Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/105c731c-9b05-35b7-b434-a85207dafb14.roa
File: 105c731c-9b05-35b7-b434-a85207dafb14.roa (raw, json)
Hash identifier: PWSax9F0z9TQ//dBVu3FlrdnnzHJ3uxgaaY8bb17Hy8=
Subject key identifier: C5:DD:70:3C:C3:C4:58:06:CA:0E:28:28:BE:0E:20:9A:0B:C2:D7:FD
Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Certificate serial: 010D0C9F43285848266A11465722770E679F22C0
Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/105c731c-9b05-35b7-b434-a85207dafb14.roa
Signing time: Mon 09 Dec 2024 14:21:19 +0000
ROA not before: Mon 09 Dec 2024 14:21:19 +0000
ROA not after: Sun 09 Mar 2025 13:21:19 +0000
asID: 834
IP address blocks: 209.240.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:6a:11:46:57:22:77:0e:67:9f:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Validity
Not Before: Dec 9 14:21:19 2024 GMT
Not After : Mar 9 13:21:19 2025 GMT
Subject: CN=0a9ac30e-a352-484c-a3e4-573d2bea9328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:69:0f:8b:e2:de:f9:a4:dc:4d:35:48:92:
83:cb:6e:b8:66:24:ed:3e:11:06:9d:3b:c3:ce:31:
12:41:44:6f:b5:6c:98:78:c3:2c:8d:66:29:89:ad:
ca:0f:71:4d:25:23:b6:49:e8:cc:d5:1b:11:cd:de:
f9:47:d6:75:55:98:e1:e0:c0:a5:ef:68:8e:69:1a:
02:bd:0e:c0:08:1c:24:e7:ea:c0:a5:c1:b1:95:56:
6e:f1:d7:d2:ba:07:69:06:e0:cb:fb:29:25:d8:be:
51:e6:92:25:cf:aa:00:8e:cd:6b:f4:94:95:4c:37:
33:b0:71:c6:0e:90:32:52:77:5b:a0:2e:1f:71:97:
76:42:e6:4d:6b:98:7e:83:46:8e:d7:d8:5c:af:af:
da:df:35:f2:6b:ec:af:a3:72:59:93:3c:50:13:61:
98:86:45:4c:1d:eb:9e:8a:d4:c8:65:83:e9:d3:f9:
6a:c0:c0:37:a3:3d:1b:13:e8:37:a0:34:15:84:40:
2d:ac:5e:0b:63:22:f5:c6:5f:09:0f:d1:01:23:d1:
fd:3d:93:f0:07:9e:e3:b6:64:c9:23:70:13:9b:f6:
3f:5f:24:09:b6:70:40:9a:d5:07:c8:6f:c3:c2:78:
54:7c:2e:d0:ff:39:fb:4c:10:25:07:14:fc:1b:8a:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DD:70:3C:C3:C4:58:06:CA:0E:28:28:BE:0E:20:9A:0B:C2:D7:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/105c731c-9b05-35b7-b434-a85207dafb14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl
X509v3 Authority Key Identifier:
keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.240.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:60:63:72:eb:0b:53:44:4a:18:14:ef:48:42:36:5c:5f:f4:
ce:38:0a:ae:3c:cf:b2:a1:09:e9:28:ce:93:02:28:d9:25:aa:
f0:8c:5b:fd:90:ff:45:cd:36:9c:4a:9b:ac:de:61:62:da:75:
6f:df:49:4b:63:e2:18:a0:f6:64:b4:2f:dc:5f:83:00:d8:bd:
86:d8:32:05:e4:9c:a2:da:7a:52:1e:97:47:2e:2d:f1:8b:9b:
a9:bf:c9:43:eb:d7:f7:54:2a:42:16:28:7d:77:3e:b7:ee:77:
e5:37:c3:9c:11:aa:e0:4a:92:f4:b5:b4:b0:24:40:b7:6d:69:
bd:74:07:eb:5e:13:14:ec:4c:6c:71:d4:a6:3e:dc:28:e0:3c:
41:06:e0:cb:45:59:91:da:2c:47:25:27:3e:ed:e5:12:bc:75:
6c:86:9a:ba:90:69:4f:08:f3:4a:b6:2d:05:af:a2:61:26:c2:
da:39:1c:a3:93:8e:f3:16:7d:48:6b:79:33:88:fd:b6:01:10:
41:2d:23:4e:51:03:f1:48:b4:d1:cb:6b:ab:4f:c1:76:b6:33:
b3:90:77:93:86:ae:da:f3:5a:d8:3e:dc:6d:97:7f:2d:4e:60:
6d:80:15:84:53:44:59:6e:d8:b3:b6:4a:22:c4:ea:d7:00:01:
ed:3a:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:49:47 2025 by rpki-client