Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dffddf98-b64c-3cab-8357-7fc6cceb3ef7.roa
File: dffddf98-b64c-3cab-8357-7fc6cceb3ef7.roa (raw, json)
Hash identifier: /oWu5OiwNf1S/uTZSvotM8v9XbFKl84unCSsvoFAeX8=
Subject key identifier: 93:0F:25:10:07:B6:9A:B2:F0:2A:4E:A3:24:F0:6C:B9:BF:A0:82:61
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC0B8C06AC772EDD43B60
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dffddf98-b64c-3cab-8357-7fc6cceb3ef7.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 81
IP address blocks: 198.86.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c0:b8:c0:6a:c7:72:ed:d4:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=9c3e7f53-490d-44cd-8cc7-d49990adf212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:9b:af:93:88:c3:05:a8:d6:27:51:9d:5a:
49:b6:94:22:d3:eb:76:f1:08:44:34:7e:83:4d:13:
73:37:ac:80:46:59:90:b1:3e:ef:f1:7e:fb:5e:b6:
70:92:fc:94:01:cd:6d:8c:ec:73:b5:17:69:ea:24:
d3:f2:e0:2e:2e:24:b3:9d:0d:b3:cf:ea:00:f2:5b:
08:cb:90:5e:df:fd:16:37:61:12:9f:d2:27:35:fc:
25:63:86:41:99:d1:eb:54:1e:aa:23:4b:11:35:d6:
48:d7:a0:d2:bc:9b:48:04:63:38:bf:cc:4d:d6:6c:
92:cf:04:a6:4d:13:4e:3a:48:c4:43:98:a9:4a:a4:
75:49:0e:8e:f4:3e:a9:99:48:e5:a3:2e:2c:0e:fc:
4d:a0:0c:58:72:1a:be:c1:f0:68:0d:27:a9:48:11:
0f:ff:94:52:5f:57:78:36:90:65:41:1a:0b:ff:40:
b5:a3:23:78:91:0c:a6:cc:f6:3d:75:a6:f0:fb:9b:
0f:43:c9:35:58:50:8e:00:f7:9e:54:47:30:c7:db:
5a:4e:fb:80:98:59:da:3d:43:de:23:6e:ad:5c:44:
aa:f7:0c:1f:b8:4c:ce:3d:b7:95:90:5d:81:0d:42:
e5:e2:b1:b8:1a:be:13:9a:03:a6:24:9c:20:98:b6:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0F:25:10:07:B6:9A:B2:F0:2A:4E:A3:24:F0:6C:B9:BF:A0:82:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dffddf98-b64c-3cab-8357-7fc6cceb3ef7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:05:7d:11:8b:4f:fc:02:27:8c:ca:10:99:bb:8c:31:5b:63:
c4:81:b2:b0:9c:e6:3c:a1:29:02:6b:ae:16:eb:0d:8b:45:ad:
83:42:b9:60:2b:13:93:9f:64:30:26:35:4b:c0:e2:74:50:64:
74:25:8a:2f:9b:95:6d:06:db:eb:fa:cf:d1:d1:7d:8a:c9:31:
21:ae:88:f0:13:1e:57:85:f2:fe:73:f9:a7:e2:f2:a9:e6:bb:
fe:f1:04:7a:f6:cd:73:1c:79:9d:86:c2:bb:79:0e:1e:b4:61:
ed:85:e8:7e:be:3f:a2:a6:f4:e9:53:8b:c2:ca:e3:71:55:a0:
d8:31:94:14:6b:c1:73:e4:d0:fa:0d:b8:95:75:01:09:80:03:
0e:2a:66:94:da:fb:a3:6d:8a:b2:67:75:2d:08:d1:5e:69:41:
d1:20:8d:4b:66:c6:28:49:12:52:46:cf:78:eb:d9:64:e7:62:
a7:f5:9a:2b:ff:f6:ca:7e:ea:a9:2d:4e:3c:d6:1d:b7:02:6f:
a4:12:69:d9:de:1d:17:04:da:f4:aa:41:a0:9b:41:99:8d:5c:
b3:17:b5:e9:b6:66:28:06:dd:b2:b9:92:22:4a:8d:e9:a5:95:
97:87:a5:14:b7:a6:55:ed:1b:41:6c:2b:d1:ae:68:54:2f:5b:
67:c1:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:28:44 2025 by rpki-client