Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/faefffbd-8527-362b-85be-d009009929bc.roa
File: faefffbd-8527-362b-85be-d009009929bc.roa (raw, json)
Hash identifier: Us7/O24oTQie3VKZELoQFydynW8NaIKHmy5tbaoLbwA=
Subject key identifier: C4:52:80:69:01:0C:A8:68:85:83:1C:9D:86:41:F6:51:99:7D:93:D8
Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial: 010D0C9F43285844E1C64F21EED76A7EB8723BC0
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/faefffbd-8527-362b-85be-d009009929bc.roa
Signing time: Tue 13 Feb 2024 21:55:35 +0000
ROA not before: Tue 13 Feb 2024 21:55:35 +0000
ROA not after: Mon 13 May 2024 20:55:35 +0000
asID: 10497
IP address blocks: 192.86.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:e1:c6:4f:21:ee:d7:6a:7e:b8:72:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Validity
Not Before: Feb 13 21:55:35 2024 GMT
Not After : May 13 20:55:35 2024 GMT
Subject: CN=11dbe767-9f1c-4404-993a-00f0eaacf083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:3f:64:d3:63:03:c7:c1:1d:eb:6d:a8:cd:
e8:f1:f1:f0:c9:b7:9e:0c:38:26:da:e1:0c:f2:06:
c0:aa:50:92:e3:d9:05:ae:b1:00:38:bb:9c:d8:4f:
2e:5a:14:bf:21:79:ac:44:e2:ca:a1:57:13:58:f5:
c8:1c:f4:63:88:17:e0:bc:b9:be:61:8c:e2:85:bf:
33:fb:cf:33:7f:8d:7f:2c:8e:4d:e7:9a:51:c3:08:
60:26:44:dc:c6:7a:27:7e:07:cc:ea:24:ee:cb:97:
4e:5e:6c:06:5d:40:df:4b:25:07:ef:8a:9b:2a:00:
c5:52:5a:ac:58:ea:50:f2:dc:a0:1e:c7:34:df:a9:
fd:c6:0c:02:8c:64:ab:8a:dc:10:29:31:a8:6c:f8:
0f:60:e6:b0:ac:94:33:4c:d4:30:b7:c7:5b:88:38:
fb:d5:f6:50:ed:50:88:34:d8:64:b3:f2:19:20:e8:
2e:3e:a4:29:f5:15:63:99:6e:21:38:c2:24:9e:b1:
ac:6c:67:37:a6:49:46:3a:8e:88:80:da:fe:d7:92:
d4:14:e1:35:f1:f3:e9:83:64:36:11:9d:d3:e5:d5:
b4:22:10:68:08:7f:7c:bb:28:72:52:89:41:5e:ad:
2c:48:dd:48:ce:da:85:f5:6e:58:6b:a6:07:6f:12:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:80:69:01:0C:A8:68:85:83:1C:9D:86:41:F6:51:99:7D:93:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/faefffbd-8527-362b-85be-d009009929bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
X509v3 Authority Key Identifier:
keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.86.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:21:a4:96:c2:f2:ac:df:15:f2:08:34:fa:ed:66:6e:00:14:
76:21:21:b7:4a:15:30:58:f4:e5:d7:11:ba:0a:b5:6f:66:88:
40:e0:ea:5c:3e:45:f4:2e:c8:ca:0e:a4:98:3a:1f:a9:bf:d1:
b6:e9:4d:72:fd:de:5b:50:a6:08:ab:cd:11:9e:cf:7a:4c:5d:
b6:a4:71:10:6a:68:63:2a:4a:64:03:51:f9:9d:45:45:cd:61:
37:06:4c:be:ed:c1:56:87:43:97:38:0a:ce:a2:02:34:e4:53:
4c:6d:1d:3f:7e:19:36:f8:da:4f:b9:eb:2e:de:e6:27:ff:88:
35:7a:00:40:34:b5:87:5d:83:e1:52:de:d7:ae:4f:18:c6:83:
32:04:da:15:99:c2:44:97:fa:df:8e:a6:8b:6a:75:25:90:ea:
59:3b:37:53:6b:9b:29:a6:0d:d7:fb:e0:b1:de:b0:48:ae:10:
55:fc:9e:02:d4:49:1d:ee:ad:cc:d5:56:01:6d:1a:2e:4a:33:
74:9e:6d:7e:28:f3:4d:d0:f4:ef:42:40:8b:78:c9:a3:d7:f1:
ba:6e:5f:3f:8a:db:61:f0:c5:26:4c:51:76:ad:6f:e8:9b:f3:
6b:54:30:01:ae:ef:5e:68:67:9d:90:a7:b2:a3:16:9f:09:ae:
cf:91:94:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:18 2025 by rpki-client