Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/69e4ac75-aa05-33e4-a32f-9849b89f398b.roa
File: 69e4ac75-aa05-33e4-a32f-9849b89f398b.roa (raw, json)
Hash identifier: K8j1az1yW7Lxy7a3o3sPIKAqFkUkkEVog0joLSeYDQI=
Subject key identifier: B3:91:3F:50:29:A1:E0:BE:E2:31:FB:43:1C:F3:62:DA:90:56:AE:A2
Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd
Certificate serial: 010D0C9F432858425091E4110E920215909AC100
Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/69e4ac75-aa05-33e4-a32f-9849b89f398b.roa
Signing time: Fri 23 Jun 2023 12:03:53 +0000
ROA not before: Fri 23 Jun 2023 12:03:53 +0000
ROA not after: Thu 21 Sep 2023 12:03:53 +0000
asID: 16509
IP address blocks: 198.38.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:50:91:e4:11:0e:92:02:15:90:9a:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd
Validity
Not Before: Jun 23 12:03:53 2023 GMT
Not After : Sep 21 12:03:53 2023 GMT
Subject: CN=fc991ca8-aebb-4c1b-be35-f8dd1c747b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d7:a6:b6:bd:6b:1f:f6:3f:15:0a:91:f9:9b:
26:4a:55:f9:5b:d8:fc:4a:49:92:3d:37:b3:ce:96:
fb:0b:2d:e1:c2:4b:e4:8e:26:af:e3:13:c7:ed:65:
42:a8:d9:02:77:20:91:f2:cd:b1:59:39:fa:75:cc:
7e:2c:9c:da:ec:26:9f:ce:7e:da:02:88:bc:0d:c2:
71:59:8c:99:5e:69:47:90:52:57:75:bf:37:e8:7f:
40:61:b6:10:92:37:28:ba:79:86:70:d0:7c:d2:32:
09:3d:3b:37:4b:8c:ee:12:ac:3d:7e:85:29:21:e2:
15:67:38:28:07:f1:61:5d:41:0c:8a:40:a8:85:f9:
ce:f5:b3:9c:ff:64:0a:ef:eb:fa:8e:5b:ec:30:0b:
e0:76:d4:57:7d:ac:8f:64:31:8f:b7:17:82:79:19:
47:60:cd:0f:16:7c:57:c9:db:80:ed:13:6d:03:75:
bc:2d:83:df:a8:ae:50:41:54:a8:dc:37:8a:52:5d:
94:f7:2f:87:00:f2:5e:32:0c:bf:32:44:ce:04:3a:
62:4f:dd:3f:d1:37:57:5a:06:ba:13:73:e7:32:26:
41:8e:47:0b:6a:6c:14:b1:4a:e7:f7:26:90:05:79:
0e:b6:e3:5a:83:ba:d6:f3:79:74:f5:27:6a:5f:d3:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:91:3F:50:29:A1:E0:BE:E2:31:FB:43:1C:F3:62:DA:90:56:AE:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/69e4ac75-aa05-33e4-a32f-9849b89f398b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl
X509v3 Authority Key Identifier:
keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer
sbgp-ipAddrBlock: critical
IPv4:
198.38.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:b2:15:ca:0d:d0:1e:99:a5:40:e7:00:c8:8c:89:d4:01:32:
93:d4:8b:28:6b:34:d6:82:eb:96:df:d4:78:30:e5:82:a3:c2:
c7:26:85:7a:0e:64:0f:2d:bd:1e:72:91:74:52:6b:ea:08:1a:
1a:ea:fb:ed:86:3a:f6:9f:d8:4a:db:71:b4:ef:5a:65:e6:14:
74:ac:d2:f6:a9:4a:74:ae:aa:3a:44:51:2e:2c:dd:81:24:b5:
99:46:65:e6:7c:39:4f:47:4e:52:6a:e2:a6:a9:39:70:fc:23:
1b:af:a8:36:08:c9:8c:16:45:15:fc:7c:aa:d5:04:c6:a6:39:
6f:11:d2:00:d3:cf:b5:3f:13:3c:4f:d3:18:b0:d0:f8:9b:a3:
ed:25:0a:9b:d3:73:27:37:2d:cd:a2:af:a4:10:24:3b:e1:44:
22:26:bd:d9:84:d7:de:9f:67:c5:8f:7b:bb:1f:69:d0:dd:93:
25:c1:b0:67:9c:bf:46:28:31:e3:e0:1c:43:c4:10:e7:e9:84:
1a:03:86:f4:3e:30:f4:2c:df:8a:a6:a5:05:1b:f4:8c:47:8a:
97:37:1b:6d:d7:14:b5:b7:60:62:c3:dc:6c:69:71:2c:c3:e5:
21:c8:6b:58:4f:5d:f2:a8:e3:48:3f:33:9e:08:d1:99:d6:6c:
52:2d:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:46:26 2025 by rpki-client