Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d12dc92c-3ceb-36a6-a8b5-a108ca4e70de.roa
File: d12dc92c-3ceb-36a6-a8b5-a108ca4e70de.roa (raw, json)
Hash identifier: PznBFPYOM1U/KAfGhDy2YmoJJAIRHSBXUNqGEN0Dlj4=
Subject key identifier: CF:38:C8:9B:CD:FF:B3:30:CC:B2:D2:19:E2:A4:17:08:68:43:74:84
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584332CF5C4418C9B782789B6500
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d12dc92c-3ceb-36a6-a8b5-a108ca4e70de.roa
Signing time: Tue 12 Sep 2023 13:00:24 +0000
ROA not before: Tue 12 Sep 2023 13:00:24 +0000
ROA not after: Mon 11 Dec 2023 14:00:24 +0000
asID: 46573
IP address blocks: 98.159.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:32:cf:5c:44:18:c9:b7:82:78:9b:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Sep 12 13:00:24 2023 GMT
Not After : Dec 11 14:00:24 2023 GMT
Subject: CN=c8d2d4b0-38dc-4f09-a2b7-17405f8509ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:b3:32:39:5b:6a:a7:f9:05:45:74:f3:63:
7d:50:03:88:4d:f7:de:2f:e9:af:38:a6:27:6f:16:
ea:4b:6d:7a:94:50:a9:f3:d3:ff:82:36:14:6d:0a:
f0:fe:13:1c:a1:61:80:d0:d0:fa:5a:cf:a5:84:5c:
57:e0:76:9d:f1:a0:4d:18:21:21:07:86:a4:67:b2:
15:1d:f1:58:b2:b5:c5:e9:1a:08:3f:fb:f7:01:a0:
91:64:9f:96:d9:05:e5:22:8d:38:50:ec:91:33:bb:
14:0f:c3:df:f1:2d:02:6c:7e:0d:f2:b1:31:c3:a7:
57:13:a1:d4:11:1d:db:c8:15:7b:b9:93:be:e0:1d:
3c:8d:ab:b1:de:db:35:25:6b:f1:60:b9:78:dc:f0:
40:9a:1d:fb:9c:ac:8e:71:a1:26:2e:8b:c1:2c:cc:
2c:ec:3a:56:da:9e:3f:72:2f:78:2b:00:99:78:fc:
a0:c0:30:90:7c:da:f0:c6:3b:a9:cc:67:b3:4a:ff:
c0:c8:b4:27:8e:4d:f2:64:25:a6:86:e8:8b:2d:2f:
a5:fe:e8:27:c0:34:38:3a:90:69:0b:d5:1c:5b:d5:
13:54:1a:ad:15:22:dc:97:13:af:47:0f:b1:a9:89:
d3:21:9e:40:b0:68:5b:f1:8d:9b:4c:eb:c5:32:ce:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:38:C8:9B:CD:FF:B3:30:CC:B2:D2:19:E2:A4:17:08:68:43:74:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d12dc92c-3ceb-36a6-a8b5-a108ca4e70de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:03:7b:72:82:c6:5f:8b:f1:45:95:1f:21:d2:d0:bd:21:e8:
48:41:e3:3f:ab:b1:9a:08:7a:a4:c1:42:c1:58:b0:70:95:c8:
25:2e:07:45:35:26:1a:b0:8f:24:59:5f:70:51:15:9c:82:45:
87:24:9d:11:c2:46:47:b3:9a:d1:c9:f4:b9:1f:b1:da:1b:1d:
83:e6:e8:8e:1c:b3:32:31:dd:55:87:d4:ae:73:9d:16:a4:f1:
89:9d:0b:d1:ff:f2:06:12:00:8b:2d:ba:6d:f0:4a:68:2d:73:
07:ed:3d:8a:43:5d:98:fc:71:40:bb:c4:73:55:82:97:88:9c:
f0:c4:2a:17:c9:12:58:d1:41:d8:38:9f:4d:7d:a1:ed:6e:8c:
70:f6:a1:86:28:95:04:14:16:62:dc:a8:91:95:c2:39:88:a1:
bf:18:17:81:e9:90:31:68:34:bd:09:ab:3b:9d:65:55:b2:2e:
f3:e7:69:56:01:e3:50:0a:7a:c4:f7:99:7e:8c:26:24:64:ac:
33:2f:c8:d6:84:36:70:77:4f:0f:70:cd:46:db:bf:df:cb:e3:
b7:49:3c:63:a2:03:9d:37:f1:db:f7:b7:ce:5c:39:00:cc:3e:
83:f3:4b:6e:2c:cd:3b:be:d8:ac:cb:2d:7d:4c:72:93:a0:b3:
8d:dd:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:45 2025 by rpki-client