Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0bd367b-8757-383d-a889-97c69fa40442.roa
File: f0bd367b-8757-383d-a889-97c69fa40442.roa (raw, json)
Hash identifier: nGjXoc3EXJlFJK1+NbOjdVlAKR5mxO8XJO8kxESiiWg=
Subject key identifier: 4F:E8:59:77:F0:0F:39:C2:2F:F5:D2:EF:CF:91:CC:D0:C1:1D:F4:EA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B64E810F6808FEEFDDF980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0bd367b-8757-383d-a889-97c69fa40442.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:4e:81:0f:68:08:fe:ef:dd:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=b9ae9eba-04cc-4b44-9016-1ac775bba084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:6b:24:b1:78:a6:14:f5:59:40:c0:b8:4b:
02:f0:8c:3c:f6:da:f0:ef:c7:2b:ca:cc:18:0a:18:
3b:c6:0b:ca:3e:4f:33:ac:1c:97:ae:04:64:ec:b1:
77:78:cc:cf:76:cd:c8:66:8d:cc:52:5b:a2:02:3e:
ef:95:11:d0:ce:11:37:98:a5:42:4f:7a:54:22:8c:
73:8f:c7:82:64:f8:06:a0:d4:8f:56:3d:28:08:32:
1f:36:30:15:68:48:0a:0a:a9:c3:c2:a0:8a:eb:d3:
17:79:63:e3:65:1d:dd:c2:e5:2e:cd:58:c8:37:38:
3e:d3:eb:24:43:01:71:d9:44:52:05:7c:cf:46:31:
97:4f:d5:22:e1:14:53:cb:29:b8:dc:15:27:61:8c:
11:3e:68:13:a6:2c:30:7c:8a:aa:4c:67:78:f2:6b:
18:b0:90:37:85:46:83:18:5e:fb:52:71:45:51:36:
cd:af:58:f0:62:88:bd:db:1b:17:4b:97:7e:48:af:
44:fd:08:63:07:a6:62:65:63:03:85:ee:ca:ff:a7:
b3:33:7e:44:db:5f:22:09:d0:6d:85:f5:49:a3:6f:
86:bf:ba:ec:77:a2:d2:81:fe:af:ac:de:0d:1b:80:
ad:61:b7:07:c0:d7:25:49:ec:fe:de:9f:5a:32:96:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:59:77:F0:0F:39:C2:2F:F5:D2:EF:CF:91:CC:D0:C1:1D:F4:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0bd367b-8757-383d-a889-97c69fa40442.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:b6:3b:8b:d5:de:74:db:2f:5d:65:1c:7f:a8:23:6c:5a:85:
72:99:ad:e5:b7:91:c5:f0:9b:08:5f:b5:65:b4:63:46:b2:9c:
9f:3e:df:f0:f1:60:62:07:88:b0:cd:1a:b0:73:a4:87:92:ee:
72:09:b6:c1:ad:d1:fe:2e:d3:e6:c8:e6:c2:95:bd:c3:00:c2:
98:13:90:9b:f5:d1:db:dc:7d:2c:f1:b6:4f:f3:f5:4d:71:8e:
ef:ac:3d:22:bc:95:3e:4d:e0:25:95:cc:d0:4b:fc:c8:fd:02:
aa:9c:b0:ed:58:3f:a9:ce:02:3f:c1:44:d9:dd:f8:73:04:c9:
eb:d6:ee:3c:d5:2c:78:3b:ff:6e:ca:b2:6c:7c:47:f0:7d:86:
0d:76:c3:ee:6d:cb:24:76:bc:03:92:9d:d4:a6:1b:b0:cf:7c:
5e:2d:ee:73:14:03:0c:ba:c0:1e:1a:7a:dc:cb:cf:01:8c:86:
5d:cc:2c:ae:21:27:29:11:48:1a:f3:db:bc:22:b5:1d:12:8e:
44:73:d8:81:dd:7a:5a:25:50:df:da:3d:e7:79:29:fd:65:f5:
2f:28:0b:f8:2d:89:42:67:96:2e:b2:03:86:69:66:83:61:0c:
85:8e:39:9c:22:42:e6:6a:08:1e:6a:51:0e:9d:43:2d:00:e2:
7f:eb:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:19 2025 by rpki-client