Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23cd40df-d33d-39aa-8ed7-55a9fa07a077.roa
File: 23cd40df-d33d-39aa-8ed7-55a9fa07a077.roa (raw, json)
Hash identifier: 2XGJOZLaOg83qzqYPU1wmVWXgMp+BmaQoCr/JBasmnA=
Subject key identifier: 08:7F:EB:5E:06:54:2A:AE:6A:98:97:1A:E9:6F:11:98:BF:70:87:2E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1553307999590D5D4625A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23cd40df-d33d-39aa-8ed7-55a9fa07a077.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 98.17.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:33:07:99:95:90:d5:d4:62:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=26ca8014-747c-45a2-9ac5-75edd1d0aa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:a1:10:eb:fb:57:55:ad:3a:97:c5:38:5f:
9d:78:8f:cd:1e:60:e3:4a:70:75:51:02:f3:05:61:
86:ed:b2:4b:b6:57:f5:68:9f:c6:74:d4:a7:cf:5f:
77:8d:31:10:95:bc:2a:c6:7a:96:f1:b6:a0:16:25:
f9:10:c0:8c:c0:e1:1e:a9:07:cf:6c:df:d8:8b:4f:
28:c5:c7:f2:11:8f:c9:76:97:f0:84:34:a4:88:43:
9a:41:53:2e:35:56:4a:d5:13:b0:ab:a9:4a:c8:76:
bb:a8:f7:29:09:3d:38:d5:d6:62:b7:2d:c2:ba:c4:
84:9c:d6:39:17:42:71:28:71:ff:d0:27:98:67:f3:
eb:06:d7:09:e0:c8:0a:3a:4d:f7:f5:42:a3:68:c9:
0d:c2:58:88:23:55:1e:ce:81:3b:3c:d7:2e:c3:77:
80:00:fa:dd:98:d9:5a:8d:74:3d:a6:c6:6a:88:95:
ac:6a:db:bb:bf:19:d0:64:8c:c7:c1:70:6c:85:de:
1a:58:60:41:37:01:a4:9f:49:7b:1f:c4:83:89:70:
df:0d:3d:01:d8:05:8a:49:44:84:f8:cd:ac:1f:f1:
96:9c:c8:57:e5:ec:cf:e1:b2:25:76:c5:41:70:29:
15:40:cb:61:97:52:85:ec:6d:ab:8b:7f:98:f0:7e:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:EB:5E:06:54:2A:AE:6A:98:97:1A:E9:6F:11:98:BF:70:87:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23cd40df-d33d-39aa-8ed7-55a9fa07a077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:00:4c:46:04:58:ce:fc:75:1f:d1:2a:2b:10:51:08:34:80:
24:30:03:d2:f1:8e:ab:9e:d5:e9:f8:b3:c3:cc:79:11:29:6f:
5e:14:3b:0b:74:31:c0:25:e9:98:6e:87:01:58:fd:25:7f:b0:
0b:63:39:52:99:eb:fd:09:a3:9a:aa:37:22:5c:8f:03:e9:29:
9e:90:fe:2e:37:1c:81:cb:57:12:79:03:c1:7a:b4:f0:ee:47:
fb:39:ac:13:7d:d8:4c:2d:e5:10:ec:a0:1e:10:4f:d5:fe:1e:
b1:8a:7d:06:a5:5f:c0:60:35:64:f6:ba:60:1a:fe:bd:4b:0a:
85:30:11:1e:65:64:68:24:81:aa:a7:df:02:cb:06:e6:e6:8f:
5a:bf:f6:f6:d8:f7:3a:28:ad:0a:44:81:dc:2e:39:50:28:47:
69:fb:91:11:3b:53:a0:d4:fe:da:e6:f6:73:1f:79:20:5e:65:
9b:c3:6b:ed:68:f2:6f:e9:55:53:3a:80:26:54:8a:ff:97:cf:
3c:2f:8c:a9:64:d7:d6:28:1b:da:ac:7f:93:3a:40:c6:07:50:
42:4d:ce:9a:0f:f9:31:4e:8f:c2:18:6f:b6:cc:8c:cc:30:4e:
b7:78:7e:33:a1:34:05:56:4d:f6:2a:2e:6d:52:34:e9:e6:f0:
4c:2b:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:41:19 2025 by rpki-client