Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/e249f1dc-211e-3833-9391-5a3b8705fe69.roa
File: e249f1dc-211e-3833-9391-5a3b8705fe69.roa (raw, json)
Hash identifier: OYqS1gSXtwCcmtg/CApW+yO3iJbqRQ0BJSCk1bOSnSc=
Subject key identifier: 03:BE:4D:98:D2:0B:B6:BB:CF:44:1A:CC:E2:19:D4:02:5F:44:6A:74
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F43285847ABA42F95795F4989DD46B140
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/e249f1dc-211e-3833-9391-5a3b8705fe69.roa
Signing time: Sat 26 Oct 2024 14:53:59 +0000
ROA not before: Sat 26 Oct 2024 14:53:59 +0000
ROA not after: Fri 24 Jan 2025 15:53:59 +0000
asID: 59241
IP address blocks: 162.98.40.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ab:a4:2f:95:79:5f:49:89:dd:46:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Oct 26 14:53:59 2024 GMT
Not After : Jan 24 15:53:59 2025 GMT
Subject: CN=522daf5c-2df0-49d0-b3dc-0ca0f2e0d0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:2e:79:10:38:c2:98:5f:b0:4d:2c:65:a9:
da:d2:47:da:37:e0:b8:f8:72:3a:a7:8e:1c:f5:86:
72:15:ab:e4:51:23:e3:4c:76:65:70:45:69:2f:5d:
87:47:14:4a:fc:b1:3c:5d:f5:f7:f3:e3:22:52:fd:
e7:42:38:ee:6b:03:fc:b5:4b:a1:93:bb:b4:c2:a0:
f4:66:86:69:59:84:86:30:50:0b:f6:9f:26:15:04:
34:df:45:07:d7:5b:d4:4b:74:bf:c5:4e:dd:b2:24:
8b:19:93:78:4d:3e:f1:92:0c:12:40:01:1a:ce:66:
9e:58:57:bb:fc:ba:d0:9f:8f:ff:93:9d:53:05:28:
47:6d:f3:ac:6d:5c:82:eb:d8:57:13:b6:8a:3f:51:
89:dd:c5:d2:d0:2a:98:2e:1f:b7:f9:00:73:8d:dc:
45:ea:0e:de:40:51:15:f5:cc:68:99:a9:3f:a7:5f:
d0:1c:fa:a8:56:25:c6:5c:3e:1c:aa:dc:2f:06:17:
49:bc:5a:8f:4b:e0:97:35:e7:3e:ce:e2:0c:9e:23:
7c:50:83:54:b4:85:81:23:e1:e3:2a:06:1e:ce:14:
94:a9:60:76:91:d5:92:6a:42:24:f4:1e:6f:4b:bd:
67:9f:60:b6:82:ab:3b:ee:7d:0d:07:41:47:2e:f5:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BE:4D:98:D2:0B:B6:BB:CF:44:1A:CC:E2:19:D4:02:5F:44:6A:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/e249f1dc-211e-3833-9391-5a3b8705fe69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
162.98.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:c0:92:22:5e:2c:2a:5a:9f:30:4b:99:e3:b9:2d:46:d8:5b:
c5:62:c5:3c:ea:21:03:20:b9:77:02:66:d0:a7:3b:18:ef:32:
28:8b:ac:32:5a:99:ca:e0:58:7a:c6:39:fd:8b:c0:cc:f9:9e:
ab:3e:af:49:d9:75:ad:f5:de:41:8d:04:ec:d8:a6:47:47:2e:
bc:23:f3:fd:d5:6f:09:8e:73:9e:58:4c:2d:fe:55:39:f9:88:
66:16:dc:73:1b:f2:67:c2:75:ce:94:d3:44:6e:24:71:f8:0b:
6c:9c:09:f6:f8:82:c3:9b:9f:0a:d1:4f:c7:61:be:b2:65:eb:
8c:86:77:c2:b6:b1:e7:23:5c:e9:48:81:35:0c:3d:40:7e:60:
05:a8:68:53:61:2a:70:bd:b0:1e:34:10:b3:8d:60:b2:52:86:
d7:30:0e:f6:e8:74:08:4b:28:00:7c:d8:60:1d:a4:1b:3f:9d:
39:db:96:f6:c1:f4:a7:da:55:ad:e8:91:ae:ae:0f:21:52:c5:
52:7d:c1:db:49:61:f6:b9:36:17:2c:03:89:df:51:6f:bf:1d:
11:a7:c4:c1:96:68:87:fd:3e:93:c4:4a:5e:f0:7f:07:f1:35:
98:c1:76:0a:d0:db:5f:ce:dd:34:a7:c9:d8:27:bb:3e:2f:c1:
2f:fd:04:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:03 2025 by rpki-client