Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd9bcb78-fbb4-3ac4-ae06-169439a4c87f.roa
File: fd9bcb78-fbb4-3ac4-ae06-169439a4c87f.roa (raw, json)
Hash identifier: bxYBQUnM5zOgkZbyZJEFpezDRtPJVhPbkBIQzzwZT2s=
Subject key identifier: 20:19:F9:18:69:8A:1C:A1:DA:E3:3B:8D:9F:CB:ED:65:E4:6C:F3:6B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B666A2D9778FF54FE1B620
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd9bcb78-fbb4-3ac4-ae06-169439a4c87f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 46872
IP address blocks: 204.101.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:66:a2:d9:77:8f:f5:4f:e1:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=aa01228f-f854-4fff-bc33-ab7ad83d6cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:1c:b0:b0:c2:8f:74:74:ca:bf:7a:79:9c:
1f:26:9a:19:dd:bc:e6:61:4b:09:5c:82:85:82:6d:
60:68:9d:03:8c:3a:73:16:76:80:31:e1:70:ce:a1:
60:b5:06:72:17:10:42:74:69:0f:bb:68:b7:10:4d:
7e:0e:60:6f:e0:40:08:b2:12:12:ab:56:d9:43:44:
a5:e3:f2:cd:8e:d2:60:b2:90:34:94:03:4d:f2:85:
9d:dd:9f:17:39:6a:04:f2:84:ad:23:c8:30:f5:00:
4b:07:99:88:e3:69:23:f4:ba:df:6c:79:23:ea:1c:
06:3a:79:46:f8:d4:eb:98:c5:cd:81:0a:a9:cd:bc:
a8:07:e1:fc:00:eb:8e:c6:ae:d9:a4:b2:c1:4d:f6:
15:62:e3:80:a1:04:09:8d:de:52:4a:73:30:29:a7:
79:8a:35:e4:12:9f:41:16:75:61:7c:00:8d:ea:44:
25:49:9d:60:34:9f:c9:69:d3:dd:bb:7f:e7:a3:38:
4a:af:5c:f5:55:59:dd:c2:4d:d2:77:e7:de:ad:12:
b2:de:84:58:8c:f8:4f:67:dc:b3:0a:06:50:aa:52:
71:05:14:be:47:04:92:bf:0b:87:39:2c:55:2d:31:
e6:5f:23:09:7b:53:26:3b:12:04:b0:bb:c3:26:f7:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:19:F9:18:69:8A:1C:A1:DA:E3:3B:8D:9F:CB:ED:65:E4:6C:F3:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd9bcb78-fbb4-3ac4-ae06-169439a4c87f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:b4:fd:88:0b:92:8d:ca:38:8b:ba:02:be:92:ea:32:24:0d:
44:fd:83:3a:b5:57:ea:78:75:92:f6:2e:28:31:ab:54:3b:37:
92:5c:2b:bc:b2:08:38:bf:62:74:22:98:d6:68:4f:3d:92:d1:
60:84:72:5a:b6:55:60:c3:69:8a:71:28:73:d1:7b:c7:0d:cd:
76:c6:dc:59:af:30:92:2b:42:f1:40:3b:7a:00:82:0a:25:c0:
f7:86:1d:eb:da:74:f0:01:41:fe:63:3f:06:e3:62:2a:b6:ad:
44:60:8d:98:74:07:79:cd:f9:cf:1c:1a:96:18:20:41:45:78:
16:0b:b0:fc:49:83:c5:e2:6f:2f:d9:18:99:f7:93:7b:75:7d:
06:66:51:ee:00:61:8b:8b:ca:3f:6f:a4:c1:fb:e9:06:d2:96:
ab:e0:d9:9c:aa:25:20:72:ca:af:a6:af:b5:0e:8e:e9:d7:e3:
81:fc:cd:38:92:a5:ed:37:af:b6:2a:d7:6f:fe:b8:e3:a9:e9:
a8:cf:96:6d:ab:c0:08:45:f7:45:a9:fb:44:8d:1c:c6:da:81:
02:42:e1:32:50:a0:e9:93:36:9a:d9:db:d2:89:93:e0:ad:95:
e6:42:4d:89:34:62:47:b6:18:61:fb:e2:66:67:1f:69:1b:7a:
ea:45:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:44 2025 by rpki-client