Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5b414585-e020-3380-ad70-e76d0a43a20d.roa
File: 5b414585-e020-3380-ad70-e76d0a43a20d.roa (raw, json)
Hash identifier: Be1JGezS8NF7nkKz0HnChHFqSIcCmUfuPFTftkG+y2s=
Subject key identifier: 9B:DD:EF:D6:7A:F3:8B:6E:E2:D1:3D:F4:4D:C4:13:AA:27:7C:80:B0
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC07959E04BC12B404B00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5b414585-e020-3380-ad70-e76d0a43a20d.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 81
IP address blocks: 198.86.106.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c0:79:59:e0:4b:c1:2b:40:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=a16060df-2675-41db-a4f2-0d6e3bdf4880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:10:41:00:d2:f8:7c:06:39:1a:04:c3:ff:
5e:e0:6a:74:c6:8f:5a:84:f7:28:00:82:3f:20:48:
b1:2b:04:9a:e2:4b:d6:ae:62:29:67:28:4e:e2:61:
61:ff:22:d6:76:46:81:aa:a2:33:56:e3:6a:fc:ad:
b5:f5:2c:f5:ac:2b:62:75:c4:3a:9c:63:35:94:5c:
94:ea:00:73:a0:62:45:74:91:75:f6:99:68:4b:ac:
3d:1d:d3:79:27:e4:c5:2a:ef:4d:74:e9:20:03:c7:
3e:a1:a6:ea:9b:01:44:02:ad:69:21:3b:0b:2f:4f:
5f:b2:2c:c1:ca:dc:03:eb:3d:92:fa:5b:3b:82:56:
d2:87:a4:24:a5:40:4b:83:c4:c3:9c:83:fb:ed:12:
5f:51:46:04:45:dc:13:95:1b:b5:e7:3c:a5:5b:ad:
67:d8:ac:e0:06:d6:53:da:45:3f:3f:10:df:be:0f:
1b:5d:e1:f2:0d:50:5d:c3:2c:b3:9e:e2:ea:27:98:
6d:1e:d8:69:da:bd:c5:e0:c7:ba:2d:70:dc:db:f8:
cf:61:6d:82:71:aa:12:58:16:60:8f:ff:c5:d3:33:
fb:ef:68:76:d4:d0:15:43:f0:7b:de:38:84:45:05:
df:57:86:d4:4a:58:48:26:c5:dd:0f:c6:4b:9a:e3:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DD:EF:D6:7A:F3:8B:6E:E2:D1:3D:F4:4D:C4:13:AA:27:7C:80:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5b414585-e020-3380-ad70-e76d0a43a20d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:bd:9f:d4:28:f5:6d:30:34:33:da:bc:8c:b6:db:8a:fe:d9:
b6:8c:a7:57:fe:56:af:18:73:5e:6e:a8:39:0b:b0:f5:96:d9:
ef:f6:07:d8:2a:98:88:76:20:91:d7:dc:36:20:86:7f:ea:b7:
23:11:c8:96:e4:4b:f9:a5:cb:fd:ca:d9:36:2f:38:ec:f0:00:
29:9c:ab:30:62:bd:df:e6:95:e3:88:9d:ef:37:a3:ab:ed:46:
65:51:19:93:2d:90:c3:35:4f:27:f4:10:83:b5:50:a1:a3:86:
b6:ff:1b:a9:8a:49:17:a4:89:a7:4b:10:c7:8f:f3:01:78:1f:
4f:f0:1c:ee:57:f2:13:06:48:b6:02:e1:59:10:a4:93:47:c2:
ea:cc:59:7d:fe:f0:4e:e1:47:79:d7:b5:62:49:96:2a:fe:6f:
d8:ae:98:e4:23:cd:e6:6b:54:0a:ac:99:07:fc:81:62:23:52:
6c:9e:81:de:b9:4e:6f:23:78:3e:96:ae:15:45:41:eb:b1:14:
a1:d2:0f:78:89:82:1f:98:dc:52:67:18:2a:3c:af:8b:ab:23:
db:a1:fe:17:48:fc:d7:09:94:53:32:96:eb:7b:a7:21:82:99:
ad:c5:26:56:c5:78:9b:4f:d5:70:64:b0:ab:23:7c:0b:cf:42:
12:34:ff:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:27 2025 by rpki-client