Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3335242a-14cd-3909-b086-f4de0c7b1d7a.roa
File: 3335242a-14cd-3909-b086-f4de0c7b1d7a.roa (raw, json)
Hash identifier: 7rIe2vvvhLbIH6UlxSOuPCweSPH4r8PyxNrEdgsnF7k=
Subject key identifier: 08:48:CC:E3:9D:E8:8A:9E:85:DB:7A:7C:5F:00:F4:DB:6D:A7:5E:60
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289DCCAA31495E9383C9700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3335242a-14cd-3909-b086-f4de0c7b1d7a.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 98.20.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:dc:ca:a3:14:95:e9:38:3c:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=65c015eb-b44a-4bcb-9e41-d1b3f059f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:ae:42:4f:f9:1c:16:93:c8:9f:8e:75:99:
3a:e9:2f:b1:58:5b:1d:92:25:ec:49:e4:c9:3a:ad:
4d:9d:84:0e:21:82:41:17:14:51:b1:a5:55:30:07:
1f:a2:62:6e:68:70:f6:95:03:eb:16:65:55:d5:3b:
ac:aa:db:cb:ab:35:7b:f1:a1:e1:e4:82:10:a0:ba:
20:f7:d2:f2:ce:78:c6:e9:03:f1:02:6f:27:97:79:
07:76:80:94:d9:e8:f2:aa:cb:2e:02:0f:92:2f:4e:
3e:5e:3d:81:59:b3:07:01:c9:e0:94:87:b5:d7:4e:
a5:a2:07:df:2c:31:44:cc:55:9c:19:c2:c9:5a:bb:
39:3b:aa:e9:9f:19:85:2a:f8:9a:76:cf:3d:ad:e7:
42:20:5b:37:07:7a:3d:1a:c0:c9:7b:8c:ee:31:f6:
78:27:c5:cf:91:d9:a9:42:ab:2d:cd:3c:5e:42:d8:
fb:31:8e:6d:50:63:5a:51:01:b1:61:ff:20:5b:b7:
cf:27:69:32:a4:3b:22:d7:65:45:56:cc:02:92:b9:
e3:3f:c1:3a:b2:a4:4b:c9:2f:8e:88:1e:5c:97:51:
84:a6:b9:b3:c7:af:dc:e5:80:44:03:c0:df:9f:01:
af:78:8a:76:4b:c5:27:30:26:55:60:9e:3b:3d:b6:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:48:CC:E3:9D:E8:8A:9E:85:DB:7A:7C:5F:00:F4:DB:6D:A7:5E:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3335242a-14cd-3909-b086-f4de0c7b1d7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:40:75:d1:6f:4e:ff:2e:b2:b3:54:04:d3:79:13:d0:fe:3c:
f4:24:b5:8b:cb:5b:f2:f9:7f:3d:ff:36:8f:7e:b4:f8:be:35:
e3:87:ef:34:41:40:bf:19:83:47:7c:08:67:bd:a0:53:05:66:
16:cb:ed:51:fd:81:7d:15:ef:02:f2:e0:ee:11:b0:21:73:0d:
60:db:2b:6c:06:5d:ee:8f:19:da:e7:31:93:a8:2c:15:81:d2:
ca:94:af:8d:98:ee:dc:24:50:73:72:fd:c4:0c:71:ba:49:bc:
2d:06:b2:85:43:5a:fc:e9:c2:8e:f8:af:4b:c5:44:07:9a:79:
c6:02:55:f8:3a:49:83:d8:c0:ab:54:b7:c9:be:45:fc:20:94:
78:42:ab:3d:3f:ab:0a:b3:f3:04:cc:a8:7d:be:96:92:ad:b1:
45:ed:52:6f:1d:e9:6b:e1:e9:62:05:3c:c6:7b:33:2b:8f:cc:
c3:f9:da:1e:31:b7:3c:88:02:3c:68:98:4d:1f:04:ac:e7:b5:
5d:fd:fb:18:bc:76:0e:4d:c7:45:e1:82:97:52:73:20:2b:e5:
0d:b5:eb:33:b1:46:c8:0d:e0:d7:42:0b:1c:2e:4f:dd:a7:39:
43:8a:ad:4a:c2:63:a1:2f:36:a5:e1:92:1e:f7:20:62:45:01:
00:8b:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:49:10 2025 by rpki-client