Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2a985831-dd7b-3b07-8c53-e74309ba1aff.roa
File: 2a985831-dd7b-3b07-8c53-e74309ba1aff.roa (raw, json)
Hash identifier: XIKZnkFmXnq15N6vz3vdq6LKK7JaMil1LBqoVExoH7k=
Subject key identifier: 09:EE:6D:28:D6:BC:34:73:8D:A5:2B:2F:1D:65:F4:5C:1D:02:17:B6
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584312B477F05A03D3AAF0627600
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2a985831-dd7b-3b07-8c53-e74309ba1aff.roa
Signing time: Fri 01 Sep 2023 01:00:22 +0000
ROA not before: Fri 01 Sep 2023 01:00:22 +0000
ROA not after: Thu 30 Nov 2023 02:00:22 +0000
asID: 174
IP address blocks: 172.98.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:12:b4:77:f0:5a:03:d3:aa:f0:62:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Sep 1 01:00:22 2023 GMT
Not After : Nov 30 02:00:22 2023 GMT
Subject: CN=b6fca04b-ddc0-43ef-8b17-12e818837316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:81:7a:6a:8a:ef:e5:22:4c:d4:13:62:59:
ee:31:95:6f:64:24:c1:6d:d0:d6:55:f1:b0:32:b4:
4a:67:50:4b:4d:5f:dd:9a:67:16:a6:7e:80:72:ba:
33:a0:09:8d:7a:af:93:2f:49:de:73:38:7f:25:bf:
98:28:64:87:8d:a1:0f:55:4c:26:b0:51:23:92:81:
86:01:b3:ba:17:68:30:3d:e6:1b:89:12:73:05:b9:
8b:8d:be:84:f8:37:07:99:91:ba:0a:66:90:3a:1c:
34:c5:5f:97:35:ce:98:eb:b1:65:8d:c9:65:27:1f:
78:1b:f7:7d:f5:4c:44:f5:66:6d:30:4d:a6:e4:5e:
6c:fc:85:60:55:4a:1e:f0:df:65:77:b7:be:06:cf:
f7:ac:65:be:b4:eb:66:aa:e0:32:03:27:d2:73:49:
85:dc:8b:bb:13:7e:c8:16:f0:0f:64:ff:85:b9:49:
e0:b4:86:e0:6f:0d:21:76:28:72:6b:0c:ed:9d:61:
f0:c1:66:c1:21:df:4f:75:1f:31:6d:01:5e:34:c9:
f8:3b:93:27:dc:b9:99:71:b5:1f:32:5c:78:48:82:
f8:0b:26:36:79:49:4d:bd:89:12:3a:d5:3a:d4:b4:
5f:ae:61:c2:36:e8:a3:b5:58:62:13:47:9f:82:a1:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:6D:28:D6:BC:34:73:8D:A5:2B:2F:1D:65:F4:5C:1D:02:17:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2a985831-dd7b-3b07-8c53-e74309ba1aff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:59:3d:92:c5:bb:3d:76:81:59:87:13:0b:43:15:35:4d:0e:
1d:03:9d:2f:44:2e:9b:ca:ed:17:dd:d7:07:80:97:b6:be:b2:
77:84:3d:40:5b:ac:14:d3:f6:1e:61:37:05:37:23:5b:d1:dd:
69:34:75:1b:81:1c:98:63:53:e1:e5:cb:1e:03:46:88:e1:4d:
e3:f1:43:dc:50:8f:7d:cc:08:9a:c0:0c:bb:c8:d8:38:69:b8:
dd:da:50:72:1e:e1:a9:7a:41:09:c6:92:eb:c4:ef:74:11:8f:
a6:4d:dd:7a:f0:9b:12:d8:9e:3e:7b:ab:8e:52:e8:1a:57:f0:
c4:62:56:cd:cf:b2:4b:8f:62:69:cf:88:52:46:50:77:fa:55:
7f:68:06:2c:0c:cd:df:b5:b0:aa:ce:6f:1c:46:c9:28:84:dd:
a7:35:2d:24:96:72:87:72:2d:f5:13:ef:e8:aa:e1:99:63:09:
54:f1:16:78:8c:f2:55:6b:9e:d2:e3:5f:f3:23:ce:02:dd:de:
ad:b6:cf:c3:8b:57:a3:b5:0e:76:87:14:9c:47:eb:76:fc:7c:
e2:a6:1f:80:88:d9:9a:e0:57:fb:c0:ca:6f:df:1f:aa:10:22:
8d:fb:ab:18:02:b1:db:8e:f6:9b:ef:1b:c1:06:eb:7a:c6:ec:
2e:6e:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:55 2025 by rpki-client