Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2f223e61-afb7-358d-89b0-01a811ef52c3.roa
File: 2f223e61-afb7-358d-89b0-01a811ef52c3.roa (raw, json)
Hash identifier: g++oQMLVqRrYOW5O+J3fRGPlEqphWCiJAl+obMC3vXU=
Subject key identifier: F0:93:28:07:C5:0F:F2:6B:D6:80:95:B7:D4:46:49:65:05:50:7F:B4
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584459744337B6B46E29D17CC800
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2f223e61-afb7-358d-89b0-01a811ef52c3.roa
Signing time: Wed 27 Dec 2023 02:00:15 +0000
ROA not before: Wed 27 Dec 2023 02:00:15 +0000
ROA not after: Tue 26 Mar 2024 01:00:15 +0000
asID: 1239
IP address blocks: 172.98.178.0/24 maxlen: 24
172.98.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:59:74:43:37:b6:b4:6e:29:d1:7c:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 27 02:00:15 2023 GMT
Not After : Mar 26 01:00:15 2024 GMT
Subject: CN=416d771a-c246-4b53-bd3a-df3f6e76b28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:d6:a7:c9:76:6a:2c:e8:89:a1:ac:b0:4c:
ae:59:c8:27:d3:35:24:e9:9c:11:88:b5:18:6b:e4:
a4:a2:2f:34:03:e3:4a:76:0c:a3:03:bc:78:38:8f:
41:33:c3:20:04:0d:2b:d6:f9:bd:38:cf:7d:fa:d8:
7d:05:d3:6e:53:dc:bb:ed:39:c5:a1:03:73:d6:25:
0e:a4:bc:f8:00:78:0a:78:fc:0e:d6:c2:3a:71:95:
e5:29:02:15:7f:22:9e:51:a8:b4:67:98:7c:cd:aa:
e3:91:14:b9:14:af:39:5c:ee:7e:47:e0:a9:e9:e6:
71:94:d7:a4:9b:fc:5e:0b:b2:4f:d5:b0:47:6a:66:
52:55:a3:ce:30:64:59:23:a6:4a:4d:74:27:22:d1:
dd:87:7a:f3:c8:e9:9d:d0:ab:91:ef:1d:8b:e6:cd:
fd:0e:8c:8f:d2:b8:7e:59:d0:87:70:97:34:d9:9e:
56:e5:57:be:48:d5:0d:61:2f:9d:a4:8b:0e:94:4c:
7f:81:bf:39:13:1e:f6:12:07:7a:f8:72:07:65:00:
46:5e:50:a6:d8:b7:3a:17:63:0e:29:37:56:59:aa:
3c:87:1a:99:b0:1c:4e:9c:33:3c:d3:3a:cb:58:d3:
39:dd:1a:94:cf:a3:89:84:9a:88:5d:14:15:d7:e4:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:93:28:07:C5:0F:F2:6B:D6:80:95:B7:D4:46:49:65:05:50:7F:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2f223e61-afb7-358d-89b0-01a811ef52c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.170.0/24
172.98.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:b9:ff:70:0a:45:7a:40:5b:b0:2f:d9:21:04:87:82:10:cd:
0a:59:04:cd:10:92:15:7f:cd:57:4c:bd:b8:93:0c:07:87:90:
8a:65:85:ee:dc:0e:ed:aa:05:7c:b9:f0:58:6f:65:53:1a:db:
3f:ba:da:34:67:af:61:f5:6d:ce:e2:d1:a7:da:86:27:93:8b:
f7:e9:0e:bb:24:13:2c:ce:07:ad:c9:40:eb:7d:a6:8c:c6:f0:
f9:5c:7a:7c:a1:db:a5:14:9e:76:32:26:d0:1f:17:41:93:91:
43:48:b3:40:e5:39:79:74:54:05:73:cb:de:7d:53:35:70:36:
2c:53:be:58:5e:8e:52:75:bf:b5:e5:95:92:f3:d6:eb:95:9f:
be:1c:e8:bb:c2:ba:19:d3:27:5c:63:04:0f:b3:a2:57:10:ef:
d5:61:42:fc:62:06:53:c3:95:34:36:4f:46:8b:01:d9:4e:bf:
42:b1:8b:8e:50:1a:17:8d:af:71:47:fc:e7:33:32:c1:0b:41:
ed:04:63:c3:97:2a:8d:c1:15:41:d6:24:a0:87:e4:88:fc:e0:
8d:a7:e2:b3:46:33:d5:a7:ae:3c:6d:ac:80:9d:98:cf:a3:e0:
cf:be:95:d2:2f:b0:b0:b6:b2:9a:2c:91:ef:5a:0d:55:f2:4d:
c4:fa:53:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:12 2025 by rpki-client