Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3f91e67-3780-3946-84fe-e6853f910d81.roa
File: f3f91e67-3780-3946-84fe-e6853f910d81.roa (raw, json)
Hash identifier: ww2K8eEULpvdLgQI55oNkFSDVNtwBZ1gK6KbOInfrho=
Subject key identifier: E8:62:AA:B7:D2:C8:57:79:51:B5:65:21:54:4F:27:DC:4A:1B:9B:BB
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF482A1138ED54D16D51690
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3f91e67-3780-3946-84fe-e6853f910d81.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 198.86.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:82:a1:13:8e:d5:4d:16:d5:16:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=545a0f11-4c7a-43f5-9678-5b2c0b16bfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:4d:81:76:87:35:52:45:fa:0e:69:42:02:
bd:e7:b1:c0:f2:34:26:55:84:8a:1b:5a:3c:c1:0d:
ef:9f:a8:1d:b6:e6:a9:d0:cb:22:a1:16:bd:6f:c1:
4e:37:75:0c:1b:de:9a:a4:97:fc:bf:9e:50:f8:6e:
e6:0c:c8:e5:9b:f1:ae:78:d7:7b:a0:61:dd:6d:8a:
7b:fb:67:0a:1f:2a:c9:bf:ca:03:6d:a6:73:05:9b:
1b:d8:2c:81:32:41:29:d8:1d:59:eb:5d:06:85:1b:
d9:cb:63:7c:43:77:e8:5f:36:e1:21:9b:f6:18:2c:
03:84:59:5f:fd:60:83:de:86:c8:56:b7:b6:eb:a9:
c9:38:3f:9d:14:60:14:2a:c1:56:8d:84:ed:e4:e6:
1f:0e:d3:37:fe:ed:08:34:01:9b:c6:44:cc:c1:95:
c8:1a:9b:73:8e:3f:92:43:e2:52:b3:a6:05:39:71:
76:c4:bb:ff:56:ab:16:da:4e:4a:fb:fb:55:66:b2:
86:ed:db:a0:49:18:41:91:72:f8:29:80:66:42:c5:
c8:b6:89:4c:f5:c8:d7:4f:bd:0a:9d:e1:0b:40:5f:
9f:06:9f:cd:65:bc:cb:41:66:dc:6a:16:a9:70:52:
dd:a0:e9:e3:cd:5f:9f:1d:c5:50:67:d7:61:e9:4a:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:62:AA:B7:D2:C8:57:79:51:B5:65:21:54:4F:27:DC:4A:1B:9B:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3f91e67-3780-3946-84fe-e6853f910d81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:c9:c2:3d:4e:ac:be:a5:f5:a1:1f:b4:37:d2:20:e4:11:31:
50:e1:63:2a:bc:03:88:82:98:8c:09:8b:7e:23:25:88:ab:18:
54:ef:12:e0:c3:c7:29:9b:28:eb:92:73:eb:7f:c8:0f:7a:d1:
f6:41:b4:b6:a3:b8:7d:52:f3:24:1a:f4:7d:6d:4a:d7:a2:9c:
5a:97:b8:46:9d:36:32:3e:af:e0:bc:7d:ad:ca:90:78:2c:06:
26:d9:fe:77:ac:a8:6a:5b:c3:f7:dd:6d:53:2c:7b:40:b4:02:
bf:5a:f6:f2:50:82:7a:2e:c9:90:30:84:08:25:59:50:ff:aa:
e4:29:47:c5:e4:13:b1:4a:06:62:e0:4c:1b:45:73:6f:ce:0e:
37:34:14:89:50:4b:b3:38:08:42:50:8e:fc:41:ca:8e:fd:6c:
24:f0:11:81:26:a8:83:9b:18:46:3f:2f:b3:ce:6e:7b:e5:ae:
b1:34:ba:6b:26:d4:0e:55:47:46:55:6b:81:a3:0e:42:d5:3b:
cb:98:45:26:3a:39:96:84:42:5b:ce:57:bc:e7:48:1b:92:89:
8e:96:22:2b:20:46:63:1a:96:35:a1:69:49:f9:ff:2d:1a:53:
2a:65:57:1b:5a:8f:d8:d8:ca:d0:86:0b:8b:ef:d2:a5:61:04:
e3:24:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:46:53 2025 by rpki-client