Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef143b60-baf3-3f6f-b343-6e9f1499444f.roa
File: ef143b60-baf3-3f6f-b343-6e9f1499444f.roa (raw, json)
Hash identifier: Vqkd2hV88mhZzbM4B+qvgbwDzR47biHJ6C7h1PB6Sjo=
Subject key identifier: 37:F9:A7:41:17:56:97:22:C5:AF:9B:F4:CC:E3:4D:76:AE:86:24:59
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316ACA63FDD04E264BFD300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef143b60-baf3-3f6f-b343-6e9f1499444f.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 216.208.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:ac:a6:3f:dd:04:e2:64:bf:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=0046b9db-ff96-4a64-97ea-6542decb1f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:20:f0:85:9b:1d:7a:fc:09:7d:3a:78:4d:d0:
d2:a9:fc:07:4b:56:09:d0:e2:e6:1f:0a:9c:69:6e:
ce:a1:ee:e5:fe:41:c3:e4:90:05:51:ae:85:4f:24:
d8:bc:52:1f:03:e0:dd:ee:3a:40:a9:f1:bc:b9:61:
ea:1f:29:86:66:c9:cd:44:c9:07:b2:94:5d:e5:04:
67:c7:de:6e:82:60:13:4c:4a:93:e9:63:80:18:f2:
7f:ac:52:03:7f:a0:dc:44:e2:c4:0e:c3:1a:84:ec:
ff:32:2f:2b:a9:89:89:60:b5:b5:b4:43:4b:95:39:
d1:ed:1f:11:d5:cf:f4:7f:93:34:af:fb:35:05:df:
5e:32:3b:76:08:72:74:8b:9b:41:69:9c:7c:14:83:
4c:8d:7c:7e:22:ef:27:f5:f6:fb:69:6c:31:ba:2d:
13:f1:40:23:0e:4c:c4:20:b6:4d:80:9c:d4:3e:ba:
41:a8:ea:18:40:ad:7e:ee:a4:60:dd:ee:55:89:84:
d7:e5:b1:c1:73:36:48:83:11:2c:4a:4b:95:53:e5:
be:04:f6:27:cb:a2:70:3a:1b:9f:22:45:11:67:1a:
7c:8f:39:ed:2a:4a:fc:27:1b:33:ac:25:0e:6b:41:
0f:74:21:1c:1f:7e:a7:79:ce:eb:02:ee:ba:6b:f1:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F9:A7:41:17:56:97:22:C5:AF:9B:F4:CC:E3:4D:76:AE:86:24:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef143b60-baf3-3f6f-b343-6e9f1499444f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:88:c3:13:d3:69:10:1c:cb:33:73:18:28:0f:6c:a1:a5:1e:
57:cd:06:e4:a4:19:8d:fa:e8:cd:09:c2:bf:3d:5d:b0:94:3c:
f6:7a:b5:24:bf:c4:75:33:1f:6e:ab:99:ef:84:d6:7f:8a:82:
7a:b5:82:db:2f:b5:2e:8b:ea:b4:5a:a1:64:7f:bb:53:87:cb:
61:2d:73:4e:41:cd:d3:6f:ab:4b:cf:85:c9:54:7e:64:f1:fc:
98:3f:ef:26:7d:07:2b:6b:f7:d0:80:52:f4:0b:64:48:03:52:
21:17:33:c5:0d:e8:8b:6b:2e:c1:03:49:60:6a:69:d9:e5:d6:
9c:b5:db:6f:75:dc:57:e8:79:f2:93:2e:8d:56:db:72:dc:0e:
ff:c8:67:c1:84:3e:b8:51:37:ad:95:46:2c:8c:aa:2a:fd:55:
c1:30:53:e5:90:81:df:21:26:45:50:e8:4b:50:df:ff:f8:02:
f7:ae:58:65:07:f2:b0:b9:7f:92:95:f6:a0:7e:e5:4c:c1:7a:
dd:83:0c:8e:8f:3b:71:9f:15:c8:87:9b:b7:36:6b:35:0e:13:
86:e5:b5:6e:55:12:d8:c9:a1:90:e1:bd:ca:83:51:85:c2:72:
55:0f:17:bb:f6:90:7c:0a:e4:d2:be:61:0d:9e:cf:39:2e:44:
70:6d:26:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:56 2025 by rpki-client