Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff5a5185-d800-330a-8181-041a34875eae.roa
File: ff5a5185-d800-330a-8181-041a34875eae.roa (raw, json)
Hash identifier: 0z7jWg/pMMZNB76cxDKngEB1M95op48CNs62U/QIkDM=
Subject key identifier: BC:3D:65:A3:81:82:E7:51:DD:B3:14:0D:DD:E4:57:37:6E:CE:CE:28
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289A7A241371FABFBE16980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff5a5185-d800-330a-8181-041a34875eae.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 98.19.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:a7:a2:41:37:1f:ab:fb:e1:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=d7c9c507-d89a-4199-8fd9-ec733eef4c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:34:6b:23:6a:3f:06:5e:e3:b3:e5:c9:e1:
aa:8f:5e:5d:87:d8:cd:51:87:83:29:84:87:62:5d:
3b:a3:96:f3:fc:4d:f3:83:07:7b:da:dd:74:f5:20:
75:9c:4a:05:37:87:ed:ef:d1:89:9c:3f:1c:1b:37:
0a:c3:36:2c:8a:a0:72:ee:9b:78:43:45:39:2e:a7:
7d:0c:3c:26:41:b0:47:4f:e5:e4:33:cc:11:9b:07:
08:13:ee:38:12:0b:7b:cb:53:7f:e9:69:7b:32:26:
d6:3f:1a:bd:db:ad:5a:2b:57:3c:60:83:b6:28:f3:
36:d5:73:b9:c5:89:bd:3b:31:b2:bb:a4:cb:29:07:
79:47:4c:d2:33:0c:51:e6:cb:e3:94:02:36:03:5a:
f9:cd:55:d7:19:9a:62:e7:a6:3a:bd:f4:d1:87:0a:
89:db:1a:1a:3e:b1:a8:43:d0:1c:72:ea:92:4f:45:
cb:39:ac:8c:d6:f4:64:0d:c7:5e:9c:ac:a9:d9:3a:
75:89:ef:1a:dd:3c:ca:1d:48:66:5e:bc:04:f6:86:
48:d8:83:fe:b1:9d:5a:e2:cb:a7:a3:74:aa:43:10:
04:99:a9:6a:e4:8d:68:db:58:6b:d0:61:c1:fa:72:
cc:0d:34:fb:92:ea:d4:f6:d1:60:dd:d4:ad:c6:49:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:65:A3:81:82:E7:51:DD:B3:14:0D:DD:E4:57:37:6E:CE:CE:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff5a5185-d800-330a-8181-041a34875eae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:fe:d8:be:6e:e6:ca:8b:fb:4b:df:37:ba:b9:4f:21:d1:ef:
5f:53:a9:ee:94:67:35:56:ca:ec:7a:95:5c:30:42:ea:5a:22:
ac:dc:e4:de:82:60:36:dc:83:de:eb:ba:27:0c:65:c9:3c:4d:
ca:11:72:6d:0e:6a:19:a0:14:6a:75:fc:d1:fd:2a:26:55:27:
a2:30:58:41:5e:4d:45:ca:8a:d7:54:bb:50:90:a3:02:03:c5:
f9:52:60:1c:f6:96:a4:ea:30:f7:6c:c9:e8:3a:d8:4d:a9:af:
8d:1c:1d:5c:ed:9f:af:24:b4:79:c6:cf:d8:6f:dd:fd:13:62:
89:52:cc:fd:c4:3e:2d:3b:df:9b:32:f3:f8:39:5e:2f:db:29:
95:43:f1:a1:09:a8:ef:8c:0e:2b:88:e7:b9:fd:c0:17:af:5a:
37:02:43:7c:19:7a:5f:ad:20:53:53:6a:c3:08:d6:04:ca:f9:
4c:2c:2d:53:87:8f:bf:2b:1d:d7:5f:ac:e8:f1:79:81:b7:e1:
9c:96:3f:af:10:a0:ea:24:65:58:3b:54:82:ce:3b:0a:c1:ee:
56:f4:ab:47:06:ca:1e:2c:17:c2:6b:0d:eb:ab:9d:44:04:c5:
7b:54:ec:e1:16:24:45:f2:c4:ac:35:fa:bd:62:9f:47:7c:7a:
2c:1f:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:03 2025 by rpki-client