Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ecd667a7-4b57-3f54-95f4-01521bf49892.roa
File: ecd667a7-4b57-3f54-95f4-01521bf49892.roa (raw, json)
Hash identifier: /fRZm7YkIyNV0lsf3dnzMBT4YIPl8iYAuoXOdV6bgxc=
Subject key identifier: 6C:E1:FB:34:37:F9:D4:53:DD:36:5A:A0:59:63:39:FD:DD:39:A0:73
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D299E55C646B35CC97A2600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ecd667a7-4b57-3f54-95f4-01521bf49892.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 198.235.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:9e:55:c6:46:b3:5c:c9:7a:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=2e80a004-f1b6-4e9d-8b73-1d5ace5cb584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:07:b0:92:79:0f:42:0b:60:4e:c6:0b:99:
fa:e5:ac:32:58:f2:aa:0f:8c:cb:0a:ce:b4:7f:0c:
8d:b9:50:6d:d1:47:ef:30:45:29:91:b4:42:03:10:
b3:57:7c:a5:a3:de:47:ba:a3:38:e1:b1:6e:90:f4:
2d:63:07:41:ac:ff:1c:d3:14:07:4e:bb:c9:3a:22:
0d:34:95:a9:ca:4f:53:f4:ba:63:36:cd:2a:86:6c:
73:86:b4:30:30:f6:b4:72:76:c1:46:34:f1:c5:6e:
a3:ec:fe:56:45:9f:9e:aa:c0:12:29:f6:c0:8e:47:
87:46:c1:fc:f2:97:62:b0:98:32:27:6e:42:a0:cd:
d3:79:93:20:4d:a2:74:13:6c:6a:66:18:7d:92:b8:
53:02:1f:87:c2:3b:9a:8d:c2:f7:2a:9e:d7:aa:a4:
9c:ba:39:c0:bc:89:c0:c3:98:25:a5:37:79:0f:2b:
46:c4:e6:1f:5a:20:18:27:dc:e2:03:32:13:70:7a:
5a:c9:35:36:d0:7b:7f:82:8a:24:a8:59:93:77:41:
6d:4d:92:ba:a9:13:18:06:c1:9a:6e:7c:cd:3e:b1:
ad:8c:33:e0:75:de:a2:12:70:48:ea:45:a0:0e:a3:
87:b3:46:1c:d5:6b:d6:36:c0:fb:3e:a5:96:6b:70:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E1:FB:34:37:F9:D4:53:DD:36:5A:A0:59:63:39:FD:DD:39:A0:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ecd667a7-4b57-3f54-95f4-01521bf49892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:45:29:cc:f3:6d:89:73:e9:47:5b:80:a9:05:66:b6:3a:67:
0f:02:2b:00:37:0f:82:9e:ff:1c:07:b0:6b:a8:1c:81:cf:21:
58:e3:c0:a4:1d:82:56:49:9e:b9:51:d3:2e:a9:da:9c:c7:fe:
6d:94:68:70:09:1a:8c:1e:e7:9f:10:32:39:73:78:18:bd:9f:
b7:2d:e9:e8:dd:46:3f:54:31:36:79:91:89:42:83:33:89:86:
01:92:ed:e0:6e:d0:b4:15:63:25:6f:4c:47:d7:9d:89:0f:12:
d3:34:dc:d0:72:17:0f:e6:24:40:56:27:c4:27:e6:a7:01:ef:
17:d9:75:7a:8e:a4:06:3c:35:62:f7:9f:21:44:9e:6d:26:bb:
80:11:a2:98:8c:40:49:93:24:a0:ab:7d:24:da:bc:31:74:06:
a4:d5:c2:30:6e:df:58:f3:7b:39:65:ab:54:54:51:75:e3:53:
c5:64:3a:9e:e5:56:f3:80:d2:b2:01:01:84:d4:66:f4:57:71:
6b:21:c5:ae:5e:13:f5:25:6a:9c:3a:e4:a8:8a:b2:2f:02:5e:
0c:78:64:3a:34:1c:a2:20:bb:f4:ce:58:0e:40:5d:ff:08:af:
8b:ae:51:95:a2:29:38:27:01:64:17:55:9c:ca:b7:f1:27:08:
7b:a8:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:33 2025 by rpki-client