Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cfc73b89-a154-32cb-86e1-b328b6838518.roa
File: cfc73b89-a154-32cb-86e1-b328b6838518.roa (raw, json)
Hash identifier: QgVAt1a8cEae1Sx5EFhbZ/1/L8yZCZCo34u8fFc8Lf8=
Subject key identifier: 3A:2E:21:78:D5:BD:0A:99:71:09:0A:26:60:58:96:23:B9:26:49:8D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48E717AF96A2C84584740
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cfc73b89-a154-32cb-86e1-b328b6838518.roa
Signing time: Fri 08 Nov 2024 15:05:02 +0000
ROA not before: Fri 08 Nov 2024 15:05:02 +0000
ROA not after: Thu 06 Feb 2025 15:05:02 +0000
asID: 81
IP address blocks: 198.86.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8e:71:7a:f9:6a:2c:84:58:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:02 2024 GMT
Not After : Feb 6 15:05:02 2025 GMT
Subject: CN=632e72da-e897-4501-86d7-314d7ef70ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:7a:a8:f1:06:b5:89:2b:6c:18:77:10:92:
4f:fe:c0:df:a3:24:0a:62:12:ad:32:df:32:9d:17:
e7:be:87:de:44:3c:da:e5:d4:9a:01:64:b3:83:2b:
5b:c3:58:b0:b4:52:bc:ea:52:30:9b:f9:16:19:73:
47:0f:88:22:ca:d1:00:57:5c:00:89:cc:fd:61:4f:
69:f9:9a:9e:46:7c:41:83:d8:4c:b6:19:1c:3e:7a:
e3:e6:90:e6:00:b3:67:1f:ea:e2:73:64:32:0a:42:
6c:53:a8:e0:b8:cb:43:56:af:3d:7a:74:f4:7c:a9:
0e:5c:c1:a3:87:8c:d4:30:44:cd:2b:f6:02:08:73:
15:7e:4b:51:c2:ac:4a:49:80:f9:ba:56:f5:a2:55:
9d:5c:1f:ca:88:a2:7a:72:b1:15:3a:e9:19:cf:7b:
ae:c2:da:68:fd:30:84:00:62:e6:f7:de:e5:f3:3c:
42:a7:c1:45:77:f8:ac:e4:1d:3c:42:09:17:e9:c1:
29:b7:e3:21:82:f5:ce:bd:82:2c:de:fd:7b:a4:42:
89:2f:9d:12:e5:80:ca:e9:74:c0:38:24:90:d3:1b:
d6:14:1a:2f:46:db:e6:ef:cd:99:8c:45:69:a2:cc:
be:9f:42:f4:00:e9:eb:d0:bb:4c:f8:d9:e5:f6:9c:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:21:78:D5:BD:0A:99:71:09:0A:26:60:58:96:23:B9:26:49:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cfc73b89-a154-32cb-86e1-b328b6838518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:87:6e:a1:4c:e4:e9:22:17:d2:8e:55:a9:08:77:a5:d9:b4:
82:8b:13:18:a6:e5:38:fe:11:7b:91:bf:7d:57:bb:25:ba:69:
32:fc:7a:4d:2e:6c:ac:db:33:fd:b7:dd:03:b8:ae:0d:45:74:
1f:46:57:ff:9b:f3:a0:3e:c0:aa:e0:3e:16:b6:b6:ec:b4:93:
ef:dc:f8:8d:85:a4:8e:7c:a0:a0:cf:b3:43:89:06:ca:7a:98:
9c:86:bf:0d:3f:c1:10:f3:cd:1c:33:5d:25:95:0e:7e:79:2e:
18:58:d8:b8:c3:55:91:c0:09:f9:ff:87:26:6a:9c:d0:e7:0d:
9b:22:f5:16:68:5e:4a:df:fb:0e:88:47:c1:9b:ef:ec:6c:3f:
a3:72:1d:f0:e7:10:c3:b6:95:ee:99:31:ad:7b:c8:eb:86:b9:
72:17:63:9e:fa:50:2a:d8:dc:19:df:16:c9:f9:2e:8c:86:79:
97:c1:ae:24:0c:d8:2d:0f:3d:8c:25:14:d6:ff:b1:2b:76:77:
c1:77:b2:ce:aa:6c:49:81:b7:c8:28:06:cb:36:cf:91:c8:41:
31:e2:6d:73:7a:90:de:b0:db:b7:26:ce:1c:e7:c2:5c:1a:db:
e0:c7:d8:0b:c9:51:d2:4e:7a:90:32:d3:ee:a8:2d:b7:db:fd:
5c:ca:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:39 2025 by rpki-client