Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb2f5770-f44b-3f74-bc7d-800e1ad57723.roa
File: fb2f5770-f44b-3f74-bc7d-800e1ad57723.roa (raw, json)
Hash identifier: kuemi/An2CEXt0/qTay6m0QPGcAdmEnCfCmi3Ryn5BM=
Subject key identifier: 97:3A:1A:14:1D:07:8C:89:95:6D:F4:52:6C:A8:E3:3A:99:87:E7:79
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B63D963B5717092504480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb2f5770-f44b-3f74-bc7d-800e1ad57723.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 35911
IP address blocks: 209.226.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:63:d9:63:b5:71:70:92:50:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=1e730321-178f-4524-87ce-3034fb610f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:aa:49:b5:97:a0:07:1c:a9:98:ab:63:6a:
7d:39:c6:20:c6:b3:04:c2:fa:f1:03:bd:1f:6f:b5:
8c:70:f0:60:8c:f1:5a:e5:0a:11:1a:19:78:65:20:
96:de:73:1b:ea:98:32:82:c0:38:6e:0a:16:a8:de:
ae:1b:a2:d9:63:00:47:3f:ff:d4:e6:cd:e7:d6:5c:
0e:ce:be:b0:67:f4:68:ee:42:b6:30:3b:b5:f6:b5:
09:80:d0:18:b0:df:8f:bc:71:ab:91:29:da:10:af:
7f:f0:32:ff:81:c7:c3:c3:4a:2e:ba:db:b4:52:1a:
08:b2:e7:4b:da:d0:4d:77:e9:3d:27:97:6f:92:af:
2c:74:17:e6:bd:06:f4:a7:00:8c:c0:4f:c3:4c:c6:
69:9e:9b:28:b2:a9:a6:20:a8:4f:4b:f8:0c:3d:85:
65:a6:a7:32:49:55:9f:be:bd:8b:ca:52:b8:42:b3:
7d:1a:d3:41:73:39:71:47:b2:9d:5e:28:0a:f1:7c:
f3:1f:57:ae:ca:f3:91:64:8a:72:fa:c1:b7:70:2f:
bb:83:d7:ee:ce:29:3b:b4:4f:3c:e9:ae:f4:71:d8:
50:e6:b3:b2:71:cb:f0:42:62:ba:28:27:eb:42:a0:
2f:e3:a0:20:84:c3:9e:12:a2:39:b3:6d:db:00:ce:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:1A:14:1D:07:8C:89:95:6D:F4:52:6C:A8:E3:3A:99:87:E7:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb2f5770-f44b-3f74-bc7d-800e1ad57723.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:65:ae:48:be:f1:57:e4:f9:ec:bb:67:16:5b:f8:ae:57:5a:
94:a4:c8:1d:67:32:a8:13:47:95:58:3b:1b:83:fa:a5:34:72:
c3:49:cb:96:3e:0a:fd:5f:8d:f7:7d:ef:72:f6:7e:02:11:4e:
26:09:c6:88:73:f8:b2:4d:aa:8f:69:2f:f9:5f:1a:3d:d6:6a:
f0:b2:00:01:e6:b5:89:90:0a:47:dc:a0:5c:dc:96:2b:a0:e8:
d2:43:48:dd:29:59:f7:42:57:16:f2:bb:46:e9:33:e2:62:77:
20:ca:3d:0c:d6:b9:7e:47:c9:dc:68:c8:45:78:64:92:77:0c:
f4:aa:5a:11:53:ba:2d:90:92:70:23:4f:48:71:7c:55:1e:08:
16:cc:d5:d6:44:d8:73:9a:1e:22:ed:c3:95:17:3e:ac:f6:a4:
c1:ba:a6:4a:b6:20:d0:66:92:09:0d:f2:b0:26:b7:b6:ce:da:
dc:53:cd:da:10:63:3f:10:a6:23:de:b1:3e:7a:5d:9c:28:28:
17:5b:6e:15:4c:e5:3d:92:27:99:a8:78:9f:99:62:35:2e:cd:
86:f3:53:2a:6d:3a:53:40:87:fc:36:1d:31:b6:f9:0f:e2:cf:
c4:e4:bc:40:f7:a0:f2:77:e5:b9:95:c2:eb:89:12:ae:d7:35:
49:43:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:48:49 2025 by rpki-client