Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c5f8b36-e05a-3ea9-9cc1-5c53b3a0fe11.roa
File: 2c5f8b36-e05a-3ea9-9cc1-5c53b3a0fe11.roa (raw, json)
Hash identifier: 7HtlYlbSzgC7BlSgdftlt3MQtPN7R1oEUmAi71Yxqz0=
Subject key identifier: 12:BD:89:72:7E:50:72:A8:89:E7:8A:B0:D5:C5:76:6E:81:F1:10:CC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315169E1C819C7DAA7BE4B8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c5f8b36-e05a-3ea9-9cc1-5c53b3a0fe11.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:16:9e:1c:81:9c:7d:aa:7b:e4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=82833199-f58f-429c-ac28-7e255c216d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:d7:7e:53:83:89:c4:41:ee:12:8d:d9:3c:
60:4b:ef:4d:1e:6e:d6:af:33:c3:70:14:62:9d:5b:
a8:2c:ee:ae:64:2a:d9:be:71:12:ac:61:17:f4:34:
77:7e:3a:a1:a3:5f:24:33:57:4a:ff:85:b5:7a:aa:
f3:28:7f:e1:48:45:56:9f:f6:17:b1:7d:a0:2a:11:
10:81:c4:6e:c0:36:03:39:9e:4c:f4:fb:ed:04:96:
02:30:2f:f4:62:5e:87:9c:55:d8:82:70:91:5b:64:
86:e5:f7:e2:82:52:85:b0:36:af:43:29:6a:c8:c5:
18:87:64:08:ff:d8:8b:c5:cc:ef:59:a0:0f:44:70:
9a:b1:ac:7a:66:b7:47:71:49:16:12:eb:3f:8f:62:
65:16:e4:2c:9f:f3:dd:c9:13:22:a7:0c:5a:d0:91:
fe:33:16:18:00:78:da:95:f7:b2:9e:95:0c:61:d5:
f5:a0:c8:79:a2:a6:6b:b7:98:c6:a2:b7:ea:a7:1b:
d5:2c:67:9b:6a:95:5c:be:75:77:1a:bb:2c:68:45:
32:46:2e:a4:61:9f:2e:bd:c9:c1:92:f5:73:63:45:
73:90:4c:1c:89:36:53:82:39:2f:09:11:a6:b7:56:
98:de:1f:b2:38:ad:50:05:a0:8e:d3:84:23:09:68:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BD:89:72:7E:50:72:A8:89:E7:8A:B0:D5:C5:76:6E:81:F1:10:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c5f8b36-e05a-3ea9-9cc1-5c53b3a0fe11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:62:6e:24:22:e3:9f:4a:4c:e6:1b:a0:b5:a2:25:a8:f2:2d:
53:fc:fe:30:60:08:14:3a:dc:67:ca:8c:5b:fe:af:63:80:98:
28:93:92:2d:82:2f:99:3d:d0:d5:98:15:41:ba:14:ad:e4:ef:
00:74:10:cf:74:ba:7f:03:52:e7:c4:00:2b:ed:7e:66:9d:4b:
9d:32:6b:ed:63:e4:bf:0b:7f:3a:df:22:f2:38:df:19:10:a6:
b5:6f:32:cf:1b:98:67:a9:ee:d0:65:b5:d3:21:d4:16:7c:8c:
9c:24:42:ff:78:b4:7e:c4:ac:98:58:55:de:79:a7:18:77:23:
3b:75:26:0a:fd:cf:34:cc:37:bc:9d:0b:05:54:e3:7a:44:1f:
5b:13:54:c1:d5:4b:2e:6d:16:32:95:15:d1:5e:37:57:30:fc:
7e:6f:75:44:41:d6:39:a5:de:45:c7:c2:3c:05:7a:0d:bf:23:
96:fc:cc:20:dc:54:05:ab:3b:0c:a3:6c:a0:e0:d2:83:e8:b5:
5b:53:8d:b1:35:4f:67:28:06:11:12:50:be:fb:fc:3f:58:5b:
7f:d9:5a:e5:69:fc:f6:19:63:ae:48:71:a7:9a:54:a7:d1:0e:
f1:4a:9f:7b:e5:0f:9c:d7:4a:7c:33:d8:00:74:82:ff:e5:d4:
fb:ca:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:53:10 2025 by rpki-client