Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f76874db-ffc4-37d7-b650-447a97a96e17.roa
File: f76874db-ffc4-37d7-b650-447a97a96e17.roa (raw, json)
Hash identifier: xHvjoHdYjM3jELkNHjelJuuIqj6bVRma13KzorqqHTI=
Subject key identifier: EB:F7:3C:65:45:C5:E3:9B:88:CE:41:51:8E:21:09:45:31:24:B8:4C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB9707978242487643F80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f76874db-ffc4-37d7-b650-447a97a96e17.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 198.86.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b9:70:79:78:24:24:87:64:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=895c5ec4-b59a-4d02-8f3d-2311f876d559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:c2:38:d7:2f:95:3c:4c:7e:a2:52:7f:6e:
8d:68:9d:46:df:30:5d:b0:3b:ab:19:f3:73:f0:c5:
5a:19:89:ad:25:22:b0:77:06:ff:ce:a7:7e:a8:a4:
25:0d:fa:6f:3a:22:75:01:ba:a1:c6:78:8c:a2:ac:
04:0d:44:58:05:28:94:1f:47:44:72:2e:43:59:e9:
56:62:ec:f9:e3:7b:f4:72:06:ba:f8:a5:d9:c0:96:
b2:d8:a8:14:97:1f:54:ce:5f:57:a3:b1:f1:4f:33:
c9:34:a2:d2:7b:63:26:5b:1e:fc:d9:84:5b:c9:0f:
40:b8:0e:90:e4:5b:5b:78:b0:7d:5d:a5:3c:29:94:
69:3c:73:9c:ce:ce:bd:de:c7:ef:5d:4f:f6:66:45:
b2:76:de:00:f0:0d:91:7c:2b:e8:58:0b:66:e4:69:
ef:54:27:07:1d:99:47:fb:f6:fb:f1:36:fc:14:36:
f7:14:e1:a6:87:77:5e:5f:81:29:9e:c0:8e:d6:be:
3d:85:8b:24:ae:2b:82:f2:f9:9a:81:6c:38:ea:e6:
a6:23:46:7e:11:cb:6d:2b:2f:c5:c4:b3:b3:98:c1:
b1:bb:9f:96:ed:6c:51:b7:4b:b0:9a:c0:fa:06:49:
ff:86:8a:e1:67:39:93:84:dc:af:1b:b1:bf:9a:57:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:3C:65:45:C5:E3:9B:88:CE:41:51:8E:21:09:45:31:24:B8:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f76874db-ffc4-37d7-b650-447a97a96e17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:08:e3:89:24:79:d9:2b:3b:d1:7a:80:c7:f0:7b:0b:87:25:
0e:04:33:d0:ac:c4:8e:50:a5:b8:49:1f:df:94:36:38:89:1d:
35:e1:6f:28:9c:ba:2b:74:70:e2:f6:4d:60:3f:6f:44:7e:b0:
39:0b:47:ff:fa:e5:41:e6:e7:de:aa:f0:0a:d3:e8:b7:5c:e3:
a7:d0:7c:9b:f7:99:c9:36:0d:03:f9:36:ab:9e:55:12:ee:14:
69:d6:3e:b2:56:5b:bc:ba:fe:7a:a5:e1:5d:e2:82:64:f7:19:
d9:d5:45:43:8c:e6:31:98:4d:2d:72:58:94:6a:c4:6c:05:23:
80:dc:c5:29:7f:4f:1b:75:0b:63:78:9d:31:c7:e7:1c:f6:d0:
aa:bf:37:8f:b2:94:4e:59:3b:85:5a:98:f8:d7:9b:08:dc:10:
c6:6f:8b:36:de:05:26:2e:21:bb:55:86:d4:99:ce:d8:01:82:
ef:17:6d:dd:38:9e:c3:eb:85:39:9d:c3:2e:b1:68:72:45:31:
77:4b:5b:b1:e7:ee:0e:0a:93:b6:ad:9b:23:49:e4:b2:5b:1e:
fb:4a:26:b9:33:68:51:53:f0:e3:32:8e:2e:1c:85:66:c6:d5:
4d:a0:2c:57:c0:2e:81:e5:16:58:9b:cb:25:36:3a:b8:c2:d3:
33:ee:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:54 2025 by rpki-client