Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6df3863d-8e80-3ff6-88f6-e1317899e04f.roa
File: 6df3863d-8e80-3ff6-88f6-e1317899e04f.roa (raw, json)
Hash identifier: 9YWNcrWNmIiCcMh4iDOCW4iG2dEwVToGGBCre1PvS8E=
Subject key identifier: FC:F2:12:C6:53:A9:7D:9A:B7:A0:B4:44:33:B1:3D:3C:50:9E:99:16
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E079D212324A7EB925EB00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6df3863d-8e80-3ff6-88f6-e1317899e04f.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 98.16.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:79:d2:12:32:4a:7e:b9:25:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=4911fc30-139a-481b-8363-25d2c1a12c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:cc:0c:5c:56:03:5e:3f:11:31:17:be:53:
ab:b1:3a:df:09:74:c9:61:d8:b3:91:b2:7e:7e:ac:
5b:21:28:a4:aa:88:c2:0c:4f:21:36:c1:ad:93:5c:
70:64:d1:f5:e8:0c:b9:77:f9:1d:bb:bd:22:fe:8d:
21:80:7d:33:13:0d:95:79:83:70:7a:a0:e2:fd:24:
a1:36:e8:d4:ea:3d:25:54:3d:d6:b5:14:d1:ab:db:
13:06:fb:5d:6e:71:65:e3:3f:9d:0a:e6:37:54:ca:
76:ab:77:e8:db:da:5c:19:fe:45:dc:79:8e:2b:e5:
6c:d2:5d:64:96:ba:84:40:2b:d5:2c:6d:6e:13:91:
60:8e:c1:e4:c7:58:b0:66:0b:21:b7:85:72:93:71:
b0:07:8b:97:b2:f8:b3:e2:0f:f7:8c:57:2d:36:44:
25:c2:fa:d7:c8:6a:5a:0b:91:94:f3:87:6b:cd:c2:
a1:69:96:84:88:ac:63:d6:2e:0c:d2:e9:a6:1c:29:
01:8a:10:1f:2a:d8:83:fa:d7:a3:89:11:f3:68:d0:
06:0b:16:47:4f:de:45:a5:f5:96:5c:be:bc:be:9d:
62:e5:c2:1a:bb:28:49:a7:71:65:d7:e8:3b:90:15:
aa:9a:76:7b:e1:aa:a5:28:ef:d5:01:96:88:c6:62:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F2:12:C6:53:A9:7D:9A:B7:A0:B4:44:33:B1:3D:3C:50:9E:99:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6df3863d-8e80-3ff6-88f6-e1317899e04f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a0:28:b0:1d:e8:c1:83:63:2d:d6:57:de:02:58:2f:c6:a2:
c6:94:f5:f2:e1:1c:2b:f1:3a:d0:37:e5:b2:8b:aa:63:c5:43:
50:67:ae:b5:95:48:27:b2:41:da:08:81:91:cd:2e:f4:f8:9d:
07:f1:4a:63:1f:af:3d:79:91:d8:c8:2e:a3:8e:b0:d7:ae:6b:
c6:7a:80:58:6f:d5:56:a9:e3:7c:7f:3b:10:6f:00:d5:dc:e2:
c8:aa:5c:0e:57:9e:0b:69:45:8d:b8:ac:ce:a6:e6:5d:d5:b9:
b5:e4:5b:fc:80:51:44:ab:27:f4:6b:05:aa:c9:75:bd:64:7d:
3f:60:9e:53:3a:6e:e6:5d:10:5e:bb:62:27:32:b7:94:2f:ed:
a7:11:b3:a8:ae:75:33:3a:09:55:b9:0f:7c:33:df:db:d6:f7:
bb:06:ec:6d:1f:b7:f8:e3:09:96:26:26:2f:73:fe:7a:c6:38:
b4:49:bf:07:ff:11:1a:2c:4f:4a:38:ae:3d:e4:0d:a7:06:d7:
51:75:1b:b7:f6:89:19:f6:1e:9e:b9:a4:0f:51:89:c5:38:e2:
cb:25:32:0f:54:cc:4b:ac:ac:63:4d:75:99:60:61:b2:6f:23:
99:42:31:a1:1c:56:d3:df:55:1e:61:b3:b1:33:61:04:a0:0a:
fc:0a:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:08:03 2025 by rpki-client