Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e73f5070-c1ac-3e52-be60-b7c246e00108.roa
File: e73f5070-c1ac-3e52-be60-b7c246e00108.roa (raw, json)
Hash identifier: uBnpGVxXEyimYN9EJLABAABwg4cSOFAzGX0g+Iy/ffs=
Subject key identifier: 40:B9:58:7B:45:96:0E:E3:86:10:66:C8:5E:95:EB:2E:D3:D0:1E:37
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314C45985B1D429CFF3E180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e73f5070-c1ac-3e52-be60-b7c246e00108.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 198.235.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:c4:59:85:b1:d4:29:cf:f3:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=327ff0d6-f627-48bd-b6f0-b5505d6dee85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:3c:9d:5f:3d:17:7d:3b:82:a5:4e:83:d2:
0c:49:a0:a6:2f:d1:f2:78:2c:16:50:28:4b:4c:c7:
75:c8:10:31:97:91:11:26:0a:c9:fc:f3:9b:dd:8d:
58:a6:e9:bf:d7:81:7e:e1:64:8c:de:cf:d4:85:0f:
71:5a:fa:ce:c6:2a:2a:ce:d2:da:db:3b:c6:18:d8:
d5:41:78:47:9b:4c:a7:8e:f8:70:0e:aa:2e:b6:91:
8a:49:a5:bc:18:62:d2:14:8c:41:73:94:1f:74:a9:
62:56:19:19:af:d2:39:ca:c1:79:cc:f7:88:8f:ca:
57:75:c4:e5:51:c7:3a:8e:f5:45:c8:06:a0:e1:99:
6a:40:6f:1a:35:cd:d2:b7:49:10:b8:6c:52:00:90:
2c:d9:34:18:46:92:45:b3:0b:49:c9:44:cc:12:f8:
6e:5f:2f:8e:06:38:03:71:83:84:07:69:f5:cc:9a:
4e:23:83:d3:bd:66:06:cd:03:9b:22:32:64:2b:28:
51:de:0e:f5:28:89:d3:99:eb:bc:6e:83:3f:ec:da:
ea:a0:3d:93:9a:87:0f:6a:9f:60:ee:7c:83:84:1d:
52:30:97:2e:8d:cf:c3:98:42:3b:58:fe:b3:6d:f1:
31:b7:bc:99:db:35:ba:77:cc:bc:3d:df:cb:fa:1a:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:58:7B:45:96:0E:E3:86:10:66:C8:5E:95:EB:2E:D3:D0:1E:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e73f5070-c1ac-3e52-be60-b7c246e00108.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:3f:a7:6d:55:64:06:9b:5b:06:21:7c:5d:7f:28:20:8f:2e:
9d:fa:ba:6f:03:ee:71:76:de:f0:f9:26:fd:bd:60:0d:af:3e:
9f:9a:87:63:68:73:82:26:79:49:1c:bc:33:fb:f4:e8:15:30:
68:e0:3e:2d:ca:cf:fe:5d:72:ab:b5:9c:bb:fe:7a:bd:f2:be:
eb:c3:08:f9:b1:28:1b:ba:93:4e:88:71:39:ea:4f:41:52:4d:
8f:19:db:07:ca:77:9f:35:fe:7e:09:dd:6c:72:88:fd:94:7d:
04:dd:34:85:cb:9e:47:37:85:8b:02:34:24:09:62:f8:d8:38:
2a:8c:31:dd:41:25:08:f9:85:ab:2b:ad:92:ea:30:6f:49:43:
6e:30:79:64:69:a4:37:04:fe:e6:b9:e1:6d:d8:ff:7a:37:7a:
e9:04:15:bf:f5:16:1b:d4:cd:f8:8d:96:63:4f:92:a2:12:50:
7c:e0:4e:e3:9b:51:c7:26:7d:34:67:e0:4b:8f:15:09:07:0e:
72:95:38:5c:13:ae:08:8a:ae:dd:13:3c:c5:4c:c0:e1:2e:6b:
7c:a7:04:20:83:35:21:d4:98:19:d2:4d:1c:aa:11:3a:3e:fc:
0e:d3:50:46:01:e6:fc:8d:b6:96:d1:06:63:45:bd:e8:ee:9a:
20:a1:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:05 2025 by rpki-client