Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bddcedb2-7154-3b62-a83c-db1c2c0942a4.roa
File: bddcedb2-7154-3b62-a83c-db1c2c0942a4.roa (raw, json)
Hash identifier: kbwSPl5dXjbf9H8uOWXxIIgsVDWUHt1bm7hKo+2w+MQ=
Subject key identifier: 68:E8:7D:E2:30:D9:FE:74:D6:6C:8E:1A:E8:83:BE:96:CC:7A:11:34
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0A0D1F1103B5B4E425110
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bddcedb2-7154-3b62-a83c-db1c2c0942a4.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 98.19.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:a0:d1:f1:10:3b:5b:4e:42:51:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=995e95d6-1705-461f-a0f4-597e2624337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:36:c2:4d:d8:be:ac:40:40:e4:33:94:b8:
81:b6:34:69:d7:05:bb:93:b4:83:25:ba:39:27:1a:
b9:09:a3:7f:a7:30:02:49:1b:df:a9:28:eb:39:d4:
af:4d:ee:aa:45:9d:ad:0e:2f:45:8c:07:52:ae:e4:
9e:0b:1e:7d:29:10:8c:ea:4b:e6:9e:18:c2:73:0e:
3a:c6:29:ba:fc:0d:4a:31:ba:be:8c:75:49:2d:2d:
c6:af:d0:64:68:5e:f9:06:d9:03:29:42:fd:40:78:
5d:fb:a1:58:c2:fa:c0:17:2c:d0:95:fb:30:47:78:
bc:7d:70:73:02:e3:b8:96:da:4f:dd:6f:90:b6:46:
8a:6a:57:2c:aa:25:9a:91:88:d1:7f:3e:1b:09:0e:
5b:bd:18:19:1c:4e:64:6b:31:12:f8:5f:00:47:f2:
62:9d:3b:0f:c6:d9:04:ef:d9:b9:9c:85:99:08:08:
30:4f:33:78:0c:63:86:90:9b:6a:be:08:54:c8:08:
8a:c3:79:4d:82:be:4a:6a:65:cc:ab:e5:74:67:8d:
b2:f6:6f:cd:bc:17:ce:5e:0f:4f:db:0b:95:d6:67:
fc:95:ab:ca:aa:80:5b:c3:02:8e:ed:8f:6a:7d:c8:
1c:75:85:6c:9a:c1:24:8f:6d:30:89:70:ab:2b:d4:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:7D:E2:30:D9:FE:74:D6:6C:8E:1A:E8:83:BE:96:CC:7A:11:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bddcedb2-7154-3b62-a83c-db1c2c0942a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:85:36:53:df:08:27:9e:16:98:6c:97:cd:e6:cf:c3:f2:51:
5d:33:10:37:32:87:84:61:4e:e4:56:9b:ee:98:22:54:2c:e4:
05:8d:06:b5:19:64:03:fa:80:07:f4:fd:d9:9c:be:f7:bd:6a:
d0:eb:b9:e8:9d:53:f3:04:4e:45:ff:6f:e6:86:49:15:ad:3a:
97:7b:c2:dd:89:97:9a:f0:11:26:3f:9d:f9:bf:8b:3b:fa:c8:
c5:0c:6e:93:7a:62:45:3f:d2:d4:2d:43:3b:a0:b8:57:2b:d1:
ae:f8:8c:b6:10:20:75:82:79:14:ad:5a:9a:95:d2:c5:f8:ff:
48:8e:0d:d1:63:7b:8c:49:89:de:62:b1:3e:58:b4:2c:a5:3e:
77:ec:31:5c:77:da:99:52:4a:90:66:95:9e:5f:14:37:06:80:
ca:7d:8a:13:0a:ae:61:2f:90:f5:5e:23:87:79:c6:d6:8d:1f:
b0:a3:fd:86:5b:45:88:08:cf:fb:b7:42:d5:9e:86:47:10:59:
64:eb:99:05:e7:6b:e5:01:a1:90:c2:c3:a8:e8:ec:45:53:fb:
de:e3:6a:43:bf:29:20:f4:37:4c:09:22:7c:05:83:dc:01:8a:
55:5c:7b:14:8f:66:65:5a:82:7f:d3:81:dc:dc:5b:50:a8:f7:
53:90:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:56 2025 by rpki-client