Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5722f81d-8e99-39c3-8a8d-1a23ff0885f3.roa
File: 5722f81d-8e99-39c3-8a8d-1a23ff0885f3.roa (raw, json)
Hash identifier: xhl4gD+38eMAKP2w/Y10r7VMsdpP5dyvGV85B9akzCA=
Subject key identifier: 9B:C6:31:10:13:DC:3D:13:CC:84:5A:34:69:9A:58:8F:1E:53:7C:DA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285845533306C6AE458CDFAB1FA400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5722f81d-8e99-39c3-8a8d-1a23ff0885f3.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 98.23.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:33:06:c6:ae:45:8c:df:ab:1f:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=ecf5b481-b75c-4e93-b653-a1cfd198f07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:1b:44:44:74:80:b9:e0:0b:f6:07:9c:1e:
db:aa:d5:2d:60:00:d7:af:9c:aa:cb:96:7c:74:8e:
6b:f8:93:6c:55:e2:2f:83:27:77:59:27:1e:e6:b9:
e0:2e:4f:1a:19:1a:e2:42:55:21:56:fa:e2:ad:b8:
83:36:dc:60:12:ea:b7:51:0e:d7:dc:68:db:a2:a7:
3f:b0:8f:d1:e9:73:92:bb:03:41:40:d1:88:67:14:
13:84:c9:56:12:2c:62:37:6a:75:2f:09:0c:27:3c:
47:10:03:a4:53:f3:b7:5e:48:12:63:56:8f:27:d0:
22:8d:3b:df:9f:e2:77:44:ca:72:8a:99:75:ef:7f:
c2:66:40:fb:27:0b:ed:2a:ac:7a:cb:fe:28:b0:d0:
86:30:3d:e4:c5:5c:76:3d:9e:aa:e4:bc:d6:4f:8c:
91:ef:a0:98:7a:9d:5a:68:2b:07:e0:28:94:05:d6:
39:d2:dc:9a:96:3b:e3:fc:3c:fe:85:9a:df:58:17:
98:1c:82:de:c0:4b:f9:e7:da:f3:65:1a:07:a9:2b:
57:8d:49:e4:4c:dd:4e:83:0e:18:61:fb:c6:43:90:
13:8c:46:12:0d:ce:e4:91:ad:80:c1:a7:79:a4:6b:
12:22:0a:2a:2f:b5:08:2e:a0:54:3c:c2:1d:c0:df:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C6:31:10:13:DC:3D:13:CC:84:5A:34:69:9A:58:8F:1E:53:7C:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5722f81d-8e99-39c3-8a8d-1a23ff0885f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:5e:1e:44:0e:e7:89:74:c9:8b:36:74:6d:ae:27:03:c4:24:
29:38:48:e4:1e:6a:5a:d6:15:6a:ea:b2:06:f0:ab:17:dc:95:
08:97:3d:d5:49:25:05:0e:7a:29:42:27:d4:03:bb:32:24:73:
0e:05:5e:e0:77:63:5e:26:8c:fa:c9:f8:6d:d1:98:e6:8c:10:
1c:26:28:bb:ce:f2:21:a1:05:b0:82:81:1d:56:25:53:1c:2a:
b4:b0:ba:74:da:fc:4a:32:f0:5b:5e:e7:e8:47:b1:0f:06:2f:
c5:c4:fa:b5:05:1b:09:b3:f3:70:22:54:36:62:97:15:54:ec:
d9:92:70:bc:4a:5c:04:bf:e7:92:a6:b8:af:47:95:60:0e:80:
88:66:5b:45:f7:2a:45:66:20:c1:b7:45:0e:59:96:c2:8a:02:
cb:12:df:51:9c:a2:e9:bd:1a:8c:a3:e1:c7:b1:4a:13:d9:9c:
2b:cc:88:df:96:fc:61:02:a7:59:54:7b:9f:40:0e:83:c0:2b:
86:03:5a:93:19:db:e0:2a:65:bb:ac:db:04:f7:7d:33:35:e5:
f8:08:a4:b4:b0:2b:79:ee:8e:16:13:95:32:44:99:0b:89:ab:
0b:c7:f1:71:6d:1f:bd:97:bc:d3:72:37:0e:1c:91:3d:64:bf:
9e:21:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:30 2025 by rpki-client