Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4f2381c-4fd4-32ca-aeb9-f155d7462564.roa
File: f4f2381c-4fd4-32ca-aeb9-f155d7462564.roa (raw, json)
Hash identifier: usPnwZPSEznuIaT2r9mqrUNZs9k2DC7H1pOJb2sKG2A=
Subject key identifier: B8:2B:14:48:EB:A5:1A:E5:AD:CC:9F:81:20:5D:D9:AA:EA:00:AA:FC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7769637F3323B5CA14300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4f2381c-4fd4-32ca-aeb9-f155d7462564.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 11831
IP address blocks: 209.17.170.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:76:96:37:f3:32:3b:5c:a1:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c9fb42ba-f4b5-4b89-b2a4-78b31aede175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:5b:e0:42:f9:1d:c0:f7:52:61:a3:2e:fb:
6d:be:a1:3c:42:44:4a:04:b5:81:67:17:b0:2b:8a:
bb:43:5f:33:2e:44:97:d1:ba:97:8d:a6:96:1f:3d:
91:53:12:33:85:51:64:55:41:77:de:ba:19:d4:2e:
99:16:93:fe:bb:2d:de:17:64:9b:c9:81:2e:f7:9b:
0b:42:6b:af:2e:5d:46:b1:61:fe:e4:c0:9b:11:d5:
30:6d:c1:ee:81:ea:56:f3:db:31:f1:79:87:71:6c:
fe:29:91:4f:02:af:7e:5c:9e:c7:f7:bb:2f:2d:75:
1d:e4:fe:29:e0:5c:02:b9:69:6c:35:9b:a3:12:19:
f5:c9:16:5f:15:a5:09:9b:2c:93:f4:14:e8:35:52:
0e:82:2b:48:23:3d:76:9b:5b:10:8a:16:8f:3c:3c:
e4:3d:9a:0c:50:88:fb:91:af:aa:11:94:f2:6c:35:
c2:6e:34:b5:81:88:29:ec:dd:9b:7f:62:e6:bd:7f:
fb:8d:94:a1:82:0b:58:ac:9d:f9:4a:7c:b1:5e:95:
89:50:93:33:0b:a1:47:40:d0:77:b1:32:d8:e2:f8:
92:2e:23:2b:b3:87:8a:28:63:d5:cb:3b:c8:46:f7:
75:13:43:94:1a:53:06:22:6a:5d:21:69:70:1a:3a:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:14:48:EB:A5:1A:E5:AD:CC:9F:81:20:5D:D9:AA:EA:00:AA:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4f2381c-4fd4-32ca-aeb9-f155d7462564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:a8:5b:fa:66:99:56:ac:f7:92:95:e1:05:9b:26:3a:f1:56:
0e:58:23:4d:b0:ee:39:f1:32:8a:1a:09:a2:f2:5f:bb:42:bd:
26:85:2c:fc:54:66:67:a7:9b:d4:29:d8:92:b2:b6:6e:53:80:
35:c5:a5:8b:79:cf:02:d8:5e:08:d8:ba:82:8c:2b:6b:da:20:
9e:bb:4d:72:21:67:d0:da:c1:7e:19:50:14:26:cb:00:ed:1b:
1c:cb:96:b3:ec:a8:81:9f:ad:de:37:a3:5a:d4:bb:31:d2:66:
b9:f8:5e:bf:80:41:81:94:6f:01:ae:cb:45:e1:ce:87:96:af:
d1:ce:4e:f4:6e:c7:0b:07:27:09:ac:4f:04:1a:d0:6a:ff:59:
30:1e:f3:12:ce:d3:18:4a:e1:37:3d:64:73:81:a8:02:8e:79:
53:81:43:dd:0e:08:46:a9:42:77:b6:42:e5:92:b4:80:49:47:
a5:fc:c4:09:72:2c:4e:f1:36:6f:aa:42:72:96:31:29:c1:57:
f9:4e:36:31:0f:d8:f2:c8:15:63:e9:55:4f:94:bb:78:4e:d0:
ae:93:60:08:07:99:4a:7f:d2:5a:ad:86:b7:39:92:bd:c9:0f:
3b:33:b8:f9:e1:c1:0a:0c:26:73:4e:52:9f:1e:7c:f5:5c:f6:
49:93:f2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:49 2025 by rpki-client