Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/951cf344-c20b-341b-974a-f63a8d91e296.roa
File: 951cf344-c20b-341b-974a-f63a8d91e296.roa (raw, json)
Hash identifier: 1dZxjqwjM/CrpkN3+xdhASeSIMcijj2iT1jhp84jOXQ=
Subject key identifier: 79:40:10:CA:00:15:C3:1A:41:78:5C:40:B4:BF:38:2E:30:19:B1:33
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29E515E93E8D2556E48C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/951cf344-c20b-341b-974a-f63a8d91e296.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21552
IP address blocks: 204.101.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:e5:15:e9:3e:8d:25:56:e4:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=41b23cc7-16ef-466c-8806-1afdcb4f4e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:d6:58:e4:0d:b6:ba:b9:76:b8:0e:13:56:
bd:c2:54:d5:96:24:99:b6:d0:74:e9:70:9c:36:3a:
16:5f:56:74:9d:5d:1f:f0:32:04:b2:92:d0:1c:85:
2b:4f:bd:25:44:dd:54:3a:6f:1d:32:3b:2a:e9:6d:
f8:9d:05:4c:df:a5:7c:fb:50:0e:66:96:28:59:58:
1e:c1:b5:fe:02:16:4e:43:e6:fd:92:b4:19:f7:28:
a0:a4:91:d9:7a:7b:04:bb:82:0a:39:10:13:6c:68:
4c:54:4d:a9:bc:d9:99:c5:99:93:17:42:a5:36:06:
ce:82:98:17:a6:b8:8e:fa:2b:be:65:15:34:5a:b6:
d8:ed:b0:11:eb:b4:b3:38:d1:5b:cf:25:17:d8:a7:
14:4f:30:6f:f0:59:ad:23:8a:e8:c9:23:16:8e:9e:
3c:c6:ed:76:01:77:48:db:1b:59:db:70:be:86:74:
8b:0e:56:de:6c:d5:95:46:11:45:d3:c2:40:6f:db:
81:b6:55:80:e9:35:a4:1e:b3:95:fa:f8:a3:4e:88:
f8:7e:b8:86:0c:40:49:8e:6e:e6:24:3e:a1:2e:aa:
f8:93:81:fc:e9:fb:82:2f:d0:fc:8f:0c:41:cb:7a:
fd:75:91:7f:99:76:4b:12:fd:d9:2e:4f:ba:e9:b2:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:10:CA:00:15:C3:1A:41:78:5C:40:B4:BF:38:2E:30:19:B1:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/951cf344-c20b-341b-974a-f63a8d91e296.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:0c:ac:18:e6:2a:82:e5:aa:49:ef:7b:b5:1f:a8:5d:be:39:
81:07:a7:bd:25:49:ab:00:14:69:ac:55:76:03:69:ed:1e:da:
55:93:e6:16:13:26:ba:e3:df:06:71:63:9c:fa:7c:5f:bb:39:
f1:c4:06:dc:9e:4d:6a:b4:3a:b3:3f:d6:40:96:bd:a9:e8:c8:
c5:da:19:39:f3:bd:6b:30:cf:0b:32:f6:36:9e:79:25:a4:3a:
80:21:8e:96:ee:3d:1b:46:7c:e9:81:34:e1:cf:ac:b6:5d:83:
6b:56:4e:b8:ec:3b:0e:b3:c2:af:50:72:64:6d:37:28:89:b8:
18:85:01:f1:e9:19:5c:b4:28:55:79:82:5e:6f:e8:88:45:5d:
42:fe:c8:53:27:1e:c0:26:f8:11:b9:29:25:8e:bb:2f:05:2d:
44:84:a9:37:93:34:dd:29:c6:d4:2f:99:e5:f9:78:57:07:bf:
0a:e3:72:ea:ae:d1:7b:3d:71:85:73:33:5b:14:53:51:55:22:
d1:13:2b:84:b2:1a:4e:ff:81:c6:57:55:b5:75:f1:e6:c4:5e:
d6:25:a3:d7:6a:05:68:fe:c7:1b:61:23:be:07:94:3f:58:2a:
f6:e5:b9:2e:f9:df:d4:26:16:52:5d:e2:a9:82:fd:cc:eb:a2:
3c:dc:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:18:00 2025 by rpki-client