Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89b25c24-2d00-3adf-a12d-71f1425cd633.roa
File: 89b25c24-2d00-3adf-a12d-71f1425cd633.roa (raw, json)
Hash identifier: cnWwh5DvTneqJqbBREIyg9XdyrGnXQ0Dc5xgLCWJUNI=
Subject key identifier: C8:13:62:D0:15:79:7A:A9:29:A5:F9:27:5E:11:A2:38:9E:71:49:5A
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48EE2C23E622F19ACD820
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89b25c24-2d00-3adf-a12d-71f1425cd633.roa
Signing time: Fri 08 Nov 2024 15:05:02 +0000
ROA not before: Fri 08 Nov 2024 15:05:02 +0000
ROA not after: Thu 06 Feb 2025 15:05:02 +0000
asID: 6559
IP address blocks: 198.86.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8e:e2:c2:3e:62:2f:19:ac:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:02 2024 GMT
Not After : Feb 6 15:05:02 2025 GMT
Subject: CN=b4255c0c-95fb-426a-b974-9d6623730bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:df:a8:59:eb:19:aa:57:a5:d3:7f:34:9a:
54:c8:92:37:fa:0d:c6:35:29:16:25:fe:fd:e3:54:
35:e7:4d:7d:df:5f:1b:10:36:9e:b6:10:08:55:ac:
86:95:c6:c8:44:4e:ba:fd:7a:a8:0a:eb:7e:67:e7:
48:a9:5e:52:53:7f:68:ac:4d:f1:84:11:93:54:08:
03:e3:78:0e:f5:0c:aa:66:9a:c4:50:0d:74:2b:9e:
7f:e7:65:df:76:a7:a2:50:57:20:14:6a:e0:18:eb:
1f:70:23:7d:0d:98:26:74:70:bc:54:ba:f2:f8:58:
ac:10:a3:ec:be:60:6f:ae:13:47:ec:44:5a:e3:b4:
86:57:f7:f0:8f:6b:48:d4:66:d5:ec:1b:5b:8f:7d:
01:32:30:b3:43:41:25:1f:f3:99:ec:9f:8d:81:18:
c9:4d:9a:19:5b:a6:3c:dc:5b:dd:c5:a1:96:24:f9:
2c:b0:78:05:db:54:49:0f:b2:d9:ee:ac:03:d5:3e:
9a:9a:4f:69:42:35:8b:b6:c6:43:5d:e8:ce:41:74:
70:f0:3b:c9:4a:58:0b:0a:4b:2f:14:3e:42:db:77:
89:26:26:1a:15:44:2e:02:80:95:64:31:65:3a:f1:
08:43:58:b0:67:59:ad:f3:ad:c7:5e:1c:b1:cb:91:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:62:D0:15:79:7A:A9:29:A5:F9:27:5E:11:A2:38:9E:71:49:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89b25c24-2d00-3adf-a12d-71f1425cd633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:b2:84:33:b5:60:74:d0:30:f5:5a:d3:30:6a:1c:c2:20:5f:
10:a6:af:8a:55:c4:f7:1d:14:7c:11:a4:93:16:57:50:2d:35:
57:49:b4:22:d6:56:ac:3a:af:84:3f:55:2f:6d:ba:40:f6:27:
e9:0d:80:c3:c5:1a:e2:0f:d3:e4:65:d0:14:48:ef:29:d9:0c:
51:77:5d:68:4f:5c:9f:bd:96:13:1d:11:47:46:03:1c:be:9b:
ad:cb:bf:f3:26:bf:05:2d:59:e2:a7:41:c0:e1:4b:eb:df:7d:
d1:2a:ac:04:5a:58:b2:4c:21:74:61:43:6b:2d:6b:d8:f6:55:
ee:ea:fd:d9:99:35:f8:95:29:36:cf:63:ba:06:38:ed:7f:a5:
5e:55:6f:43:5c:7f:6c:7b:57:d0:50:c1:ce:a5:1c:48:b1:2d:
53:80:f4:ad:be:f2:34:33:df:e4:ab:88:ad:79:5b:01:e2:18:
04:71:93:c4:19:db:fb:63:30:57:62:bc:14:5e:a1:a5:93:cf:
90:50:6d:25:e8:cf:1e:ca:67:63:2e:61:d6:d9:0b:f4:83:d2:
6d:94:62:e8:a4:a1:71:b1:b7:56:96:01:23:03:2c:27:0d:99:
c6:3a:71:7d:32:3c:0e:08:fc:aa:72:42:a8:77:24:a5:6a:6e:
88:31:6e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:51 2025 by rpki-client