Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/eebdecfc-ce02-30d4-8b32-4f098dd3e7d5.roa
File: eebdecfc-ce02-30d4-8b32-4f098dd3e7d5.roa (raw, json)
Hash identifier: sOnNIhXicISZaTD7x7FWuK0diJHFmD2QM300qGG6S7Q=
Subject key identifier: 63:73:EE:33:2C:50:B1:BC:2D:7C:68:43:5C:38:9F:F7:9E:A9:31:A3
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285837E702EF662D89A6D4C279D000
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/eebdecfc-ce02-30d4-8b32-4f098dd3e7d5.roa
Signing time: Mon 16 Sep 2019 04:00:00 +0000
ROA not before: Mon 16 Sep 2019 04:00:00 +0000
ROA not after: Mon 13 Feb 2023 05:00:00 +0000
asID: 19437
IP address blocks: 98.159.36.0/24 maxlen: 24
173.239.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:e7:02:ef:66:2d:89:a6:d4:c2:79:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Sep 16 04:00:00 2019 GMT
Not After : Feb 13 05:00:00 2023 GMT
Subject: CN=cb3ec49c-4704-438b-9235-e407afd94be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:2c:b1:b7:fe:2b:a3:58:c0:cf:16:37:46:
ce:82:b1:23:8f:83:e5:44:cb:46:5c:38:2b:00:b5:
6a:99:c1:ff:fa:70:82:32:e2:e0:50:82:3b:c3:08:
ad:b8:9c:5d:2d:5b:b5:ce:69:ee:f3:c4:a3:58:0b:
14:09:bf:5d:c7:d0:59:ea:4f:3d:fc:2d:56:75:3e:
1f:4c:7c:a4:a1:82:33:ec:06:f3:2d:30:fb:14:80:
6c:69:21:f0:eb:34:94:f8:cf:06:ba:f8:75:31:08:
a9:d4:7e:ae:8a:45:a2:86:a5:50:9f:1e:cb:2d:3c:
e4:d0:9c:93:00:da:cb:9c:73:fa:55:57:63:ed:e2:
07:50:be:3f:cf:06:00:7f:2a:5a:67:af:ac:71:c3:
48:48:ba:07:65:e9:b8:aa:08:f3:64:19:9a:2b:d8:
ac:4c:98:69:63:15:1c:62:61:1c:c5:c3:be:f6:48:
82:0b:3c:bc:ff:a9:b2:7c:73:68:43:b2:02:50:7e:
11:9a:7b:63:ab:5d:15:c8:fa:e6:3b:60:a9:fa:b3:
a2:09:bf:30:9c:44:45:13:85:7a:cf:fe:39:39:c5:
d4:d5:50:02:b0:04:17:31:80:b5:aa:e9:e7:ab:0a:
48:42:29:e3:36:38:9a:6c:05:6c:fe:22:16:9c:c6:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:EE:33:2C:50:B1:BC:2D:7C:68:43:5C:38:9F:F7:9E:A9:31:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/eebdecfc-ce02-30d4-8b32-4f098dd3e7d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.36.0/24
173.239.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:4b:a6:1d:3d:dd:8a:cb:dd:f8:05:f4:b1:d5:bf:f1:74:b1:
d6:87:21:67:43:71:a4:7c:3c:69:e6:0c:54:b0:e2:11:75:ea:
53:64:f4:d4:cb:93:b0:bd:92:68:1c:2a:94:5f:8e:b5:3b:4f:
7a:d8:a4:bb:9f:fd:9f:7d:4e:56:c2:b5:cc:5e:6c:9a:3b:b8:
67:08:c8:77:27:49:84:0f:b6:8d:70:9e:3b:b9:d3:68:4a:55:
41:92:a8:07:00:ca:30:d5:92:d4:a7:9e:81:28:8b:45:bb:2b:
8e:0e:52:0e:db:a8:9e:27:93:f5:0c:e1:21:f7:66:1c:fc:5b:
ac:25:4e:cf:6d:89:d7:09:90:be:9b:d5:49:be:c9:79:74:1e:
05:52:e3:4d:3d:a5:54:70:9f:92:2a:0a:a9:85:1b:f8:a7:06:
c2:a9:c9:e1:79:74:13:c6:de:ad:28:45:52:76:5e:86:ab:9e:
28:5d:5e:27:ea:9c:03:8f:49:2f:ba:49:9f:16:a3:5f:34:95:
3f:b6:a9:48:9c:08:88:09:89:4b:9f:47:80:ca:02:79:17:2f:
fb:3d:92:14:32:a9:05:68:f4:8f:e6:61:49:20:4c:50:af:01:
10:b1:57:5f:b0:c4:29:45:98:48:2c:dd:a6:e6:1e:b9:19:76:
b6:d9:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:34:08 2025 by rpki-client