Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cd6c485b-5a8d-3e78-9e7d-6c89e3808f72.roa
File: cd6c485b-5a8d-3e78-9e7d-6c89e3808f72.roa (raw, json)
Hash identifier: vDRX1ZODWKSveP1lXiTNcPwsic3xPBzHRz7ec4AB+sU=
Subject key identifier: 27:C4:8E:EC:A8:77:7B:21:50:8F:9C:0E:B6:CF:BB:33:6A:AE:22:0E
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285846A2A737A2462CE04B6E8A75C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cd6c485b-5a8d-3e78-9e7d-6c89e3808f72.roa
Signing time: Tue 23 Jul 2024 16:50:53 +0000
ROA not before: Tue 23 Jul 2024 16:50:53 +0000
ROA not after: Mon 21 Oct 2024 16:50:53 +0000
asID: 4922
IP address blocks: 98.159.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a2:a7:37:a2:46:2c:e0:4b:6e:8a:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jul 23 16:50:53 2024 GMT
Not After : Oct 21 16:50:53 2024 GMT
Subject: CN=2a398341-110e-46da-8b55-f0349ca0857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:19:f7:67:ef:95:3c:2f:bf:00:85:ac:2f:e6:
3a:bd:6a:e4:20:e6:5c:84:a3:3e:27:fd:71:b7:53:
25:cd:c0:55:c3:79:80:6c:e9:62:b2:6e:26:ef:ee:
9e:87:af:9a:a8:6d:ef:15:1c:d6:00:54:82:2c:7e:
63:aa:09:18:72:69:e2:70:c4:37:22:94:30:d1:a7:
ed:9e:db:9e:4f:fd:43:68:75:40:33:dd:18:80:b1:
7e:c9:7e:90:43:a1:51:f3:20:fa:3e:98:f3:28:2c:
99:b9:7b:97:83:ed:df:31:62:24:c1:23:94:0a:cd:
78:2e:74:2e:6d:3b:ad:81:0b:9b:a0:73:45:2b:e8:
e3:c8:7f:91:9a:c4:3b:55:a3:cf:c1:2b:6f:75:60:
20:54:dd:d5:90:e4:74:78:74:dd:f3:4b:bc:c8:7d:
91:e0:fb:6a:5d:a3:b8:ab:f1:9a:17:fa:52:e3:e9:
32:d6:27:8b:cf:28:7c:2a:71:62:41:67:3a:aa:d1:
ad:60:14:8a:1a:02:93:d4:a6:d3:66:9e:4f:2a:86:
c8:c7:c9:a1:27:f3:0d:94:f3:0e:03:82:38:d7:f7:
c9:0a:09:8b:0b:bb:06:e8:8a:40:82:9d:c5:db:a9:
ee:ae:d7:ae:89:0e:4f:0e:f6:67:6d:e4:70:ab:34:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C4:8E:EC:A8:77:7B:21:50:8F:9C:0E:B6:CF:BB:33:6A:AE:22:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cd6c485b-5a8d-3e78-9e7d-6c89e3808f72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:0f:8a:f7:48:c4:83:14:75:6c:03:f7:49:98:f8:07:86:d9:
5c:a7:7d:f0:65:e8:9f:0f:11:d4:88:d3:3e:de:60:37:40:e4:
85:fb:c7:d6:54:3c:44:35:ef:92:8c:cc:63:0e:44:a5:2b:6b:
17:c4:f5:cf:8f:0a:34:97:46:ad:2e:2e:3a:ca:a9:8f:3b:77:
81:8c:80:fd:70:d1:18:00:50:21:e9:8c:35:16:b4:52:ee:69:
2a:b6:ff:93:92:6b:01:3f:e8:46:6a:f1:39:35:f3:92:77:fb:
0b:6d:b1:ce:27:7e:42:45:78:2f:fd:75:87:14:4c:fa:82:c7:
2a:a4:6b:93:25:ee:f4:41:9a:35:6a:e2:89:23:f8:07:dd:a2:
e0:7c:f0:2c:df:b2:2c:19:67:d1:70:db:c3:18:89:92:bb:1e:
be:f6:17:98:25:84:14:95:61:d3:fe:7b:a0:c0:ba:49:01:ea:
10:b6:46:bb:b4:dc:23:a4:36:0f:6c:be:5e:75:92:9b:11:52:
a2:fa:9c:6f:64:49:6d:79:e5:60:95:5e:05:be:3e:f3:86:20:
96:0a:d1:2e:fc:db:ac:22:ab:95:d7:e0:2e:17:d0:56:6a:10:
35:a8:f3:f5:17:f9:2a:92:31:93:6e:f3:92:1e:eb:c4:d0:67:
d1:d7:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:14 2025 by rpki-client