Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f536857e-e7ae-3b29-9b92-6edac20c182a.roa
File: f536857e-e7ae-3b29-9b92-6edac20c182a.roa (raw, json)
Hash identifier: LrvF4hC5wVHYwkGo4OxWGQP9CzEqwQh1dHNQPI5xL2o=
Subject key identifier: A7:3B:DB:C7:7C:E3:67:9F:61:33:51:0B:65:A3:72:30:2C:B0:A0:6C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48EB3A309BC384E4DD700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f536857e-e7ae-3b29-9b92-6edac20c182a.roa
Signing time: Fri 08 Nov 2024 15:05:02 +0000
ROA not before: Fri 08 Nov 2024 15:05:02 +0000
ROA not after: Thu 06 Feb 2025 15:05:02 +0000
asID: 81
IP address blocks: 198.86.108.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8e:b3:a3:09:bc:38:4e:4d:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:02 2024 GMT
Not After : Feb 6 15:05:02 2025 GMT
Subject: CN=052ed56d-c977-4cba-8211-deeae9bbe378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:52:5a:dd:07:d8:ed:07:94:84:1b:f4:75:
e1:cf:38:90:b8:66:61:bc:db:55:c1:3e:e2:2c:31:
f5:05:3c:1b:f6:8f:d1:f1:5e:1a:08:c0:9c:4d:0c:
8a:46:9e:77:f2:e1:49:ef:7e:59:d3:26:85:30:38:
41:71:23:7d:f6:ce:fa:65:66:ba:54:1a:95:58:73:
5a:63:7c:24:16:e6:d0:e8:c2:d2:e7:c6:a0:b4:77:
8b:ea:34:8b:66:65:1a:23:e4:d6:58:7e:9e:9b:fc:
2b:0d:2f:cc:d0:b7:8f:8d:fd:77:d0:73:b5:35:1d:
82:1a:ce:57:f1:8c:7e:c1:0c:41:e8:a6:40:b8:2b:
23:f4:8e:af:f1:4a:96:24:6b:4e:5e:06:f5:4f:1a:
a6:3c:78:e7:fa:c4:1f:7f:9f:92:38:8f:3e:0d:df:
a1:f1:1f:03:bb:32:dd:0d:86:53:2e:06:35:fd:6f:
11:29:94:59:c7:a3:6c:9e:4e:21:e9:66:7d:44:f9:
0c:c4:bb:82:9a:80:95:bf:e4:81:3c:b0:06:8e:80:
54:1e:2c:c5:d0:76:7f:35:e2:82:9e:6d:05:f9:13:
8a:0d:8a:b3:01:fa:ed:7c:7e:ca:78:fa:eb:eb:fb:
66:1b:62:53:81:5d:41:1a:66:f5:fb:77:f5:51:7d:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3B:DB:C7:7C:E3:67:9F:61:33:51:0B:65:A3:72:30:2C:B0:A0:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f536857e-e7ae-3b29-9b92-6edac20c182a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d4:48:a4:dc:5b:f2:69:a9:c8:cf:63:61:dc:6b:95:63:8e:
c2:05:da:58:8c:b8:7d:f9:f8:aa:98:70:73:1f:01:97:cc:35:
36:b1:68:ba:66:58:47:7a:36:cc:26:f8:67:aa:b7:1b:d9:9f:
cb:75:06:bd:6f:66:13:44:c6:49:72:96:64:1d:e1:8e:3e:da:
e7:bc:be:f2:96:fe:30:97:d7:ef:81:a3:fd:f6:b9:e4:d5:5e:
56:16:df:38:f8:74:5d:bc:93:d5:19:18:34:63:81:1f:cd:ba:
0b:05:73:8f:af:20:2f:4a:ff:79:68:f8:1f:58:58:9b:e7:08:
a8:57:8e:08:97:8f:3a:f3:cc:3e:70:f2:60:7b:a3:6b:9c:4a:
f4:a4:f8:55:f6:ec:95:48:38:ca:aa:2c:a0:1d:5b:37:d6:a0:
ef:22:9e:e0:6b:3b:b4:83:52:bb:be:86:24:43:52:d6:7f:b8:
04:1c:c3:b4:21:a7:f2:c4:58:25:d3:2c:c0:c8:5e:34:cb:fe:
5a:77:66:3a:c6:b7:68:c9:c0:3d:5a:f9:91:7d:45:df:1a:6f:
f1:90:2b:77:76:f8:a3:2c:e9:1b:60:3e:9f:ca:d6:59:95:f7:
c7:62:80:8c:3a:13:a6:04:c4:52:9e:35:be:53:ad:21:09:4a:
50:0d:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:56 2025 by rpki-client