Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3f78005-f3f6-32d2-b3c1-41cf97decfa4.roa
File: d3f78005-f3f6-32d2-b3c1-41cf97decfa4.roa (raw, json)
Hash identifier: Q08L5HuG5e5bdI+HKquxWAndhYvYfZe35Ta5Re/puPc=
Subject key identifier: C2:E6:31:2C:19:E1:B5:1C:C5:E9:1D:8B:32:85:E7:28:15:B3:57:53
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285847C512B6B643CDEACC7BDA3B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3f78005-f3f6-32d2-b3c1-41cf97decfa4.roa
Signing time: Mon 04 Nov 2024 17:31:54 +0000
ROA not before: Mon 04 Nov 2024 17:31:54 +0000
ROA not after: Sun 02 Feb 2025 17:31:54 +0000
asID: 11798
IP address blocks: 166.88.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c5:12:b6:b6:43:cd:ea:cc:7b:da:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Nov 4 17:31:54 2024 GMT
Not After : Feb 2 17:31:54 2025 GMT
Subject: CN=f4455fa2-8550-43ed-b1f8-43042193c4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:bb:42:38:44:77:7a:8c:ae:b8:8d:99:76:
55:6e:95:7c:0c:48:30:e8:e4:a8:2f:96:34:7e:f7:
2f:dc:f6:06:0d:66:c0:22:f7:5b:a2:0f:89:d3:c2:
f8:fa:15:b9:e6:88:90:8f:b4:4b:5b:19:2e:c9:fc:
6b:9c:d2:ce:64:54:72:40:26:25:64:6c:4a:6f:db:
35:78:f2:f3:25:9b:67:bb:c1:42:36:34:27:7a:cd:
88:5f:6e:bf:67:ff:1f:44:65:1e:d8:1b:85:23:fd:
81:71:b6:3f:11:d2:49:d3:40:a7:01:44:88:94:bb:
ae:87:d8:d5:ad:d0:d7:63:1f:e5:f6:9f:b3:9b:5a:
4f:52:cb:81:83:16:bc:56:cc:b2:5e:59:16:b3:44:
6c:b8:69:96:ef:e8:5b:c7:89:b2:5a:2c:69:62:0f:
11:ba:9f:36:6d:6b:e9:00:f9:68:dd:00:1d:75:26:
de:85:43:37:79:c9:6e:24:3f:aa:51:e0:be:76:5b:
df:ae:10:aa:2b:45:04:2b:7f:72:95:f1:34:1b:3c:
45:1e:b0:21:16:31:a0:fa:32:2f:49:cf:a2:97:17:
9a:c5:d1:42:fe:ca:d0:9d:62:6f:25:d9:41:75:6e:
93:e4:bb:3d:0a:12:bd:87:b1:67:ce:21:97:06:5b:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E6:31:2C:19:E1:B5:1C:C5:E9:1D:8B:32:85:E7:28:15:B3:57:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3f78005-f3f6-32d2-b3c1-41cf97decfa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:4f:f7:4d:e0:8f:48:82:63:d9:ab:0b:c0:59:16:48:2c:42:
0d:3c:42:9d:aa:34:b0:0c:c7:3a:91:98:eb:2e:02:98:89:62:
70:0a:69:b2:d2:bf:a2:f1:99:1c:1d:a6:e3:ff:3a:54:e9:f6:
c6:31:52:5b:b3:54:29:5f:94:e5:5b:7b:07:2b:c0:38:69:d3:
ee:30:e9:b0:39:9c:ee:2a:dc:88:37:88:4c:37:65:e1:ea:13:
21:49:d4:6d:b4:71:90:38:a2:31:4c:6a:e2:63:b0:f5:e8:0c:
5b:fe:79:47:59:ca:ab:f4:d6:98:4b:cd:b0:9e:52:ea:a3:13:
02:d4:01:e2:a2:dd:e0:94:30:63:23:74:41:e6:b5:25:58:04:
23:39:8d:39:71:bb:fc:7c:c9:b2:79:be:81:01:b7:d4:36:29:
9c:4f:c0:8d:5a:85:5b:84:57:23:c7:a8:cf:23:fd:ef:14:3e:
06:16:a0:ea:eb:88:7e:a0:cf:3b:55:54:61:6f:ad:ef:01:75:
d9:5e:8f:98:bd:e6:e3:58:43:f8:30:35:65:58:fb:1a:d5:01:
83:b9:3b:a5:74:c3:dd:b8:44:28:38:b8:6d:21:30:b9:ee:dc:
63:63:42:17:dd:ca:9f:dd:14:4f:56:4e:79:bf:f0:2f:0f:f9:
bc:05:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:50 2025 by rpki-client