Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f54cb77b-ab40-311d-93ea-a2ee60d2473d.roa
File: f54cb77b-ab40-311d-93ea-a2ee60d2473d.roa (raw, json)
Hash identifier: 611XwvKOkS3Y5f+X3x9z2/TJ8Ije9e3hYrLenK1HsZM=
Subject key identifier: 2D:D1:9D:3E:DA:B2:2C:B0:53:2C:7D:A4:22:0A:77:D2:41:25:D7:AF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6C742F09A7ADB3940A500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f54cb77b-ab40-311d-93ea-a2ee60d2473d.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 206.172.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:c7:42:f0:9a:7a:db:39:40:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=04cf1120-ad68-424c-973e-614194dc9d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:59:31:f7:5b:bf:1c:e4:3a:69:b4:a5:c7:
18:69:8a:60:04:c7:b8:f1:b8:4a:ae:b2:bb:05:ed:
5e:bd:90:dc:26:86:3b:68:48:30:28:66:3d:d4:36:
d1:bd:ed:4b:57:03:77:54:13:9f:93:a9:c7:5a:5c:
d6:21:b1:ca:44:a1:ea:c8:37:5b:5a:d9:b4:b4:61:
35:9a:81:b2:b3:cc:36:a8:41:7a:b9:5d:e3:e4:c4:
d6:58:fb:71:11:51:7a:ec:f3:33:dc:7d:23:f0:b9:
a3:b3:b8:44:7a:f3:29:8a:fc:3d:d3:f3:91:84:38:
32:b7:35:e2:3c:f8:25:20:18:ce:00:65:e3:5d:bf:
37:ce:ca:fe:a6:a2:1e:9b:2e:74:47:18:44:0e:dd:
07:03:90:6c:db:f5:e7:69:e1:1f:43:6d:18:42:aa:
d4:53:5c:e6:96:f1:60:eb:e4:03:d6:97:1d:03:12:
81:47:cc:55:57:6a:84:2a:c8:cb:9f:f9:12:75:58:
1b:fa:ea:0d:30:8a:5a:ce:59:7a:16:ac:36:d6:5e:
16:e1:84:25:b2:5d:cc:7f:4c:ef:15:bc:15:c1:95:
c9:5b:c0:70:28:07:01:ad:1e:81:86:40:1a:3c:ff:
a5:60:22:31:32:05:56:e4:51:a1:06:02:b0:c2:05:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:9D:3E:DA:B2:2C:B0:53:2C:7D:A4:22:0A:77:D2:41:25:D7:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f54cb77b-ab40-311d-93ea-a2ee60d2473d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:18:6e:e8:ff:53:2f:c2:40:30:bc:a3:50:76:d1:ad:09:90:
95:bc:ac:26:98:91:18:dc:35:ca:8e:18:43:8a:bf:73:76:e5:
86:79:07:c0:de:40:1f:f9:d3:a9:2b:8d:9b:74:16:e0:ce:75:
df:10:26:5a:bc:d4:25:f8:60:3b:04:50:35:28:63:75:2b:b0:
37:63:c6:da:b5:57:6f:aa:00:3a:7e:5f:f1:d3:ed:9b:41:2d:
1f:8e:a8:2e:25:63:cb:39:8b:1a:df:6c:fa:f5:2e:a6:74:d4:
8c:e5:d3:a2:0f:f6:f8:de:da:65:39:0a:8a:77:e7:58:e6:d4:
12:b2:e9:1a:d1:c4:ae:19:b3:53:e5:ac:88:0a:8f:a0:e7:93:
3f:78:6e:0f:23:29:5c:48:0f:e5:70:6d:2b:5d:a1:05:02:18:
8d:b0:f4:a8:38:f6:87:79:10:5e:9e:b8:da:17:0a:06:a9:e1:
e8:19:10:33:b9:e9:9b:52:4d:07:f4:24:64:02:f4:20:16:9b:
91:d7:47:67:c8:82:66:e0:10:ac:88:ba:40:83:dd:82:d5:4c:
46:50:cc:3b:16:a6:92:8e:0c:8f:c9:be:02:4e:f4:b1:e0:36:
a0:8d:fc:e7:61:4c:7c:03:93:70:5a:e9:1b:0f:c8:99:46:a2:
90:d6:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:46 2025 by rpki-client