Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8d8ccc2a-ec50-3c78-baf8-03e6df4d5053.roa
File: 8d8ccc2a-ec50-3c78-baf8-03e6df4d5053.roa (raw, json)
Hash identifier: nEtqquoiEMV65kDDBaz/aO0KDSrunZ1cV+fpcZL8r8o=
Subject key identifier: 37:FA:2F:D8:4E:FF:71:64:AA:D6:1C:91:6F:D2:42:78:35:32:3F:46
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285846E026C01BB8AD0E96A3954C80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8d8ccc2a-ec50-3c78-baf8-03e6df4d5053.roa
Signing time: Wed 14 Aug 2024 17:32:10 +0000
ROA not before: Wed 14 Aug 2024 17:32:10 +0000
ROA not after: Tue 12 Nov 2024 18:32:10 +0000
asID: 54004
IP address blocks: 198.89.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e0:26:c0:1b:b8:ad:0e:96:a3:95:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Aug 14 17:32:10 2024 GMT
Not After : Nov 12 18:32:10 2024 GMT
Subject: CN=0b5af343-1360-4a73-a71e-6448a35b5f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:d8:f9:2a:6f:b7:5d:f8:66:24:c0:42:e2:
51:48:38:1e:87:8e:44:dd:04:bd:b9:45:f2:d5:86:
57:be:eb:82:60:af:93:35:02:e0:50:9d:73:41:34:
b2:cd:f3:c4:b2:50:a5:b7:f0:d2:c0:19:6f:d9:ed:
d4:c8:86:5f:a6:0c:68:09:b6:13:6f:84:c0:e0:27:
6c:28:f8:df:c1:48:8b:d5:fe:49:c8:97:98:9b:7d:
6b:2f:7a:87:0a:ec:a9:da:74:30:15:45:15:c8:09:
35:8e:c6:f4:69:d2:fc:b6:14:9e:c2:29:cb:a8:9c:
00:6f:d3:52:21:4d:92:0d:ed:49:d0:02:71:e2:26:
85:4c:3d:3b:19:4f:e0:aa:ee:65:d7:75:af:12:44:
9b:20:91:e8:3d:86:4b:d3:0e:2c:73:68:19:33:55:
23:91:d2:32:71:1e:9d:37:b8:95:93:d4:30:e1:2b:
1f:86:95:30:41:c9:2f:d1:62:21:25:3e:d7:d5:7d:
22:99:ea:fe:b1:69:df:14:16:45:78:54:2a:d3:1d:
d7:17:60:ed:46:c6:a8:bd:ff:8f:e1:75:8c:4e:8b:
60:8c:d6:17:71:9c:e9:f7:45:b1:cd:69:ec:0d:c6:
4d:3a:15:66:fb:a6:b3:6b:2c:73:9f:f1:fc:23:dd:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FA:2F:D8:4E:FF:71:64:AA:D6:1C:91:6F:D2:42:78:35:32:3F:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8d8ccc2a-ec50-3c78-baf8-03e6df4d5053.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
198.89.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:7a:ec:2d:89:1f:0c:02:e0:56:08:3c:36:8b:4f:43:88:4c:
d8:24:18:d2:a1:84:fa:01:b0:81:2d:b8:32:f7:6c:35:3b:41:
87:7d:6e:a0:0d:f1:b0:8f:2e:2e:5b:3c:c5:e8:00:8e:13:31:
d0:4e:69:cc:0f:9c:35:c6:5e:37:49:db:d7:56:6a:c4:6b:0b:
c6:ac:76:34:57:26:e3:d2:fc:9b:45:09:a7:9f:03:8a:d5:5d:
6a:8e:ae:1e:be:60:06:5f:8f:79:02:a7:5a:19:f1:62:b7:1d:
f3:4c:be:cb:74:a3:23:6d:1c:7c:d4:54:52:a9:48:a0:4d:f1:
91:26:51:10:bf:95:cc:96:a3:57:af:37:46:16:0b:13:a4:33:
39:8a:04:1e:9d:32:20:0a:4f:c0:41:5a:a5:f7:2b:17:61:fd:
c5:97:f0:c9:42:78:a2:47:45:1f:1c:2c:4c:7c:fb:4a:83:36:
16:93:e8:e0:3a:bb:b3:22:96:07:95:8b:3f:10:94:7f:b1:bd:
d6:ac:d6:b0:1e:58:ab:1d:0e:7c:e6:7e:89:41:f0:91:cf:91:
37:1f:50:1d:32:87:d5:bc:5a:d1:28:bf:33:03:bb:c6:f5:45:
b5:05:22:2e:17:9a:02:5c:49:d1:7b:0d:f3:b5:10:05:1d:cf:
4f:e1:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:16 2025 by rpki-client