Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ddd88317-d23f-3bad-92a4-c24d4ad579e0.roa
File: ddd88317-d23f-3bad-92a4-c24d4ad579e0.roa (raw, json)
Hash identifier: HeduGB2dLdjTkFGqlO7iK3G7GxwRp9hTnT6+1rf5zQE=
Subject key identifier: FD:13:D2:3F:0F:2D:A7:91:3D:AB:5E:B5:95:BA:6C:23:8C:61:BA:A1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29D4CF4F858DE5F5888AC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ddd88317-d23f-3bad-92a4-c24d4ad579e0.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 10264
IP address blocks: 204.101.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:d4:cf:4f:85:8d:e5:f5:88:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=4e0397fd-f926-4957-8959-3d5d01bc8e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:4d:49:72:9f:72:a9:17:09:1e:ea:5f:b8:
74:e6:6b:1c:de:d0:20:7f:d6:9b:06:b1:1f:ac:cc:
e6:45:b5:a9:d4:23:5e:f5:3e:63:8a:b2:10:c8:47:
3f:38:62:ef:1f:aa:2a:e9:81:3c:ec:9f:4a:84:f9:
c6:ab:bd:19:42:f5:a5:87:53:70:f6:ae:51:5d:8b:
4c:19:0a:40:76:18:21:8b:a2:44:77:db:98:1c:ba:
a8:f7:8d:6b:d5:0e:30:85:21:be:ef:ab:35:89:b5:
e0:a7:67:14:39:42:0b:93:66:7f:d0:ff:99:66:24:
1b:6a:39:3b:eb:ae:83:c6:ad:a8:26:1b:38:48:e4:
6f:9c:28:03:f1:a3:71:25:67:7a:0c:d9:12:b5:30:
df:da:d5:df:8e:7e:f6:04:6a:bb:29:37:d2:5e:4f:
2b:25:42:7c:31:96:ef:fd:66:2a:19:d2:d1:72:44:
6e:45:79:7a:0f:a7:8e:c0:31:c0:c2:db:24:22:23:
f5:89:5e:dd:87:52:3e:2c:57:39:79:9c:58:64:fb:
93:cf:ec:95:33:cf:ac:83:72:0a:e9:13:b7:31:d4:
1f:43:83:1d:a0:84:8d:5f:ef:98:e1:c1:f6:fa:de:
72:a5:54:27:20:02:ca:06:44:73:46:f7:94:a2:1c:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:13:D2:3F:0F:2D:A7:91:3D:AB:5E:B5:95:BA:6C:23:8C:61:BA:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ddd88317-d23f-3bad-92a4-c24d4ad579e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:8e:16:fd:9a:b0:8c:bd:2a:1c:84:dc:fb:29:d1:df:e6:97:
ed:c1:13:70:95:27:a3:18:7e:59:71:cf:0f:3e:5c:8e:5a:68:
c9:1b:86:7d:90:19:b6:4d:3e:29:87:9a:5b:f2:d5:5a:e4:4d:
ea:fd:ca:66:c7:1c:99:e4:80:9e:53:3e:c9:07:5b:5c:5d:3c:
1e:81:db:49:56:f8:cd:70:b4:e3:c7:b5:2f:07:80:39:d2:00:
d3:ac:87:eb:55:e5:e4:ec:d7:b7:be:e2:b9:3c:33:ef:af:36:
ce:a0:c0:4b:2f:4f:e5:49:a5:17:dc:bc:81:de:aa:cf:79:d6:
fe:b0:49:67:97:ed:d0:56:1f:b3:f3:a8:cb:f2:76:ff:58:21:
2a:17:75:40:e7:40:b0:87:73:bf:1e:eb:ba:85:ea:57:d6:50:
87:14:8c:a3:2d:80:5b:95:24:21:81:2e:01:92:96:36:f5:ea:
48:42:5f:5a:da:b0:c4:c5:b5:f8:d3:00:eb:2e:5e:57:45:ef:
87:8e:d0:96:7e:75:01:ba:34:1e:e7:d8:07:e5:35:bc:e0:e0:
61:5b:8d:94:33:9f:6c:5b:58:9f:63:c3:df:d4:36:7f:42:9b:
c4:91:29:9c:fb:a1:bd:06:20:6c:cd:83:c2:62:3c:9f:27:8e:
1a:e5:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:09 2025 by rpki-client