Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e40d7874-1c2a-3f82-92e3-1f18d4cb9a7a.roa
File: e40d7874-1c2a-3f82-92e3-1f18d4cb9a7a.roa (raw, json)
Hash identifier: JUjXNK/BtbZstW1N29ugZzcWpCJwqtKZRk95fSi7gCQ=
Subject key identifier: 96:FA:9A:4B:2F:32:FC:7B:34:A3:6A:A8:57:C1:CC:8F:E3:CE:4A:98
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6373F2B5DB517EA5AAB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e40d7874-1c2a-3f82-92e3-1f18d4cb9a7a.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:37:3f:2b:5d:b5:17:ea:5a:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f36902c2-0051-42a4-a1bd-583f69dfad90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:5a:e2:f6:24:84:6b:d6:79:25:bf:6f:b7:
30:ce:02:e2:09:2e:9c:1a:d6:1c:d8:1e:41:8b:2a:
40:79:34:23:e0:fd:df:4e:32:7f:62:84:8f:84:72:
e8:ff:c7:50:b2:bb:07:b1:36:41:7e:7f:2f:cb:0a:
54:66:0c:fb:3c:16:5d:77:76:ad:22:46:95:bc:33:
ff:58:77:41:c1:8e:be:b0:59:ed:ae:e8:e0:6e:10:
6f:92:78:62:f2:6f:be:e7:88:26:07:92:b0:37:57:
cf:89:77:7f:6c:2c:8b:b0:3b:5d:2c:e0:c0:5c:a8:
52:6b:f2:b2:a8:bf:80:17:27:a4:e4:7f:8b:5b:0b:
00:6a:65:c4:2f:0f:07:0e:8a:cf:c1:de:58:fb:d3:
dc:69:6d:be:76:f0:50:30:b5:04:02:48:ed:51:a5:
1b:7b:bc:42:cd:2a:3b:31:89:c7:ef:98:6c:1f:19:
cd:f6:06:05:8a:2f:d2:de:44:5f:7c:5b:27:33:77:
de:5b:a2:9b:93:ad:1a:00:97:be:3c:c6:da:e7:a8:
d7:88:b4:b3:f0:f0:c3:5d:7b:ad:e9:a5:09:d5:88:
36:f9:15:4b:35:34:3c:69:2a:67:56:39:b9:d1:06:
cc:13:59:66:cc:99:d1:48:54:65:2d:bf:d7:70:2d:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FA:9A:4B:2F:32:FC:7B:34:A3:6A:A8:57:C1:CC:8F:E3:CE:4A:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e40d7874-1c2a-3f82-92e3-1f18d4cb9a7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c5:ef:62:3f:13:ec:43:70:74:23:30:61:ce:d1:f9:d2:ee:
ec:43:b9:7f:d4:af:28:bb:7c:28:a4:c1:a1:6a:c7:6f:d7:2e:
6c:b1:4a:68:2c:64:9a:4f:40:c1:05:6c:d5:b2:65:54:45:29:
63:32:37:38:4b:ad:97:15:81:59:c1:ba:a1:dc:86:a6:9a:8a:
c1:62:19:75:52:1d:2f:39:1d:ab:a9:dd:84:74:13:06:9e:90:
27:da:d5:1e:18:74:78:b5:c2:f1:d6:48:3f:cb:47:5a:bb:9a:
82:8a:ae:57:2a:32:01:1d:ab:a3:01:0f:d2:28:55:a0:fe:39:
3d:ad:1a:d5:c4:27:f6:40:b3:95:3c:06:95:d8:95:f4:ad:4b:
6e:0b:66:b4:8e:7c:2c:0f:a3:a4:84:30:dd:63:ce:54:bf:0a:
41:b7:5a:7f:62:c3:d8:04:b5:27:ed:c4:52:2d:fa:cb:8b:9b:
e8:64:78:9a:e1:6a:b7:60:97:db:59:a1:21:16:14:27:b5:4a:
a1:b4:91:6b:6d:a0:0b:44:8f:f8:9b:d6:50:af:38:c8:0f:5a:
88:d2:7c:49:11:22:08:bb:21:fe:39:0d:64:35:5f:f4:48:52:
cc:47:3a:30:23:35:4e:50:b3:ca:34:46:12:21:4b:f9:4e:f6:
a2:72:b3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:11 2025 by rpki-client