Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa282a1f-d9c7-3026-b4c6-7b1c55786215.roa
File: aa282a1f-d9c7-3026-b4c6-7b1c55786215.roa (raw, json)
Hash identifier: 5lOUU6YZad2H3CSXWULxoBN75w7JeUf3DfU9DPcmd6M=
Subject key identifier: 02:8D:F4:B5:72:5C:BA:AF:98:22:51:46:5B:F3:82:9A:65:BA:80:86
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858486D905EE3893BA5A0DC052C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa282a1f-d9c7-3026-b4c6-7b1c55786215.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.18.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5e:e3:89:3b:a5:a0:dc:05:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=30c6b2da-4c3d-4310-9764-5100a438fbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:b5:8e:4a:4a:12:d8:c4:1e:c7:51:7c:3f:
ad:05:2a:11:d6:e8:d2:88:42:f3:f8:4c:59:eb:10:
a2:cb:8d:4e:12:07:fe:b4:d4:34:c9:13:04:b0:bd:
4d:51:00:26:d5:86:6d:b3:cc:a6:f4:19:21:e1:b0:
38:af:21:9f:07:f8:6f:a0:9b:5f:a1:b5:58:98:04:
22:af:21:ce:3e:9c:4f:ec:37:1a:e5:10:61:a3:1a:
90:72:a0:9c:1e:66:4b:ce:a9:ed:a7:bf:7f:03:27:
b4:1e:d4:41:af:f4:b6:47:f1:56:95:48:53:3e:8a:
55:c3:68:b1:ee:35:29:8b:1a:d9:b7:88:cb:b5:8a:
ad:c7:1d:30:12:4b:76:26:f7:c9:6d:06:92:c3:ac:
b2:53:a6:27:d1:51:2d:86:63:2f:99:53:d8:29:e5:
f3:d5:ca:17:ab:6d:7b:87:48:cb:01:3b:0e:c5:7f:
92:fd:87:76:93:a5:da:b0:a2:e2:5a:53:db:b9:56:
73:f8:9c:fd:88:69:6a:bd:ae:c5:57:e9:54:48:d2:
77:5b:1f:08:d9:44:34:6d:38:20:92:aa:c0:4d:e2:
33:04:74:3d:1e:c9:41:e1:54:61:3f:3d:66:c6:d6:
18:d8:35:59:ec:dd:37:a6:15:5a:40:f4:96:e6:5a:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:F4:B5:72:5C:BA:AF:98:22:51:46:5B:F3:82:9A:65:BA:80:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa282a1f-d9c7-3026-b4c6-7b1c55786215.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:57:77:ff:d6:02:01:1a:b8:bd:1c:b6:53:f2:55:0d:51:77:
16:31:72:9c:5a:e7:18:8f:e5:72:6f:30:e5:00:b3:36:40:2c:
77:9d:d0:89:69:bc:c3:ec:7a:03:bf:3e:95:23:5b:57:f0:3e:
bf:59:ba:71:f5:31:dc:cf:84:fc:d3:fe:b8:94:c8:0b:e3:28:
34:f8:74:5a:e2:a2:dc:93:80:0f:2d:84:52:b1:94:36:b2:24:
4b:93:4b:5a:73:40:62:28:45:cc:09:00:df:ed:56:76:2d:a9:
fb:40:2e:7c:24:4a:de:15:c3:16:97:5d:e7:7d:c6:0e:6b:66:
bb:d8:03:e9:67:ae:7e:a5:54:d2:4e:a3:37:ac:33:00:6e:cd:
fc:60:66:7f:27:5e:2f:41:82:a0:88:07:31:ce:4f:fd:f6:59:
da:f6:bc:8f:a1:e0:93:ed:f6:ac:0a:d9:9f:20:bb:57:65:84:
ad:93:b2:80:4f:7a:35:de:6e:36:82:cf:fb:38:53:06:05:94:
b1:cf:3d:82:14:f6:df:3d:4f:9e:47:7d:c6:ff:23:cd:b8:f7:
e1:41:f0:f4:aa:52:e7:61:45:7d:67:3f:c1:30:fa:b2:ae:a7:
89:15:b0:f5:73:4b:21:d6:24:a2:a1:a6:92:0d:ce:8a:85:ad:
bb:aa:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:51 2025 by rpki-client