Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db0e465a-1ddf-33d0-b589-0bd855919acd.roa
File: db0e465a-1ddf-33d0-b589-0bd855919acd.roa (raw, json)
Hash identifier: cGzp7gh1ioxfLs93V5Ae79UlkXMKN2Sy1zdAPPm/Xvc=
Subject key identifier: 32:F4:01:53:69:3A:94:5C:D2:AD:A1:DA:CE:CD:88:AD:94:8F:89:D4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B60611FD170579E0E00B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db0e465a-1ddf-33d0-b589-0bd855919acd.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 199.243.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:06:11:fd:17:05:79:e0:e0:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=a06d9083-8d66-4c5a-ae8c-51bf0c119555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:cd:09:c5:fa:c7:9d:62:cc:55:dd:e3:a4:
2f:49:9d:36:4d:b9:e3:dc:23:c8:4c:bb:69:30:62:
c8:4d:12:14:14:fa:16:06:61:e2:37:9b:d6:b6:07:
b6:8a:c9:97:3f:e8:c1:b2:43:94:1c:69:cf:bc:c2:
1c:44:c3:9c:f4:cb:c3:0d:1d:77:5b:cf:55:48:a4:
b9:03:3c:60:7f:a0:1a:7f:38:16:86:23:f8:16:4a:
fa:2b:10:73:32:4d:cf:34:df:31:19:4b:fe:74:d2:
d4:65:81:81:60:d3:17:46:e2:a2:91:df:ab:ee:a6:
72:4a:a0:59:0f:4e:a1:1e:28:af:46:a9:a3:6c:3f:
46:0d:83:0d:2f:95:f3:50:9a:c3:79:ef:8e:6e:d8:
48:b9:43:d4:ff:8b:e0:1c:1e:02:68:5e:97:f3:35:
e7:eb:56:f7:39:11:66:46:59:b1:26:1c:fd:53:cb:
d5:1e:8a:48:1c:be:d9:84:68:fc:fe:52:d5:06:46:
bd:a0:f5:8a:e6:31:5d:5c:59:3c:e8:7f:36:d7:98:
85:a1:a9:86:02:df:5b:fd:e0:e5:14:d2:9a:16:8d:
f6:9e:2c:db:35:3e:33:db:b4:7d:a8:61:c4:06:87:
87:bd:8c:64:e5:ed:6c:5b:62:23:95:3d:c7:e0:84:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:01:53:69:3A:94:5C:D2:AD:A1:DA:CE:CD:88:AD:94:8F:89:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db0e465a-1ddf-33d0-b589-0bd855919acd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:86:27:fd:f3:7e:cc:d7:e2:c8:a2:70:c2:2d:5e:e5:73:f2:
f1:a5:b3:8f:8f:23:8d:9b:a0:9c:4f:4b:6c:a8:6f:f5:09:71:
c8:e4:5b:92:2a:c7:9d:23:94:51:89:ad:e7:c4:0d:30:b4:22:
be:22:8d:0d:3d:2d:a6:81:ec:1a:6e:17:85:33:d4:59:72:e0:
1e:67:49:3b:72:3b:1f:9f:b0:15:55:75:91:5c:29:2f:b6:29:
90:d1:23:a2:96:3d:85:58:2b:63:4f:40:aa:38:ac:00:9c:d9:
37:05:46:13:f8:ff:ba:72:6a:74:3d:f3:a1:34:93:aa:4e:76:
3f:6d:3b:ce:8e:f4:88:21:00:37:9b:e4:17:e9:a4:bb:87:a8:
d4:47:7f:84:20:38:1c:cf:08:16:16:4b:48:b8:42:2e:01:7d:
a1:1f:ff:83:94:89:64:ab:e4:1e:c6:30:4a:a6:d5:cc:6f:8e:
db:3f:32:88:93:64:2d:72:e2:5d:3f:c5:92:de:ff:77:5d:f6:
43:e3:67:28:a2:74:62:6e:29:2c:31:3d:8e:0a:7c:3c:65:e3:
5d:ab:6c:9d:46:f2:ef:c1:89:b0:a8:78:26:83:68:c9:f6:bb:
fe:a1:07:cc:72:ef:2c:c6:02:c7:14:6f:37:8a:85:e7:93:cb:
47:02:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:12 2025 by rpki-client