Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db3a597c-9f42-3b67-8101-67a3981206c1.roa
File: db3a597c-9f42-3b67-8101-67a3981206c1.roa (raw, json)
Hash identifier: O2vPr/ifIegVI9ru8ZmpYA9hcFKnwl/p4JDyLsX4BFg=
Subject key identifier: A8:5E:A5:B4:BE:0A:FA:FC:7C:B3:24:A0:59:96:54:9F:E9:CA:21:F7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B75A25CBDFCA63DF9F5E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db3a597c-9f42-3b67-8101-67a3981206c1.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 207.236.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:5a:25:cb:df:ca:63:df:9f:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c1846260-b325-4ad5-bb0b-ad9df556eec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:ca:db:55:04:61:4c:22:34:99:33:1d:ed:
e9:b1:06:01:a3:9a:a2:23:38:0c:7a:75:ab:b3:46:
d0:24:6a:ce:0a:66:90:cf:db:89:d4:88:7b:6b:1c:
5f:d6:e1:28:a2:2d:bd:e8:ea:83:70:94:da:86:b8:
92:63:0d:47:20:04:b3:32:4c:92:17:bd:ad:59:e0:
66:36:df:ad:fe:af:26:06:01:c8:11:26:c6:4b:58:
3d:e5:9a:6c:8e:c1:f3:16:2e:2c:f1:5f:c2:9a:b2:
35:94:2b:30:98:56:94:89:e7:6e:e5:b7:e6:f0:17:
af:d1:bf:5b:c8:28:22:30:b1:db:7b:87:69:e5:d2:
69:00:cc:6e:73:b5:30:bb:2c:94:f3:d3:0f:d1:33:
5f:1b:36:e8:d5:ff:cd:9a:ad:6a:38:93:88:54:25:
0e:a4:d9:a2:a5:79:93:4b:8a:cc:e5:47:61:48:94:
83:d0:8b:d7:c7:db:98:6b:3e:14:0d:a0:71:a2:4c:
03:91:dc:de:d4:83:db:18:c3:b2:be:41:9e:e5:87:
80:7f:90:7b:74:ee:fb:b0:87:52:6d:fc:18:4d:8c:
13:56:59:d0:76:35:c9:96:35:0a:73:29:9b:de:b9:
6c:0b:44:e8:d3:ab:64:e1:ff:52:58:83:cb:13:ff:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:A5:B4:BE:0A:FA:FC:7C:B3:24:A0:59:96:54:9F:E9:CA:21:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db3a597c-9f42-3b67-8101-67a3981206c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:b2:18:30:81:c7:9d:b9:0c:81:63:f1:33:98:a1:d7:17:3b:
4a:c1:0c:3f:dc:bd:a2:cb:c9:96:2b:f4:45:49:9f:7b:86:cc:
66:3f:30:43:9f:37:3d:33:b1:3c:72:ae:5f:38:10:30:a6:d8:
ef:73:ef:da:d8:b7:13:09:d1:ef:13:46:4a:1d:18:ea:53:be:
bc:c4:62:12:da:5a:f9:a6:64:b4:80:4f:bd:f3:b8:1b:6a:05:
d1:d3:4f:86:18:79:4b:98:d5:0c:0d:bd:26:c0:d9:7d:c7:1d:
a8:59:1e:0b:31:ef:dc:7a:ba:51:8a:6d:b1:df:69:43:32:f0:
ba:46:42:cd:f0:9b:d8:b1:09:89:9b:1a:ba:43:2c:11:7b:f1:
3c:ee:5f:8a:09:1c:2a:5a:94:e7:7f:34:38:3f:70:b5:d6:16:
6b:c9:61:40:c4:3d:4b:ce:f0:5e:22:3b:43:7b:d0:b7:ee:92:
48:16:2b:62:30:50:8c:13:89:55:90:e9:06:22:c6:cd:8d:fd:
fa:7a:7b:04:65:de:0d:39:6e:bf:a4:af:9a:9a:20:6a:a5:91:
fe:ee:4d:b9:c9:9e:ba:8f:0b:82:94:9f:54:8f:c1:94:47:ee:
6e:48:da:ef:94:a8:55:e8:60:ce:38:4a:35:7d:ca:0c:71:f2:
96:74:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:19 2025 by rpki-client