Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7bf35fb3-66f4-3aea-91b5-7a492ced52f7.roa
File: 7bf35fb3-66f4-3aea-91b5-7a492ced52f7.roa (raw, json)
Hash identifier: YITJM4QZtoOgUQGpJhoGVa1UZ6qfdC8ujun8+yJBZpE=
Subject key identifier: 63:6F:B7:33:D5:BF:0D:53:BE:F5:AF:77:EF:4E:EC:87:05:CF:44:E6
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584851A577E80D789209D9233480
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7bf35fb3-66f4-3aea-91b5-7a492ced52f7.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 1239
IP address blocks: 198.145.97.0/24 maxlen: 24
198.145.98.0/23 maxlen: 23
198.145.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:77:e8:0d:78:92:09:d9:23:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=f23b5a5d-a616-45d9-8fdd-9c78b819097c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:5b:bb:bb:aa:31:77:af:fd:1a:f2:b0:2b:
62:ba:07:52:86:b6:00:07:b3:cd:1c:0a:f8:2a:75:
b3:17:a1:4a:7a:65:93:13:7b:5c:f4:e0:c6:55:8b:
e4:18:1b:fc:06:e0:1f:fc:82:99:0f:07:44:ea:37:
ae:c2:99:0f:33:44:b8:90:80:b6:20:6f:f0:b3:6f:
69:28:cd:2e:c2:5a:f4:d4:74:08:72:55:05:6a:00:
f4:96:38:65:0f:1e:f4:38:18:c8:99:7f:29:1b:b3:
3f:0a:42:ca:c1:fa:6f:72:e2:aa:27:79:71:8c:76:
97:b1:e7:c6:ec:fb:9b:0b:72:d3:e3:c1:87:56:0f:
05:77:53:67:c2:c5:75:97:03:f5:e5:de:47:4b:a2:
af:62:c1:c2:7f:3e:d3:b1:05:b3:b2:21:fa:2e:20:
ee:49:fa:4d:30:0b:d1:9e:78:72:80:79:a6:94:97:
e9:4d:54:0c:e1:a3:90:60:79:34:2e:11:ce:31:d5:
41:7e:3d:14:db:fd:cc:96:08:7e:bb:70:49:7f:bf:
a2:be:ff:14:f4:60:74:e4:4c:f8:f8:0e:ed:6b:89:
32:c6:15:7e:2b:64:5f:75:ac:78:db:fb:7e:21:69:
75:cb:10:ee:bc:b3:1f:78:ae:a4:66:44:66:51:97:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:B7:33:D5:BF:0D:53:BE:F5:AF:77:EF:4E:EC:87:05:CF:44:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7bf35fb3-66f4-3aea-91b5-7a492ced52f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.97.0-198.145.99.255
198.145.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:d4:03:c8:9a:ea:35:3c:b9:26:1b:83:f9:6b:9a:05:88:63:
35:1b:45:cd:49:eb:b6:29:19:f5:a0:36:0f:41:24:bf:53:4e:
2d:5c:7a:38:a8:59:e6:f8:0b:b2:2c:42:fa:67:48:98:c5:f1:
9c:80:1a:bf:0c:1c:b2:ad:20:81:1c:76:96:8a:b4:d4:fb:8c:
c0:4d:1b:a2:77:c6:78:b6:bb:f9:b2:82:98:60:50:ca:08:3c:
fd:a6:56:7f:f6:c3:45:bd:91:98:17:cf:00:2c:cb:fa:74:29:
96:d7:23:fc:ca:e8:01:e2:60:23:c8:bd:30:0b:c0:cf:14:53:
aa:c1:aa:13:16:b5:15:29:9a:1c:e1:f9:a1:a5:17:a0:7c:9b:
02:2c:f6:ef:e8:9b:a1:29:b1:43:93:9b:da:99:73:4e:a7:0c:
8f:d3:c0:b6:65:85:81:f9:5c:54:a4:d4:f3:42:25:c2:08:4f:
24:d1:51:7e:a1:0d:54:72:7b:ea:e7:22:8e:ad:44:02:7c:2f:
7d:b1:b8:22:d2:fd:b2:8e:a8:96:fb:05:04:68:57:06:77:52:
32:2f:d9:f8:10:27:b1:63:6c:98:b9:7e:ac:7d:38:22:a4:f3:
6c:3e:ce:f6:e7:70:20:c2:ad:a5:2e:77:04:a3:ae:27:ff:de:
7d:5c:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:40 2025 by rpki-client