Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/71317da5-9053-3413-b8aa-3a9297822789.roa
File: 71317da5-9053-3413-b8aa-3a9297822789.roa (raw, json)
Hash identifier: kFAvqxmKY2yCSaO45T9lyk+CydhQese/69j4HkuvauY=
Subject key identifier: 2A:02:C4:19:14:BA:68:24:D5:95:8A:31:DC:40:A7:32:8E:B8:C7:D4
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F43285847B3BBF7B274D7B217DBB70100
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/71317da5-9053-3413-b8aa-3a9297822789.roa
Signing time: Tue 29 Oct 2024 12:28:23 +0000
ROA not before: Tue 29 Oct 2024 12:28:23 +0000
ROA not after: Mon 27 Jan 2025 13:28:23 +0000
asID: 174
IP address blocks: 199.96.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:b3:bb:f7:b2:74:d7:b2:17:db:b7:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Oct 29 12:28:23 2024 GMT
Not After : Jan 27 13:28:23 2025 GMT
Subject: CN=cb2a1754-9c8a-496a-9ef9-a62048a4eb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:49:a0:68:a9:a4:35:5e:9b:47:79:dc:2f:
53:62:54:98:4b:20:ee:7f:5c:b7:40:79:be:55:7c:
41:af:a3:81:19:0a:1b:65:f3:c6:22:0b:4d:f1:3a:
f3:78:db:71:9a:f9:97:d7:33:a3:b2:e4:f6:ee:63:
d8:9e:83:ba:da:72:9d:d7:cf:8d:dc:fc:7d:a1:ef:
b0:30:59:90:cc:67:2e:46:21:2c:3a:17:f3:cc:1b:
ae:b0:80:5a:2c:0c:a0:b8:2c:9d:32:39:88:e1:48:
4a:1c:e1:7c:76:86:05:6d:b8:2b:b1:2f:72:17:6b:
fd:73:03:2c:af:97:b3:d7:1b:3b:0a:ef:de:c5:64:
af:8c:3e:36:f6:4b:32:a0:4e:8e:f8:41:44:c7:02:
9c:4d:37:c1:86:90:c5:16:e1:68:d1:00:c6:02:c5:
af:89:33:79:7a:d9:71:1f:c7:54:3d:00:9e:67:52:
f2:e7:5a:d3:8e:39:01:81:df:18:7a:75:5b:ee:be:
c6:a7:2c:9a:04:0d:b5:fb:a1:2e:ee:b0:1d:af:a7:
94:d8:d9:d9:73:ac:26:3f:d0:f0:70:fd:d8:fc:ac:
ed:94:4f:86:67:0d:ba:74:da:8d:6f:1f:7c:6c:bd:
af:d8:fc:ac:b0:83:6e:53:da:fa:a6:32:cc:c8:f2:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:C4:19:14:BA:68:24:D5:95:8A:31:DC:40:A7:32:8E:B8:C7:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/71317da5-9053-3413-b8aa-3a9297822789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:99:1b:da:44:d9:11:1d:33:e1:26:a9:d1:5b:43:4c:73:45:
ee:46:3c:2e:cb:02:10:2a:e0:c3:bb:d5:a3:c8:eb:59:9b:7c:
17:d5:ce:19:0f:94:a9:e0:aa:d0:6c:f1:8b:3d:ab:7d:84:24:
f5:ca:2a:37:55:ff:b6:07:4d:bd:92:b1:9a:03:f4:cd:ad:33:
1a:09:af:1a:44:c7:5d:28:1d:85:17:26:6c:57:f1:18:b5:d2:
43:9b:03:ab:b7:7d:c4:8d:0e:30:f1:eb:a1:f2:f8:eb:99:5c:
2f:b3:5b:de:1e:3b:6b:98:f0:a2:a3:5f:b8:c0:f7:02:db:33:
47:69:30:a2:63:92:1b:10:46:a7:15:85:9e:80:61:12:c6:d2:
da:1e:0f:79:e1:b7:d9:bf:f1:63:b7:fa:91:b0:3c:b8:ca:19:
01:09:73:c9:bc:26:df:2f:ea:11:f0:1f:ee:ec:80:bb:49:25:
62:5d:72:b8:5c:a5:66:2d:ec:40:ac:e1:51:5b:92:c1:af:d0:
eb:ef:42:c1:b1:40:3e:90:81:db:af:ea:fe:a2:24:32:57:2f:
6a:61:05:52:26:58:5c:85:83:15:55:e4:12:97:77:79:60:68:
1a:ad:88:3d:9a:2a:f9:3a:22:81:6e:cc:62:1f:8e:9d:8a:bd:
c7:09:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:09 2025 by rpki-client