Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ecfeafe1-8e29-30d6-bd89-8f4a73d6db2c.roa
File: ecfeafe1-8e29-30d6-bd89-8f4a73d6db2c.roa (raw, json)
Hash identifier: a7EkzmOJ3pIYfS/swxLbHH0u/01xwJgaVScYozVe3Cs=
Subject key identifier: 59:4F:70:1C:CD:6E:5D:CD:C2:80:4C:A0:6D:64:A5:C4:AE:9C:B1:BE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2997DF4BC689E7B1197100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ecfeafe1-8e29-30d6-bd89-8f4a73d6db2c.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 198.235.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:97:df:4b:c6:89:e7:b1:19:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=c56d9516-70ea-4911-bade-b3472a3e89ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:38:eb:9b:6d:67:cb:5b:98:11:96:65:7e:cc:
43:24:30:3b:cd:fe:48:7c:cf:bc:48:96:8b:0b:1e:
b7:3e:a8:54:33:72:a9:62:97:d3:9d:9e:7c:b4:8b:
58:96:1e:7d:a4:41:86:3a:50:ab:e4:18:67:5a:6a:
50:e4:3e:f6:a4:8a:ff:4f:d1:c9:fd:ce:a4:70:fd:
64:64:27:77:6c:c8:c0:da:3b:2b:85:02:8c:8a:b2:
de:ef:92:34:52:3a:57:cc:e1:cd:42:9d:80:22:c5:
36:90:79:e3:64:6e:ae:99:6b:0f:07:2c:50:a6:d6:
2f:60:d6:2c:13:62:56:20:c7:ff:45:cf:3a:7d:d6:
e9:e7:d6:ae:18:d0:d7:b7:44:60:e8:bc:ca:5f:0a:
61:81:9b:5e:4c:88:49:6c:67:98:5e:c6:65:73:a9:
17:50:c4:27:39:64:a2:51:2f:cd:55:3b:cd:37:4e:
da:97:e1:ac:d9:3f:6c:43:93:50:14:d5:29:3a:da:
a5:76:0f:62:a6:b3:95:cf:98:28:ba:2d:d7:54:c2:
39:8c:53:79:09:a1:71:6a:86:96:f0:f0:de:46:5d:
f2:fe:35:59:f6:4c:2d:7f:73:07:c5:f5:9f:53:26:
58:23:c4:a6:5e:57:67:76:2e:4c:65:99:97:26:3e:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4F:70:1C:CD:6E:5D:CD:C2:80:4C:A0:6D:64:A5:C4:AE:9C:B1:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ecfeafe1-8e29-30d6-bd89-8f4a73d6db2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:33:df:15:5f:e3:f7:b2:5f:33:0a:0e:cd:59:53:31:90:63:
6d:2f:6f:b0:21:a4:fd:70:12:65:43:b5:50:50:f9:f9:f2:13:
d0:40:6c:72:e2:77:94:62:9a:cc:fd:3e:66:31:5a:19:37:38:
29:96:f5:d3:a5:41:29:20:e3:af:a4:14:9a:0c:28:9f:8d:bb:
ed:79:5a:16:25:83:23:3c:7e:b1:73:f5:96:45:18:99:36:fa:
cb:77:c4:04:03:62:c8:18:0a:d1:0c:11:a5:2a:82:1e:af:ed:
85:d2:6d:50:ba:e2:ec:a5:22:df:f6:3a:cf:75:8d:e5:17:4b:
26:b6:f4:eb:e1:c4:b5:a1:fe:80:86:bc:33:7b:3e:b0:69:71:
6a:af:5d:9b:00:42:74:70:5c:51:6e:b4:f7:fe:90:f6:e3:2e:
87:ec:73:cc:ac:29:0d:51:a9:c5:cb:6d:68:c1:65:7d:cc:f7:
d2:92:08:4d:4b:76:5d:65:08:a0:f6:d0:f7:fd:be:f8:06:1c:
5c:09:17:82:79:7d:a2:6d:c6:74:9d:1c:52:19:ad:ad:ae:2d:
8b:ad:5c:78:84:a8:40:98:65:2d:ed:9b:29:ca:8b:2f:ab:48:
b8:69:33:ce:de:90:d9:52:38:e2:38:b1:e9:55:7d:e7:57:10:
29:14:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:53 2025 by rpki-client