Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bc23fb7a-b144-3620-a043-2d021a5e8b0d.roa
File: bc23fb7a-b144-3620-a043-2d021a5e8b0d.roa (raw, json)
Hash identifier: HTDJSfHxla6bxxzYT648ziPkMA5/6uigm/gPVBpt/iA=
Subject key identifier: B5:A4:3F:FC:10:A9:02:2F:8B:48:DE:25:FA:C6:BE:B0:10:9D:34:E8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B7EE6B784468554F56B60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bc23fb7a-b144-3620-a043-2d021a5e8b0d.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 211272
IP address blocks: 216.208.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:7e:e6:b7:84:46:85:54:f5:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=f008250c-3237-48a4-b9a7-8276ca9a2dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:57:9d:b3:2c:8a:6a:1d:cc:66:79:c7:75:d8:
a1:68:f6:e8:b6:9d:62:0e:9f:49:2e:97:1e:b1:50:
12:71:07:96:3f:2a:8c:c4:9f:3c:83:b3:4b:27:28:
ba:22:c9:15:d9:1f:1e:ef:d9:39:0c:cf:92:b2:de:
2d:96:04:5d:5b:66:3d:12:db:db:34:6d:db:f4:b2:
f4:6f:44:73:11:c3:8f:80:04:2c:4a:49:c5:2c:6b:
ea:33:ab:2a:10:df:3c:47:69:72:ef:32:51:a9:da:
d2:17:32:0c:6d:65:fe:96:24:43:1f:ff:9b:30:fd:
18:fa:8f:aa:57:44:fd:ef:ad:bb:5a:e1:40:42:cb:
17:45:ea:e3:d5:26:e6:9b:2e:56:92:03:60:86:52:
fe:4b:29:0e:96:21:8f:33:5c:ce:be:1d:16:0a:6e:
4d:5b:e3:24:14:a0:68:31:52:f5:a8:bc:66:3c:10:
c4:93:0b:20:83:71:14:b3:c5:7a:b1:7e:eb:e1:0f:
4d:8f:fd:62:ac:59:0f:72:8d:06:c4:28:39:3f:8b:
0f:56:57:cb:85:78:e6:f5:1b:da:05:d1:a1:a7:56:
99:c7:6a:2c:82:d7:be:0c:77:30:ea:be:8a:12:66:
2c:a3:a6:13:2d:02:1a:cd:01:39:d6:11:62:49:08:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:3F:FC:10:A9:02:2F:8B:48:DE:25:FA:C6:BE:B0:10:9D:34:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bc23fb7a-b144-3620-a043-2d021a5e8b0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:95:3c:b9:38:9d:51:6e:da:8e:51:33:be:68:fb:88:59:ea:
d6:93:b6:87:78:15:3e:5b:d4:4f:92:c0:d0:c4:e2:f9:d4:b4:
1b:42:56:d6:57:8f:66:bd:6f:e4:4e:d6:9e:e1:61:ea:de:56:
56:5f:94:2b:85:1f:49:15:84:9c:10:96:ba:74:c0:46:78:4d:
f0:1f:14:2b:65:b8:1d:46:7f:d1:6d:63:54:66:1d:be:82:a1:
5b:e4:93:7f:86:2f:69:49:d6:2b:56:69:ec:16:63:f4:10:e9:
92:73:85:8e:c6:43:84:a0:be:d3:48:fa:4e:dc:a8:3b:b5:73:
af:52:4a:8f:49:a9:f1:0d:4d:80:30:90:9a:a8:7d:70:01:0c:
cd:d2:c8:34:be:84:00:e6:b7:8f:2b:1e:21:26:06:c1:56:44:
d4:52:3e:3b:92:49:38:f0:2f:8b:d1:68:db:92:9e:79:8a:8f:
3b:15:fd:77:ee:78:c7:d4:26:75:e6:e2:2d:0a:aa:de:f8:89:
b4:68:a8:3c:2c:d8:e3:a7:e6:a1:58:76:d3:4e:07:47:65:7d:
35:59:5d:a6:ac:9b:ec:cc:22:3e:23:69:c4:f7:94:b4:ee:ae:
27:79:62:32:03:83:e8:d2:97:61:26:5d:0b:67:d7:ec:10:e1:
a5:b7:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:42:58 2025 by rpki-client