Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee0651fe-fe17-3e8f-b647-e8d8f5bd4e90.roa
File: ee0651fe-fe17-3e8f-b647-e8d8f5bd4e90.roa (raw, json)
Hash identifier: C6ZhfZMaPVMVi9y55TVc/3xyvPVGdatpKB4H/25sNrE=
Subject key identifier: 36:B4:DC:43:A3:C9:A4:5B:8A:83:E7:F8:C3:DA:63:48:87:7D:2C:DD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B5955A85D7BB90F57010C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee0651fe-fe17-3e8f-b647-e8d8f5bd4e90.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 577
IP address blocks: 209.226.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b5:95:5a:85:d7:bb:90:f5:70:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=4bc7669f-8662-44ad-81d0-d6ac47995ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:fa:00:db:69:c6:cd:d2:71:95:3b:af:20:
d5:9e:e0:a2:30:2e:37:e9:92:97:e1:ee:73:16:8b:
4d:d4:e3:bf:b2:7a:3b:07:fe:2a:d1:6e:23:b6:87:
8e:62:b4:be:bb:3d:af:30:6e:33:7d:ae:5e:d9:51:
24:d7:f8:33:90:3a:e2:1e:1d:8e:43:f6:b3:36:a2:
8d:16:7d:7e:fd:39:0b:3e:c0:5f:54:25:b1:5a:8b:
8c:f7:ec:fe:bf:d1:87:36:38:e1:29:ab:b3:61:a2:
74:e3:fd:d2:e9:c4:4a:ed:ce:12:f5:f6:9b:6b:26:
fa:5a:a3:6a:52:33:69:e9:99:65:ff:6d:72:1a:75:
00:b7:fb:74:ec:69:e8:32:1a:af:36:67:69:40:1c:
6d:05:01:d2:79:0a:1f:97:6a:33:85:60:4d:8d:46:
1e:e5:4d:ec:b5:06:c5:d5:9f:26:ae:d7:a7:ba:2c:
2e:33:97:18:67:00:11:4e:f3:b3:fe:11:e3:0f:e8:
b5:50:db:e5:0b:81:7a:76:51:1a:84:f3:fd:00:cc:
7a:eb:2f:79:4e:bc:d8:01:9d:fb:57:64:0c:29:0a:
84:b2:84:17:ce:25:fa:35:e6:f3:05:41:10:6a:ec:
7d:6e:c7:a3:a3:7e:fe:61:f0:87:61:5e:38:30:e5:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:DC:43:A3:C9:A4:5B:8A:83:E7:F8:C3:DA:63:48:87:7D:2C:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee0651fe-fe17-3e8f-b647-e8d8f5bd4e90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:90:f3:3b:eb:90:72:35:5e:92:ca:7f:ad:ae:6c:6a:08:da:
29:77:b3:ae:43:2e:27:06:11:df:eb:e4:68:6f:c7:13:e5:71:
46:1c:cd:29:98:61:d8:f9:75:d8:3e:22:49:bd:5b:d4:d3:7b:
ec:5c:09:a6:24:3a:13:6b:4b:12:31:d1:c1:c8:80:1b:a8:6e:
d7:46:0c:3e:6b:fc:78:d4:fc:f7:44:d1:a0:d8:be:18:0d:c8:
c4:3b:ed:ee:d5:49:e2:8b:94:22:a3:c1:c1:21:05:c3:71:fd:
0f:46:a3:9f:25:4f:6d:02:fb:6a:0a:66:7f:c5:8c:ec:0d:ad:
45:e8:aa:df:29:8e:96:5d:4f:a2:0b:c2:30:03:1c:71:77:cc:
1d:cc:28:5e:b6:6e:6c:d5:c9:0f:18:a7:90:b4:39:60:06:95:
6b:d9:dc:a5:f0:dd:65:8f:aa:3d:8a:13:fe:b8:32:88:fe:b4:
c5:3e:64:60:0b:b3:86:88:cd:06:77:95:77:eb:60:6b:32:81:
ae:57:66:ee:97:ab:b6:3d:db:41:70:cf:bb:fe:f7:74:de:8e:
6b:15:78:4a:8b:25:bd:dd:80:ca:5a:12:79:32:e2:d5:d0:f4:
63:20:1a:5d:5a:c5:43:e5:a4:93:a4:2d:a5:40:ce:f4:75:5f:
e4:37:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:30 2025 by rpki-client