Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/50e353bf-38ba-3648-955e-eac29210289d.roa
File: 50e353bf-38ba-3648-955e-eac29210289d.roa (raw, json)
Hash identifier: Zyddlfz0aeGAMinKLlYUNeUO5QQXB3QBcpr7IFqXYj8=
Subject key identifier: 00:D7:F5:47:08:C3:E1:50:7B:7E:F5:FE:68:88:F0:4A:1C:A3:00:18
Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial: 010D0C9F43285846D30FDB6321B8E7C5CE92FB00
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/50e353bf-38ba-3648-955e-eac29210289d.roa
Signing time: Sat 10 Aug 2024 01:00:28 +0000
ROA not before: Sat 10 Aug 2024 01:00:28 +0000
ROA not after: Fri 08 Nov 2024 02:00:28 +0000
asID: 62742
IP address blocks: 198.102.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d3:0f:db:63:21:b8:e7:c5:ce:92:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Validity
Not Before: Aug 10 01:00:28 2024 GMT
Not After : Nov 8 02:00:28 2024 GMT
Subject: CN=86f5404c-195c-4411-9a8f-fbf2e2afa75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:65:c9:21:16:cf:a9:35:90:ce:6d:1b:56:
c5:83:b9:06:10:6a:4d:01:92:38:0e:33:12:e3:a1:
1a:74:97:7a:71:d2:bc:70:3a:15:26:26:c7:ee:60:
6c:50:84:a1:a4:9a:6f:4f:8a:71:9c:27:e0:fb:7f:
f5:a5:15:c3:0f:05:01:8d:5c:d4:72:19:95:20:e8:
04:af:ea:43:76:84:83:04:9d:c7:01:5c:b3:5e:5e:
8c:47:23:50:82:8a:7a:d5:b7:58:be:3f:6d:64:17:
85:92:13:d3:69:0d:6d:26:72:f1:bd:cd:dc:bd:8f:
a0:73:f2:6d:22:75:bf:15:26:d3:c2:59:a8:95:56:
63:56:8e:f6:92:32:5b:42:79:12:1f:bf:b0:f2:92:
c7:92:2e:be:22:23:59:15:d5:d8:ff:4d:1e:0f:d1:
cc:f1:22:7f:ff:91:f3:6c:91:f3:0d:1f:05:a1:f6:
f5:fd:84:8d:bf:a5:6c:34:39:7d:c6:a5:16:e6:5c:
e5:a5:db:9f:70:ad:da:5f:54:05:d2:11:33:72:c2:
69:30:74:ad:a7:95:99:14:4b:2b:6c:24:9f:dd:06:
8f:20:21:2a:02:80:fb:70:84:29:f6:97:d5:d0:cd:
16:b9:58:5f:b9:87:af:30:9d:db:69:20:7a:59:a8:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D7:F5:47:08:C3:E1:50:7B:7E:F5:FE:68:88:F0:4A:1C:A3:00:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/50e353bf-38ba-3648-955e-eac29210289d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
X509v3 Authority Key Identifier:
keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.102.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:0f:5e:f9:9d:43:14:e6:9b:d5:0c:7a:67:70:26:cf:bd:35:
d3:6e:ef:2e:83:16:a6:bc:67:74:2a:f8:b7:dd:a5:8e:36:ea:
c4:ba:6a:15:f0:98:30:7e:44:96:d7:39:0c:f2:65:69:1b:2b:
6e:6e:73:9a:0a:56:c6:4a:64:79:ed:83:99:39:f6:78:6b:8c:
0d:c0:fa:97:0c:80:f9:e9:b1:fa:4a:a7:33:54:85:bd:13:aa:
9d:c7:bb:07:71:35:20:1d:84:55:82:ac:d6:8f:88:2e:7f:78:
72:e7:6f:c7:55:70:22:ce:20:e5:59:9c:80:e1:e4:70:f5:3b:
5b:c9:4d:56:2c:dc:fb:db:8c:be:d0:17:59:b4:82:31:52:93:
04:30:ae:5a:72:17:00:1e:ed:03:66:6c:89:56:bf:24:62:82:
3d:d6:09:e4:9f:0a:14:7a:9f:f1:ee:d8:3a:5f:25:b4:ae:b9:
ee:0f:b9:bb:50:03:14:50:dc:76:f3:0b:14:23:4d:d9:55:8e:
06:54:7f:c3:29:45:b6:be:bd:ee:4b:18:ed:2c:be:1b:2f:fc:
5e:cb:4b:08:d7:5f:a8:24:f8:a0:73:2f:d0:2b:28:24:b5:5a:
87:ed:83:bf:04:6b:5c:73:4c:a7:97:0b:14:29:5a:c2:cc:57:
ab:5f:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:50 2025 by rpki-client