Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb0730d3-2630-33a2-bfbe-9c5eb13f5a61.roa
File: cb0730d3-2630-33a2-bfbe-9c5eb13f5a61.roa (raw, json)
Hash identifier: GHw/owYNIdPY5Pxok4ho6Yf23VArjDzAa2VzWReezp0=
Subject key identifier: 11:5F:06:42:BB:1D:C2:95:3D:42:A9:D1:04:82:49:D0:09:CF:78:F6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E07A247E4D2D169A12D900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb0730d3-2630-33a2-bfbe-9c5eb13f5a61.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 98.17.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:7a:24:7e:4d:2d:16:9a:12:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=4c89188b-474a-4dd4-8d79-a5786d036868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:60:db:5c:cf:a7:52:06:f5:22:a9:64:0c:20:
af:cf:d9:86:9b:8c:37:cc:73:5a:7d:55:c7:7f:ba:
cd:6f:df:0c:63:13:36:f6:c9:c4:fd:22:e2:4e:49:
cc:f7:22:19:aa:f8:0b:71:e1:09:c5:41:d6:04:26:
47:56:b4:fc:37:42:e0:87:9b:bb:fe:3c:27:93:35:
ad:e6:d9:9b:53:82:9a:ec:b3:b3:19:c9:37:b5:9e:
e9:dc:f1:5c:dc:58:37:32:52:e2:20:ce:0c:90:77:
6c:ae:42:d0:d8:4e:62:19:f5:14:f8:98:06:39:be:
c0:d7:a5:91:80:45:7a:7c:31:00:c3:8d:70:fb:0f:
d7:4a:89:ed:6c:3e:7c:64:da:75:7a:24:2d:3e:10:
08:aa:0d:51:78:e9:a3:5d:2b:ee:57:5a:73:7b:20:
09:64:7a:c3:43:f8:30:2b:da:29:e3:4b:3b:5e:dc:
78:7d:8f:04:f7:d0:38:74:d0:b7:24:16:fa:f0:68:
ea:ff:af:9e:dd:8f:50:6c:c6:5f:c4:8e:53:30:41:
5b:ca:87:f3:f7:66:00:31:f5:41:b3:88:da:17:f5:
a2:f7:4f:1c:d3:8d:1f:e0:f6:10:c7:83:00:60:4d:
48:b1:5b:dc:cb:d9:70:ed:6d:a7:6f:49:e6:12:19:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:06:42:BB:1D:C2:95:3D:42:A9:D1:04:82:49:D0:09:CF:78:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb0730d3-2630-33a2-bfbe-9c5eb13f5a61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:4e:27:d7:e9:95:a3:91:88:97:b0:16:96:9a:3e:2b:5d:29:
87:34:0e:83:e1:25:4d:6b:f3:67:0d:bd:5e:7b:7e:3c:95:be:
cc:20:f6:c9:77:3f:8e:ad:21:66:64:d9:35:f9:4e:91:85:20:
9c:0f:3e:f6:78:45:11:a5:1f:e6:42:71:0f:26:be:ba:9d:27:
4a:26:33:30:9e:d5:3a:4d:64:84:61:95:7d:6c:a5:76:7d:c3:
21:4b:08:5b:35:94:5e:eb:5d:61:6a:73:2d:3f:44:c4:44:a9:
8e:d3:03:ef:33:04:c0:54:8f:d6:26:53:1c:a6:f7:72:65:c8:
5d:be:49:cc:6f:64:20:0e:d0:be:84:d6:cf:19:c8:7f:94:53:
49:d6:9c:46:96:1d:e6:be:5a:7e:69:85:b6:82:54:28:c4:3e:
53:46:75:b4:dc:64:33:39:29:12:19:08:c5:ed:fc:d8:9b:0d:
6a:a2:0d:46:fc:8a:64:fb:bf:77:32:dc:f4:3f:9a:63:fa:d5:
2c:7c:3c:22:68:48:9a:c8:fa:7b:df:04:41:50:37:36:0d:1d:
3e:69:74:83:f5:93:95:3e:be:72:72:68:ee:7c:bb:85:7b:35:
83:a6:41:c7:46:c8:bc:8d:12:44:a1:94:7e:96:a2:fe:bb:b7:
4c:2f:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:45 2025 by rpki-client