Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4629ddd-9952-3fb4-ac5b-82cf1812b86d.roa
File: f4629ddd-9952-3fb4-ac5b-82cf1812b86d.roa (raw, json)
Hash identifier: wKqjHbqCCGZMA09yLJ5ZGRpUkT8xt0W8OhQrJr8mxwI=
Subject key identifier: 96:53:9B:D6:7C:A1:0B:86:37:6E:BE:FD:9A:98:71:8A:11:E8:56:1F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2A0FDF99B526A25A848300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4629ddd-9952-3fb4-ac5b-82cf1812b86d.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 399923
IP address blocks: 205.200.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2a:0f:df:99:b5:26:a2:5a:84:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=780e9ad4-6a58-4396-bc27-08106ec4ea48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:1a:8c:41:d0:b7:d3:53:fd:1a:89:91:b2:
f1:b6:81:8b:55:4a:e1:94:59:8e:8a:8d:6b:40:ec:
8e:67:53:f3:33:ab:b2:7d:05:0e:1b:2b:e7:51:36:
97:02:40:a8:11:29:b8:92:f9:db:70:25:f5:a9:ee:
d6:5d:81:b4:a3:9c:cb:69:43:5a:00:13:ab:4d:6d:
e4:9f:44:37:11:e5:81:5c:03:7c:12:17:10:21:89:
b7:5c:5a:4f:07:31:e1:c0:c9:7b:62:5a:a1:58:06:
83:4c:73:dc:02:54:8b:c2:f4:7b:bd:5a:61:de:7e:
67:96:0a:2b:04:9b:08:c3:50:4e:c7:9a:b0:0f:3a:
5d:9b:ad:7f:7b:a6:ce:eb:b2:fe:2e:88:a3:05:b1:
1d:b6:30:80:90:6c:c5:03:52:a8:7a:38:2e:5d:80:
f2:dd:86:fe:cf:3a:e6:3e:2c:88:a9:72:1a:ea:45:
3d:2e:63:f0:79:8b:ed:0e:c4:5c:0d:a0:74:f0:b3:
5b:ac:8d:bb:68:57:56:b1:c2:0d:8e:a6:85:46:b7:
a2:f7:05:2e:64:f0:da:a9:68:82:be:46:d2:31:bd:
b2:82:2a:58:2f:46:49:71:78:87:6f:22:4c:65:51:
56:5b:1f:a4:a9:e7:17:4a:88:fa:84:48:15:f3:f2:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:9B:D6:7C:A1:0B:86:37:6E:BE:FD:9A:98:71:8A:11:E8:56:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4629ddd-9952-3fb4-ac5b-82cf1812b86d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
205.200.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:7e:16:60:85:d2:ef:f5:0f:f7:b0:2c:65:cf:29:fc:61:6d:
f1:8d:57:05:5d:2c:0b:ca:76:5d:80:95:e8:ce:35:6f:12:2b:
1a:98:ec:fb:aa:04:ec:9f:52:89:32:ec:ca:b6:b6:45:db:65:
6e:0c:7b:97:39:37:4e:fb:69:19:e1:78:7e:f2:40:34:f4:a1:
e5:cb:c7:9a:f9:f0:a3:3a:8c:29:3a:82:1f:72:6e:79:71:81:
6e:37:62:5e:9f:00:e9:b4:89:f9:11:ff:bf:92:31:ad:eb:c5:
ec:ed:3e:ac:cc:43:62:bf:46:00:79:2a:a4:a0:1f:1e:86:1a:
29:7c:4c:44:66:41:f8:56:d7:7a:f1:d5:bf:49:8f:a4:d5:ca:
0b:cf:97:7c:04:4d:3a:a5:61:7d:64:06:bc:c0:c8:73:6c:ae:
a7:43:22:75:a7:50:84:c2:bc:c7:e2:7f:ca:36:14:9e:e0:e6:
59:fa:ec:91:cf:f8:e1:ff:9f:96:5c:88:95:a3:dc:74:ff:0e:
b6:78:c6:06:51:9b:79:b5:a6:16:e1:c1:dc:67:cf:64:10:71:
88:3d:2d:f8:06:29:ad:34:bd:e4:e9:55:de:1f:6b:7d:83:01:
87:6a:03:8a:b6:8b:70:6d:04:e6:54:b4:96:e8:fa:8e:07:77:
2c:ba:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:48 2025 by rpki-client