Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f563ceff-1695-39d4-b4a1-202a554773f2.roa
File: f563ceff-1695-39d4-b4a1-202a554773f2.roa (raw, json)
Hash identifier: A4z9bUFhKRiSXaMl24V84YFvfAq3jEbyigfJIr8QCtU=
Subject key identifier: E9:7F:C7:EC:1A:BD:D7:A4:6B:09:78:26:45:1C:B7:AB:D7:D3:57:87
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B63ECE7C2CF0314131A300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f563ceff-1695-39d4-b4a1-202a554773f2.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:3e:ce:7c:2c:f0:31:41:31:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=cc67fc64-fa23-457f-895d-b4130355712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:2c:61:38:e8:08:33:8a:29:51:bc:e9:ea:
82:17:a9:51:58:af:5d:18:70:cf:80:ba:03:13:54:
9b:73:a1:08:10:45:68:05:d4:a2:db:4b:8d:90:dd:
9f:16:63:6a:8e:55:dc:8d:9f:28:46:3c:d3:49:c5:
31:9d:a1:5e:fa:23:30:9a:7f:73:bf:c5:fe:34:76:
82:0a:31:31:e4:fe:1a:c8:94:f4:10:42:58:c6:de:
00:84:09:83:ed:ab:99:7c:9f:92:cd:60:82:13:f4:
80:86:aa:4d:07:ad:08:a8:ba:7f:e8:10:cf:6c:93:
5d:6f:65:8d:7e:2d:ba:eb:19:df:07:33:2a:00:65:
c0:18:96:f2:28:24:d2:ff:93:c8:6a:1b:33:e0:63:
9a:b5:fc:13:6f:3d:c7:59:38:02:d2:f4:ef:96:f2:
af:58:44:2a:7f:da:e6:6f:67:c1:30:c3:c3:79:11:
a9:3f:25:33:e2:13:d4:d6:00:2d:72:30:2b:e2:2c:
4c:e2:50:50:a9:af:9e:cd:49:38:c1:c6:a6:68:4c:
a0:55:4a:95:8a:6d:1b:f1:d4:c5:85:7d:7e:6a:08:
ec:a1:2c:1b:fa:2b:e2:51:2c:bc:88:25:c3:d8:3b:
af:a8:11:31:1d:d6:e0:f4:f8:75:cc:be:b5:60:64:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7F:C7:EC:1A:BD:D7:A4:6B:09:78:26:45:1C:B7:AB:D7:D3:57:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f563ceff-1695-39d4-b4a1-202a554773f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:15:7f:97:df:4d:c6:5f:09:e4:ee:36:60:be:53:b2:a5:00:
25:35:60:d2:fe:e1:b1:f9:ee:99:86:98:35:c8:30:0a:53:65:
46:9c:55:f7:87:62:fb:6c:fc:4e:e9:0e:07:46:a3:b2:e4:a5:
bf:e8:37:b3:ab:79:bb:ac:30:b5:d9:9e:03:f0:3f:93:cb:b9:
9a:98:b1:80:08:2b:80:80:ff:52:03:36:dd:18:a8:e2:5d:17:
64:ec:1e:64:cd:37:b1:df:02:68:17:df:7a:5c:da:80:54:e6:
f9:47:a8:15:73:90:75:4c:99:b3:98:26:2c:39:ed:88:ab:e2:
09:87:1c:27:81:b4:7d:43:d3:ab:b3:00:26:f6:d2:e8:23:16:
c2:2d:10:83:a3:38:63:60:12:5c:37:5e:a2:67:60:a1:dc:cd:
8f:6a:d7:9e:c7:e0:39:98:e6:20:00:91:41:b2:4c:72:4a:ee:
8c:b3:84:ff:91:74:a2:99:a8:a6:a2:97:85:e4:13:03:20:be:
31:f1:db:30:a0:4b:0f:4a:28:29:58:50:61:66:77:52:77:21:
34:f0:18:af:ce:7b:01:56:32:e4:17:c6:5c:85:51:18:2c:89:
bd:e6:4d:f2:60:7c:32:9f:09:5a:91:57:0f:9d:14:d1:21:25:
7b:41:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:03 2025 by rpki-client