Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0af1347-bb6f-3b90-94b0-8bc410a9fe05.roa
File: f0af1347-bb6f-3b90-94b0-8bc410a9fe05.roa (raw, json)
Hash identifier: ikPX+765UHNtxjMOdxhm3EsLnYeDvX5RH86bGAbpxwU=
Subject key identifier: 03:F6:11:39:DF:5A:AA:45:C9:DF:BE:83:91:CA:D6:F0:BA:EE:95:01
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B633333CF553C015548180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0af1347-bb6f-3b90-94b0-8bc410a9fe05.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21723
IP address blocks: 204.101.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:33:33:3c:f5:53:c0:15:54:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=639b969a-ff6d-46fd-9e3a-424a9a786e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:1d:29:89:ee:05:c0:44:c3:9c:8d:bd:da:
b8:35:90:f3:ef:bc:23:1a:94:3e:8a:c0:ca:df:ca:
2c:fb:51:f2:ac:7f:87:9c:a7:e7:23:ab:0c:a8:c0:
33:f3:d5:99:d3:bf:b5:f9:5e:0d:38:de:8f:01:1e:
ef:7a:6c:c0:11:11:91:ce:37:80:e9:46:9e:a9:3e:
16:ef:6b:71:b7:86:5d:cb:26:10:4a:4e:c3:ed:f3:
c2:a2:e8:59:68:6d:ae:2f:27:78:9b:81:fd:01:62:
2f:5c:e8:37:2a:1a:ee:c9:51:d0:1c:b6:db:25:dc:
fd:fb:f5:f5:8a:b8:87:87:72:d6:4a:b8:ba:40:c4:
2d:7d:02:89:8f:5a:59:41:c8:72:37:74:f7:9a:9e:
f4:8a:62:7b:17:75:35:f0:d8:7e:24:a6:00:59:25:
62:8f:14:1a:58:5c:e5:40:40:d8:c2:d9:b8:00:a0:
3f:e0:b9:da:ef:48:82:11:3c:80:a6:f3:f6:9e:25:
ba:f6:d7:15:a2:39:42:22:70:ea:7b:47:c4:b3:0f:
2e:7c:c7:f6:6b:2f:bc:4f:46:46:be:4e:aa:f6:47:
41:c8:ae:b1:b6:9d:97:d4:57:9c:d8:d7:cf:ab:46:
c2:d7:a7:dd:87:a3:4e:7a:13:9c:c8:f2:a6:30:51:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F6:11:39:DF:5A:AA:45:C9:DF:BE:83:91:CA:D6:F0:BA:EE:95:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0af1347-bb6f-3b90-94b0-8bc410a9fe05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:e3:d5:1e:11:a5:b8:57:72:cb:86:ff:84:9f:af:ce:80:57:
64:4f:96:1c:06:0a:d3:16:c1:30:22:ec:cc:2d:37:b3:fc:45:
c2:82:d3:d9:f6:2e:ae:6d:e9:b4:1c:5b:d8:01:fd:3d:1d:19:
8e:68:fa:16:f3:50:17:1d:1f:91:54:64:6b:a8:05:29:6c:e5:
7c:53:65:cb:e3:93:ee:05:95:72:ae:1d:48:52:1c:c5:12:9a:
f2:d2:d3:e5:32:17:a8:17:5f:e4:50:3c:03:a1:f4:56:91:c3:
be:91:42:d4:11:14:6b:92:8d:95:dd:ae:28:96:0f:30:28:4a:
37:bd:c1:28:86:f8:22:bf:3d:71:f7:52:97:d1:4d:02:f5:e8:
8d:09:c5:b2:56:89:65:0d:ec:2f:6d:c3:16:be:c9:59:f8:91:
9c:cf:87:bb:03:3d:5b:df:f6:f5:51:38:ff:83:3e:3b:70:6e:
61:30:13:69:38:a2:25:ca:4b:51:04:a7:eb:d4:07:e2:b0:0a:
09:63:75:74:1d:5e:bd:96:1c:37:28:cb:bb:29:0b:ec:1f:85:
d5:3d:39:07:48:2c:25:33:82:c9:a7:9d:5c:8d:96:a7:4d:38:
ed:27:73:a6:6c:23:14:5e:29:d2:c4:eb:e1:b1:60:51:e3:b4:
0a:fd:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:09 2025 by rpki-client