Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b26c5714-ec1b-3c9f-ba5a-f1baba895243.roa
File: b26c5714-ec1b-3c9f-ba5a-f1baba895243.roa (raw, json)
Hash identifier: 8VMiTmokkyYRhZuG/lgWb/ThxZiK1NTK5HDuQxiUpAw=
Subject key identifier: B3:11:FD:00:45:4D:77:A1:D2:6F:59:E8:C8:CB:6D:B5:7C:73:C9:81
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E07C91BB20D27524A1F1C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b26c5714-ec1b-3c9f-ba5a-f1baba895243.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 98.22.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:7c:91:bb:20:d2:75:24:a1:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=b9f8a14c-ce33-4390-a8d5-c7f9cbe6ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:86:0f:0b:1d:0e:81:25:8c:af:7b:50:34:
0e:2b:f7:52:c8:e8:3b:9d:a0:32:47:54:eb:66:8f:
36:1b:09:6e:29:16:81:4c:de:d2:fb:f3:07:c4:8f:
d2:67:0c:28:35:10:03:d9:0a:d5:db:f4:b8:65:90:
5c:22:3b:54:94:f2:cd:cf:b2:1c:6b:b7:eb:cb:9e:
c4:e2:ac:9b:1b:60:ee:46:ca:dc:fc:d4:62:01:fc:
6d:cc:6c:f8:4b:90:ad:0b:e6:95:94:16:6c:b3:7b:
86:6a:1d:5e:f0:31:91:46:79:3e:ec:9b:dd:74:57:
4a:e5:b0:2e:85:d9:a0:cc:8c:0d:d2:1f:2c:95:ff:
62:28:82:07:e3:b9:e2:11:18:bd:75:d3:f2:e0:9e:
01:67:64:30:15:23:a5:86:a6:1d:67:59:7f:5a:07:
c5:dd:8c:9c:d5:9a:0f:66:52:0a:e2:a5:b8:ef:3b:
97:cd:77:ae:91:84:01:6c:ed:09:2d:f3:27:fb:b5:
b8:81:4f:a2:f3:c3:67:cf:31:52:98:d7:84:64:b4:
8f:c6:84:f6:2a:94:9a:c1:6f:29:5f:af:b1:ad:96:
df:ac:8f:cc:7d:cd:bd:57:cc:37:ec:6e:83:4f:fd:
cf:c5:1b:ce:c2:de:f1:26:ad:58:e4:44:05:53:81:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:FD:00:45:4D:77:A1:D2:6F:59:E8:C8:CB:6D:B5:7C:73:C9:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b26c5714-ec1b-3c9f-ba5a-f1baba895243.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:61:d6:1f:c0:5c:d2:ad:aa:38:ab:9a:ea:a7:3d:6e:dc:12:
0f:da:a0:53:81:55:1f:36:37:3e:c5:8a:6d:28:48:14:4b:15:
f6:be:45:df:d1:e9:82:78:16:be:d3:bf:be:68:d0:c9:d5:03:
74:e6:53:b7:75:f8:74:8c:ca:35:19:17:2c:14:a8:89:ba:f3:
df:4c:b7:d9:24:7e:17:d4:5f:d4:02:7e:ad:64:e2:17:11:1a:
83:45:eb:fe:88:72:56:25:fc:4f:87:72:18:43:78:56:d1:d3:
8d:83:b1:a7:f9:f5:5e:7f:e7:9d:3c:83:43:33:3f:30:80:12:
79:5f:e1:34:97:0e:d1:bc:e3:cf:5b:23:71:e2:a8:3c:e0:ce:
32:fa:5c:1c:0d:41:ac:da:29:0d:7f:05:8c:ec:be:7e:96:1a:
e9:45:08:a2:df:a0:08:c2:ef:c0:d1:b1:8f:ff:02:a6:44:6f:
32:07:89:ce:48:7e:de:b7:cc:13:59:15:ba:44:38:64:e4:53:
fc:92:5f:7f:df:f4:e7:72:04:76:8a:7a:d4:23:ed:93:1b:19:
ca:86:82:64:f1:14:6b:7e:de:c0:a3:83:70:e4:ea:6d:3c:41:
70:aa:34:81:44:bb:e6:09:a4:52:ec:4e:f2:c5:2d:0e:7c:54:
6a:18:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:06:42 2025 by rpki-client