Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f6827b80-aaec-3412-88b7-e60cb4b09a6a.roa
File: f6827b80-aaec-3412-88b7-e60cb4b09a6a.roa (raw, json)
Hash identifier: 1WazJtgOBBOgqOpwStwFLDqwgJ0SkTfZJ/J1S1Wq9iQ=
Subject key identifier: 4A:4B:A5:05:55:52:32:60:AC:FD:82:85:27:DA:56:49:63:A0:5F:84
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B76E6A3D033499C0862700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f6827b80-aaec-3412-88b7-e60cb4b09a6a.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 29974
IP address blocks: 207.236.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:6e:6a:3d:03:34:99:c0:86:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=3cf8ef3f-5795-45fa-ba75-4a74c0f2402b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:d7:27:61:b4:25:d8:e5:f6:59:a7:2f:8a:
52:b1:ab:4a:6c:34:f7:b5:7e:e6:71:c2:26:7e:2e:
88:90:16:3c:bc:b7:01:7f:c6:71:4f:8c:fb:3f:5b:
25:26:48:f9:0e:e9:79:40:19:21:ed:1f:e1:92:b4:
17:da:27:2a:17:a2:36:aa:e8:dd:93:3a:7f:2b:52:
92:e1:65:d4:fb:32:b8:2c:2d:f5:34:aa:0c:77:1c:
9e:cd:c1:2b:66:53:6d:a0:4e:51:d4:d2:f2:db:d0:
4e:24:66:6f:ea:03:ab:23:c9:c8:b8:bb:2b:47:3b:
da:37:65:ef:71:74:f1:0b:e5:c3:3d:fd:d5:73:f4:
08:de:f4:ce:58:1d:15:05:2f:db:74:27:e0:b7:a2:
83:00:79:6c:3e:13:56:b2:17:c5:2e:88:98:c8:de:
64:46:3f:a7:da:d5:d5:66:31:55:0c:85:0a:f4:7a:
a3:85:f3:41:26:1e:bc:d4:4f:57:fa:ed:bc:1a:33:
23:a0:24:95:7c:88:5b:fd:65:a9:ea:72:b6:23:f5:
a5:cc:76:a8:90:f9:d1:b9:12:d9:f5:86:48:07:39:
ac:26:e4:d5:15:12:9c:5e:2e:25:e7:ad:9a:32:31:
7f:c0:6d:30:42:b1:d8:38:bf:3e:0d:8a:72:22:c8:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4B:A5:05:55:52:32:60:AC:FD:82:85:27:DA:56:49:63:A0:5F:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f6827b80-aaec-3412-88b7-e60cb4b09a6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:b0:5d:f5:c4:47:77:fc:82:b9:26:d2:90:57:a5:3e:f8:b9:
6e:39:f5:ea:21:03:74:eb:00:c0:15:f4:5e:cb:a4:34:84:cc:
79:f8:55:fd:4e:de:ca:73:04:1d:90:dc:8d:08:23:25:90:21:
ee:70:aa:27:d8:7f:ab:32:a5:39:b7:df:35:24:4b:29:ae:d3:
42:ad:5d:3f:2f:49:7f:10:79:3d:46:d7:a8:b8:8a:bc:e9:56:
f2:af:ee:63:c7:65:79:5e:50:ec:ca:96:d3:96:e6:e3:9d:f6:
28:55:cc:78:7a:08:f9:75:d9:d8:1b:9c:f7:cf:5c:9b:8a:98:
c5:9e:2c:70:2d:17:bf:32:eb:22:58:ed:5b:2d:a8:0a:36:54:
b2:d4:69:b0:1f:fc:e0:8f:ef:12:05:50:c2:a3:90:ed:9a:06:
46:f7:71:1a:52:ee:be:0c:90:7d:eb:56:0d:dd:a0:b7:a9:42:
8e:f4:f9:28:67:82:ff:51:0b:63:8a:29:da:b3:30:cd:8f:29:
d6:09:f5:9c:21:8c:6d:62:92:ff:e4:02:98:de:2d:bf:91:64:
00:3b:f7:eb:ea:30:6a:88:3d:bd:a1:b8:02:9e:9d:f1:a4:0a:
65:54:ff:96:cf:bc:0c:79:62:d4:00:1c:e8:2a:73:0f:7a:fe:
05:c5:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:48 2025 by rpki-client