Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db70367d-034e-34ac-ae50-0b2128f91fd8.roa
File: db70367d-034e-34ac-ae50-0b2128f91fd8.roa (raw, json)
Hash identifier: iZJDUjLBOjZY0rhF5cfEev3Le+M3B/5AuAyPWLWvNgw=
Subject key identifier: 9F:31:F9:18:A1:17:35:69:0E:54:6F:B0:B3:D6:E9:0A:EE:C8:F4:D4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584472DB774920639D6BB457EBF8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db70367d-034e-34ac-ae50-0b2128f91fd8.roa
Signing time: Fri 05 Jan 2024 04:23:29 +0000
ROA not before: Fri 05 Jan 2024 04:23:29 +0000
ROA not after: Thu 04 Apr 2024 03:23:29 +0000
asID: 7029
IP address blocks: 98.16.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:db:77:49:20:63:9d:6b:b4:57:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 5 04:23:29 2024 GMT
Not After : Apr 4 03:23:29 2024 GMT
Subject: CN=797cb2c4-6369-4c1f-aba8-b5103485ed44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:93:be:c9:19:8d:3b:a5:c6:ac:b3:28:85:
18:6e:5b:3a:a0:0c:ce:8e:6a:2b:ca:f5:59:a0:dc:
13:a1:24:8b:4b:97:0c:b2:34:be:d3:7f:8b:f5:7a:
40:f4:aa:a5:1d:0b:2b:d2:57:78:13:c0:71:43:e0:
25:26:ad:89:3d:f2:58:ba:8c:57:39:9d:36:96:44:
67:eb:0c:78:27:c6:c6:ee:f2:30:de:2b:28:8f:37:
8e:b6:92:7d:b0:5c:ad:d2:0d:ca:74:31:7f:46:69:
2d:14:5a:af:e3:09:ad:7e:b7:40:c1:c3:4c:ee:08:
e3:25:e2:24:2f:5f:9d:35:a3:04:49:a4:af:43:fd:
b7:d7:6e:d7:7e:a5:0e:f6:04:6a:c6:74:0b:e0:3f:
c2:a7:49:d4:25:c6:54:20:f4:0d:fb:80:c8:5e:dc:
78:70:49:a9:2d:37:40:f0:1a:97:22:8c:f1:77:fe:
74:c4:d2:10:69:60:bc:78:2f:5f:26:da:58:d5:17:
04:6e:f8:85:67:cc:54:51:45:33:82:5c:bd:cc:ff:
51:4d:0e:a4:f7:2b:4c:e2:6b:42:61:8d:8d:0e:06:
48:92:07:09:88:5a:8e:7b:51:03:64:b5:36:6e:db:
ad:95:2d:1f:dd:b9:cb:c0:90:0d:3b:b5:34:ea:d6:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:F9:18:A1:17:35:69:0E:54:6F:B0:B3:D6:E9:0A:EE:C8:F4:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db70367d-034e-34ac-ae50-0b2128f91fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:96:3e:77:4f:e0:df:84:45:ed:ff:d6:a0:4a:b1:4c:a2:b7:
cc:f1:32:0f:3b:2c:7e:7c:4c:ed:38:25:91:17:9e:af:d7:97:
3b:c6:49:e1:c5:cd:a2:07:4a:3b:a3:80:69:6c:e9:f6:5d:18:
76:ee:92:48:62:1f:17:aa:68:30:82:a4:20:e3:28:b2:bb:b7:
3c:32:55:c7:a6:fd:93:4b:87:f2:45:e2:09:ce:ba:af:86:5f:
b3:fb:14:b5:6c:4a:91:cf:ab:d0:f3:da:b2:62:c3:82:11:85:
ed:14:2b:e3:f9:d2:37:84:69:01:e2:26:0f:11:f7:c9:ab:ee:
1e:5f:e2:45:83:eb:6b:0e:f2:dc:1c:b3:15:dd:b9:47:65:c1:
a9:b4:51:4f:4e:9b:28:7f:a0:3d:4b:0e:bf:bc:38:dc:c8:3c:
ea:04:d5:cf:0d:59:ae:45:f5:9b:61:f6:9b:6b:a2:42:1d:0d:
e7:e6:99:fb:01:3a:37:cb:c0:bc:f3:01:03:b4:87:9d:5e:b7:
f2:af:61:93:4b:15:84:1f:ca:51:7a:b6:20:f9:4d:03:c7:ed:
60:dd:b1:e2:3d:33:0f:50:e2:cf:26:61:14:d5:7e:87:42:eb:
2b:84:a6:b0:6c:82:e3:c1:de:2e:56:82:58:2d:aa:8f:c6:fd:
f6:96:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:09 2025 by rpki-client