Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f2369a79-c8af-3722-ad9f-4de469a6acf1.roa
File: f2369a79-c8af-3722-ad9f-4de469a6acf1.roa (raw, json)
Hash identifier: kNQDx+iD66gEJKW/4wyEbgfVhkd98miPKYJsbGfibx4=
Subject key identifier: 4D:BA:2C:02:C9:B5:0B:DC:27:45:A0:30:D9:ED:90:51:D0:B7:C0:92
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC1099024AD944C933F00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f2369a79-c8af-3722-ad9f-4de469a6acf1.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 13371
IP address blocks: 198.86.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c1:09:90:24:ad:94:4c:93:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=63e2f3c2-d7e5-4401-b53c-32583bbe4825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:92:fb:d5:a7:36:be:43:2c:5b:56:3f:54:
1f:d1:ff:98:cc:d7:2f:86:6c:b5:35:66:57:e5:c7:
c3:df:38:4d:73:8c:81:ed:59:10:a2:84:f0:dd:68:
6c:08:d2:da:25:45:f7:79:71:b1:e2:80:11:c6:5a:
6f:96:36:09:5f:db:4a:28:e4:31:d7:56:e2:51:49:
09:9f:a4:e7:76:6c:15:30:27:ef:e9:ac:8e:54:fb:
71:ac:10:b7:8f:47:99:95:34:4c:d3:fd:ca:d8:a6:
a0:00:87:05:72:13:c1:e8:a5:b3:9f:61:18:e4:56:
36:50:6c:90:60:f2:92:75:f5:87:b4:50:ea:48:74:
7c:19:5b:23:11:0a:b3:45:6e:23:74:27:bc:b1:d4:
af:e6:13:13:cb:a3:56:59:cc:55:7c:f6:fa:31:c9:
1c:5a:f4:52:e6:3c:ad:9e:78:a0:98:b7:d5:03:d0:
88:da:95:6c:70:a5:a5:bc:a2:82:d4:3f:db:6f:8a:
90:00:19:9b:0a:14:83:31:c8:2e:5a:23:b2:77:28:
45:38:b5:ec:fe:85:03:80:66:d9:a6:ca:31:d0:f6:
61:da:69:c0:23:77:64:ff:b8:63:73:6c:ad:67:c7:
02:bb:14:84:95:3f:3b:6d:49:da:99:bb:3a:ea:14:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BA:2C:02:C9:B5:0B:DC:27:45:A0:30:D9:ED:90:51:D0:B7:C0:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f2369a79-c8af-3722-ad9f-4de469a6acf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:80:82:1b:12:95:be:47:92:11:9d:c5:26:5e:c3:6a:c2:a8:
6a:ab:0c:a5:6c:2b:93:ea:30:59:8f:6f:39:b2:b6:3c:e2:2b:
9b:80:0b:bc:a1:16:03:74:1a:f4:79:b2:a6:9a:2a:bb:1d:46:
da:05:62:1b:d5:ad:94:9d:11:f1:ce:25:d0:aa:44:88:db:11:
06:f4:26:0a:14:5b:98:9e:b0:8b:1c:7a:6a:11:8f:8b:e4:73:
d8:f5:14:0d:cf:85:e1:99:fa:db:95:d3:7b:41:82:69:a4:6f:
31:08:0c:e7:d0:31:64:d7:05:b8:52:4c:05:cb:e3:5b:fb:8f:
65:5b:27:30:5a:58:dd:df:e0:ab:e7:b6:f9:25:e0:55:32:55:
17:fb:5d:02:2a:5f:5d:ce:f9:3c:ba:b4:d0:21:13:66:e2:2d:
ac:18:d0:9d:18:47:19:90:b5:da:e3:b1:97:b4:60:0a:37:be:
e6:e8:71:f2:70:9d:76:ba:dc:5d:34:25:79:28:4b:72:59:3e:
c2:dd:3c:a4:18:75:60:1f:cf:81:b6:11:d2:9c:0d:3b:02:82:
c0:b2:eb:35:3d:87:c8:93:6a:3d:55:4b:1f:23:41:ac:ff:88:
2c:0b:65:4e:a3:43:80:58:3c:74:6c:72:93:46:92:4c:71:88:
d3:fa:7b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:29 2025 by rpki-client