Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/96ca0f49-d506-39a6-9d93-154cf9ed7e45.roa
File: 96ca0f49-d506-39a6-9d93-154cf9ed7e45.roa (raw, json)
Hash identifier: y4SviqaphgwpxQ0xWKPCL8APzCGH3rJSRpgIgK1CNmg=
Subject key identifier: 33:ED:B0:47:50:5B:52:ED:8E:F3:15:CD:B3:72:BB:88:9C:F6:8A:31
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC05A728A7C71715EF500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/96ca0f49-d506-39a6-9d93-154cf9ed7e45.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 81
IP address blocks: 198.86.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c0:5a:72:8a:7c:71:71:5e:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=9878f4eb-6f4b-42d7-bd16-de02eb7eb357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:3e:56:37:43:ff:42:5e:07:75:58:d8:b4:
7a:46:4d:d0:14:a2:27:a8:ba:3f:04:93:22:0c:f1:
47:e8:c5:e2:45:76:1f:85:8b:5f:67:c5:76:15:ff:
be:74:a7:6a:cd:56:31:ee:7a:ae:5d:1c:ce:c2:92:
57:09:1c:07:1e:2b:86:c7:c5:f2:1c:20:41:ca:a0:
31:a3:02:b5:0a:7a:09:22:7a:8b:77:dc:fe:12:23:
7e:9b:4c:10:02:f0:28:b4:3f:be:fd:b3:58:94:07:
b0:cb:e4:4c:a4:6a:30:a7:09:8b:0a:55:21:42:d2:
bf:ca:e0:33:b3:6e:79:68:4f:26:20:4e:68:99:18:
a4:24:cb:3b:1e:c3:31:e4:da:98:19:68:50:59:a8:
56:b3:6f:51:dd:1d:c6:f2:13:85:55:bd:02:39:09:
ce:59:84:12:f2:e9:58:86:a9:a3:0e:aa:d3:68:12:
8b:8e:77:23:9f:aa:ac:ec:c9:3d:45:5a:16:33:d7:
f8:16:29:8e:92:aa:53:75:42:e9:98:b3:21:23:f8:
f9:1a:d7:dc:49:fb:53:55:9b:1b:a6:c3:3c:19:d2:
50:01:ae:bb:ec:72:20:8d:d9:7f:5a:78:fe:04:5c:
6e:ea:dc:ef:d4:d9:d3:c1:23:36:7e:b7:ab:15:66:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:B0:47:50:5B:52:ED:8E:F3:15:CD:B3:72:BB:88:9C:F6:8A:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/96ca0f49-d506-39a6-9d93-154cf9ed7e45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a5:8f:8a:60:04:f1:c8:33:af:50:de:f2:4c:d2:9e:f4:c3:
5d:63:95:6e:59:8c:78:12:35:2b:d5:d2:3c:e6:da:23:57:ad:
78:42:fc:77:7b:bb:79:65:69:40:a7:73:39:d3:c7:56:9e:92:
fc:18:f6:45:30:67:25:ea:a5:22:f3:92:f6:68:61:fe:6f:16:
ae:a8:b1:90:cf:67:2c:3a:6a:73:39:20:53:2e:ef:fd:52:1d:
b0:24:1b:e7:48:a1:76:16:1b:af:ef:d0:a5:34:4e:89:ef:a4:
5d:b7:d2:d4:b7:1b:32:43:7e:31:3f:68:0f:90:56:46:a4:93:
af:b1:cd:ab:b3:9e:0e:30:e1:37:fa:c6:a2:b5:df:24:7e:36:
75:d6:5e:4e:f9:11:36:db:12:29:8e:ba:4e:92:22:1f:3a:4a:
2f:73:ff:17:2f:9a:5d:e0:01:70:cf:9a:83:8b:45:fe:81:0d:
0a:b6:a9:b4:ee:95:7a:39:e6:5a:06:cf:fd:fb:11:13:bb:02:
58:ab:40:26:e3:b0:23:fc:40:9d:9c:69:96:94:b6:a9:1d:86:
c7:21:4a:8c:bf:f4:2f:3d:68:cb:af:6b:3a:b5:4b:6e:57:90:
da:58:d2:12:62:55:0c:1c:b8:4d:13:2c:19:58:d7:ff:9b:7e:
8a:73:97:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:17:51 2025 by rpki-client