Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e70fd333-adf9-3cf7-9700-95e8381c076b.roa
File: e70fd333-adf9-3cf7-9700-95e8381c076b.roa (raw, json)
Hash identifier: GdM8TvXiHV7QqAeZaZqJJ3nncTPc7O4bQLikfkL6rI0=
Subject key identifier: AC:D3:1E:20:3E:4D:19:ED:10:D3:47:0A:67:A2:CA:55:9B:61:CF:80
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B5AB9AF30BDD38A1A25880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e70fd333-adf9-3cf7-9700-95e8381c076b.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 21723
IP address blocks: 209.226.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b5:ab:9a:f3:0b:dd:38:a1:a2:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=dcce9a4b-f953-4466-842a-2ed8784a8ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:e8:33:53:d5:98:55:e9:aa:9c:c7:3b:dd:
b1:59:4a:98:28:b8:d4:dd:17:6d:7f:9d:e4:fb:69:
b0:ec:36:6b:0e:12:59:43:b2:7e:9a:fd:1b:48:70:
83:f5:6b:c6:23:9a:e8:9e:24:73:d5:9f:e9:da:e6:
13:47:27:6f:63:2f:a9:d8:46:ea:ee:74:69:48:9a:
39:02:ad:0f:74:af:14:5a:cf:7a:dc:33:09:b8:55:
ec:60:0e:9f:56:36:d1:d3:48:22:02:c2:d9:00:e3:
76:50:5c:ed:4c:c6:69:bf:76:88:28:cf:ca:77:f2:
bc:72:5a:03:fc:df:dc:1f:2b:cc:ea:2f:44:de:6f:
03:99:df:6b:9d:2d:80:8a:08:a2:92:f5:4f:15:74:
0e:e9:70:d5:a8:d9:37:80:2c:be:af:bd:be:04:2b:
29:c9:2f:7d:cc:1d:86:e3:82:78:b5:0d:7e:ac:5e:
06:fd:da:03:2f:2b:31:bc:44:db:14:02:9a:46:2d:
d5:da:61:84:68:81:1d:95:26:80:c0:84:c7:c3:03:
78:c4:29:97:75:44:00:71:0d:c3:c3:06:69:99:96:
3b:93:a5:b7:de:ef:4c:e6:e1:72:8d:ef:55:71:50:
92:c4:02:3d:2f:6a:be:b6:ae:11:1d:0b:cb:f7:50:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:1E:20:3E:4D:19:ED:10:D3:47:0A:67:A2:CA:55:9B:61:CF:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e70fd333-adf9-3cf7-9700-95e8381c076b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:a0:87:26:00:59:c0:2c:65:12:55:20:a2:b1:dd:a9:6a:a7:
4f:86:4e:29:ac:58:7b:4b:b5:fc:62:02:2d:67:1e:74:33:72:
90:3a:4f:fb:a9:13:b3:6e:46:46:13:46:f0:a2:31:49:77:85:
12:10:3a:8e:b8:77:8b:05:38:4d:78:77:52:9e:da:31:7e:65:
0e:f7:06:4d:3e:42:61:37:d8:10:2a:63:72:54:89:81:c2:d2:
29:1b:a9:e8:4c:de:d5:ba:93:90:f2:e9:e7:d9:95:0d:e8:d9:
dd:35:e6:dc:a1:4f:b3:04:eb:eb:1a:ff:e7:6d:28:d4:17:33:
92:ed:d9:6a:5c:0b:4f:0a:e1:5f:fe:a0:08:98:ae:72:5b:e4:
b8:2a:74:c4:2d:cb:16:e0:b1:bf:cf:b2:0c:59:fd:f5:2b:69:
87:01:d1:a4:56:47:75:4d:79:d9:5f:7c:4f:f6:b1:14:01:bb:
11:bc:e1:f9:26:34:08:e2:44:d5:ab:e0:d7:2b:bc:3e:ea:5f:
06:64:07:6f:d9:b7:f2:ea:f3:e8:23:0c:0d:06:63:ed:20:24:
93:e1:24:13:ea:f9:74:ea:30:05:90:c7:71:d9:b9:dd:22:bc:
70:19:4d:7c:cf:eb:3f:65:54:81:93:76:c7:37:51:b8:60:fd:
45:93:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:54:12 2025 by rpki-client