Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/445757a0-98dd-3255-9367-ea3e56fd3b1c.roa
File: 445757a0-98dd-3255-9367-ea3e56fd3b1c.roa (raw, json)
Hash identifier: 8wg5mNtGFtio8vOxUeh75poDkZ8yQZnMua2VfAOxu30=
Subject key identifier: DC:ED:38:63:88:B6:5A:BF:79:02:52:FC:1F:C8:B6:B3:77:0F:CA:52
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC04B401FAF40EE5BCDA0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/445757a0-98dd-3255-9367-ea3e56fd3b1c.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 81
IP address blocks: 198.85.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c0:4b:40:1f:af:40:ee:5b:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=d8758a60-1cc1-4596-acdc-35ef8c81a183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:bf:df:8a:7b:a2:b7:f7:4f:b7:8c:46:fc:
e0:3e:a0:b6:3f:74:43:44:fe:bb:6a:c3:9b:12:e8:
82:1c:6e:af:be:92:f9:b3:c3:6c:b2:ed:83:85:e5:
80:5c:1a:49:be:bf:f0:4a:d1:83:6a:b7:34:2e:a0:
8e:dc:b8:81:1f:e8:19:b1:30:91:b4:d6:bd:34:a7:
7e:9d:b6:8a:f2:84:f1:38:9d:b3:0c:f4:82:dd:f2:
56:c2:ef:2a:92:ee:49:30:31:3d:66:f2:04:de:8c:
c7:55:f0:ac:32:12:d3:48:f9:95:28:d4:3e:ed:4b:
0c:fd:51:16:9f:61:a5:3e:10:7c:ea:e2:83:85:44:
c9:20:6f:3e:5c:7e:a7:91:c8:64:03:b3:ee:27:90:
bd:51:7e:1b:fa:55:da:6b:9b:91:89:3c:78:0c:5c:
5c:2f:f3:dd:98:8b:d0:47:ef:6f:45:bf:39:2e:4c:
5c:03:76:af:8a:e7:ec:0f:58:39:dd:21:0c:50:76:
96:c5:b4:f2:c1:79:34:53:42:de:b6:41:01:30:7f:
a9:1f:ad:1d:ce:ac:46:e3:6c:87:6e:32:7e:87:21:
24:5c:64:92:6a:6b:44:c0:fa:a1:8f:25:d5:25:3b:
5b:c6:d4:3c:7b:8c:41:b5:d4:55:54:6d:9c:a2:e8:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:38:63:88:B6:5A:BF:79:02:52:FC:1F:C8:B6:B3:77:0F:CA:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/445757a0-98dd-3255-9367-ea3e56fd3b1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:a3:d3:77:92:a0:99:d3:cd:94:96:ff:37:88:b1:35:12:29:
66:da:44:58:65:6c:6b:94:05:56:23:44:81:3e:53:ee:e0:b7:
76:50:60:28:74:e9:32:1d:c8:ec:46:9e:5a:98:45:66:db:5f:
bb:cf:50:e8:90:e9:a6:32:35:f0:78:f6:7c:6a:e1:e9:8a:ce:
e4:d9:52:23:41:03:d7:ae:1a:2c:15:83:9f:cb:78:03:93:02:
e1:b1:b4:b5:be:d1:0c:d8:84:0b:36:79:cd:1b:bb:2e:c8:fd:
c0:ea:91:31:69:87:c6:a5:40:77:28:1e:fc:8c:e0:c8:86:65:
4b:30:8a:14:49:47:2b:9d:d7:f9:f6:0b:b9:bd:31:b6:f9:f0:
2c:06:2a:11:43:03:14:27:38:47:b9:82:f8:b1:55:e1:fd:99:
2a:a1:15:7d:3f:ea:bb:d6:e5:ec:fb:60:13:da:55:7e:bf:ab:
f3:f1:87:8a:cb:50:bd:02:0a:18:ae:0b:f6:a8:e7:c7:64:15:
b0:e1:2a:5c:ea:a0:bc:6b:e5:8f:2a:28:34:60:00:8a:ee:03:
f5:44:0d:1c:7b:ab:1e:31:24:66:a7:99:19:6b:4d:4d:89:45:
5e:00:da:25:1f:6a:fa:24:a2:19:14:4c:16:3b:65:9a:70:d4:
77:ab:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:00:54 2025 by rpki-client