c-a7d9-3594-b37c-eea8753e5490.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 35911
IP address blocks: 209.226.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:a4:50:e2:9d:b5:6c:d6:fe:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=7b6586fc-3334-4271-8f5c-bb70c4b5006f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:66:62:af:60:1a:f1:4b:ef:09:54:e2:5e:
7a:fa:a7:79:63:a2:e5:89:7d:7c:0f:b3:b8:69:be:
3a:b7:9a:b7:80:a5:03:33:2f:90:a9:06:96:a2:cf:
da:11:a7:f6:75:6f:bc:76:d5:46:b1:d6:57:4e:30:
e9:d0:38:70:72:7d:07:b7:15:fe:6a:59:52:57:66:
91:d8:01:76:6b:47:e7:fb:57:15:4f:df:84:00:eb:
1e:9f:9b:ef:e3:19:55:1a:11:10:62:28:58:97:57:
e3:a2:cb:12:e8:f0:5f:64:2b:b5:6d:17:e9:21:b8:
93:a0:e3:34:a6:69:91:e2:3b:de:f0:99:44:00:83:
08:de:64:c0:29:0e:a3:ff:04:a2:58:22:ba:60:9f:
74:7d:22:31:27:f3:d6:01:e2:09:6b:83:6d:b4:0a:
cc:47:de:05:46:9f:38:bd:26:1b:76:f6:96:ad:f9:
98:93:03:73:3c:ec:c0:92:1a:ac:21:2e:a1:f3:6d:
e5:fe:4d:75:75:db:31:09:8a:c1:67:75:70:10:30:
38:cb:03:da:4b:95:93:04:ef:1b:04:a5:72:3a:1d:
08:c2:6d:00:4c:31:a6:03:03:15:2c:5b:72:99:d1:
89:30:25:d6:a8:2d:41:60:4b:d9:fc:20:a4:14:2c:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:1A:DE:EF:73:3D:00:5B:4A:F7:8F:8E:F3:5D:B0:44:8C:8A:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/da529f3c-a7d9-3594-b37c-eea8753e5490.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:0c:dc:4f:79:f1:c9:25:79:da:e2:c8:92:a9:48:01:2a:35:
81:aa:ad:11:d0:0f:bc:fb:a0:74:6a:d5:d4:c4:77:78:c3:cd:
21:78:96:f2:35:85:d1:46:cb:0f:5b:53:64:b8:75:68:11:5c:
e2:81:20:7e:1f:7b:e0:ba:11:1b:ac:de:6f:1d:0a:f5:67:74:
34:a4:17:a6:81:ff:0f:99:88:bd:4c:b2:ab:30:7a:8a:1c:47:
8e:ba:f2:df:cf:5e:fb:a3:09:19:b1:5e:08:e7:af:d5:e3:64:
99:78:88:6a:82:7b:71:98:75:c3:e0:fd:f4:3c:6e:71:4f:ca:
d9:d9:63:4d:a1:0a:bc:03:e9:42:22:7d:26:8d:9c:10:47:31:
6f:c0:01:fc:3f:48:88:8d:ce:60:7b:5a:99:fc:00:85:30:fd:
ad:e4:c6:4e:34:87:8e:54:20:72:6b:42:6c:04:ee:83:77:e8:
0b:cb:38:7b:72:00:55:3d:bb:23:d4:f3:35:e0:af:9a:32:75:
12:85:38:67:b9:d9:9f:57:96:cc:9a:63:cd:70:b7:f2:ac:f8:
59:32:bb:8b:10:52:3a:32:6b:b6:5a:6f:71:a6:cf:3c:44:4b:
b8:d8:4e:f8:75:f8:37:f5:ef:1e:58:42:61:77:70:78:54:fa:
5c:13:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:36 2025 by rpki-client