Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9532c438-fd2b-3486-a318-5f7487e3cce6.roa
File: 9532c438-fd2b-3486-a318-5f7487e3cce6.roa (raw, json)
Hash identifier: A91j0/vpnbiVj5MPSQSOc2eXha8KaGP7VvrczVkZbc4=
Subject key identifier: 30:BD:7D:87:1A:8F:02:B1:39:2B:32:59:FE:95:8A:7B:B7:54:50:E8
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285846E024FBC8BF630F82D8CFA000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9532c438-fd2b-3486-a318-5f7487e3cce6.roa
Signing time: Wed 14 Aug 2024 17:28:36 +0000
ROA not before: Wed 14 Aug 2024 17:28:36 +0000
ROA not after: Tue 12 Nov 2024 18:28:36 +0000
asID: 54004
IP address blocks: 198.89.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e0:24:fb:c8:bf:63:0f:82:d8:cf:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Aug 14 17:28:36 2024 GMT
Not After : Nov 12 18:28:36 2024 GMT
Subject: CN=7c4b93f3-37d3-4a5f-a7a5-614c2a71f62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:8a:51:eb:ee:20:77:08:02:94:24:08:16:
ee:f1:80:ac:b3:79:2e:cc:29:c3:84:70:f1:6a:dc:
21:67:6a:fe:6b:1b:13:fb:e5:4c:88:c7:f7:a1:5a:
8a:4e:67:12:af:8f:73:3b:af:08:bb:37:2b:dc:f0:
98:b2:52:02:3c:81:78:6c:ed:33:8f:d4:90:99:c4:
c8:e7:76:30:b9:19:36:7c:d5:ba:3b:aa:02:3d:7d:
73:92:fa:23:d6:04:e7:6b:1d:ad:79:4a:fb:09:63:
b7:80:f4:96:92:69:9b:3f:51:08:36:74:96:b0:9d:
5e:f1:ca:a4:20:7a:df:ff:4a:bb:2b:45:2d:0f:8d:
5b:02:da:4a:11:1c:a7:46:24:64:76:5d:b1:08:26:
2c:2d:84:c9:2f:f3:2b:0b:d9:de:f2:0b:aa:ff:a8:
a1:9f:3d:4e:73:2e:d2:1d:a4:59:92:e3:9c:a7:1f:
46:c9:78:ee:da:f3:99:83:52:fd:06:67:d1:aa:8e:
2a:85:8e:76:9c:fe:f2:e6:8c:99:97:98:70:2f:64:
ce:cd:f6:c2:c6:07:85:aa:46:fa:4b:55:b7:de:fb:
da:76:52:ed:77:ee:37:75:71:5e:8e:da:8e:28:e2:
34:ca:cc:db:97:cc:56:d7:63:e6:f1:33:3c:46:e1:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BD:7D:87:1A:8F:02:B1:39:2B:32:59:FE:95:8A:7B:B7:54:50:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9532c438-fd2b-3486-a318-5f7487e3cce6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
198.89.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:67:dc:f3:e0:60:10:05:66:6f:59:e1:53:ad:1e:dd:74:cf:
24:2a:40:0c:3c:02:56:e1:91:0b:05:b3:a8:f9:d2:94:76:ca:
e8:4b:28:81:15:c4:88:5a:53:2e:a4:b7:47:ae:7c:30:ab:07:
9f:59:a6:e3:d6:2d:cc:27:38:cd:4e:b1:72:41:9b:c8:da:f2:
fb:d8:10:bd:2b:d2:ca:0e:45:75:f0:3c:f3:e1:e7:88:80:8f:
6c:b9:22:8e:e0:3f:2d:19:fb:18:35:f6:f9:01:82:02:0e:fe:
e1:df:8d:89:b5:f5:32:6e:0f:b3:68:7c:2b:73:a0:50:d5:11:
8c:a5:89:d4:f7:24:02:cc:e0:6f:b6:7d:31:c9:36:ff:ad:a8:
ef:1f:66:82:f8:cd:9c:b1:4d:06:54:42:8c:2c:46:97:e0:1c:
34:c1:50:23:68:a2:d3:62:5b:56:72:ff:aa:68:77:e5:44:db:
ea:4a:5b:16:b2:ff:db:98:f4:ea:6a:a0:52:94:da:fe:11:35:
3a:17:36:35:e6:20:e3:9d:2c:93:5a:68:c2:8b:c8:e0:4f:8d:
f3:76:20:e1:9b:84:27:00:66:48:70:71:c7:c0:c7:2a:cd:0a:
cf:1b:05:18:90:00:db:ec:c4:f0:34:45:48:a0:f6:38:73:39:
73:34:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:37 2025 by rpki-client