Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5ce0f511-9097-3d09-88b3-68f897035633.roa
File: 5ce0f511-9097-3d09-88b3-68f897035633.roa (raw, json)
Hash identifier: k/qrRmcA+wrhhxQLmC4vwVmHMglZoS9jSlZX6vloKoQ=
Subject key identifier: 64:49:DB:2F:0F:C9:97:E9:0F:10:BB:68:C1:52:0D:65:3C:BF:FE:48
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285843F3650871180C18D2EC6DCD00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5ce0f511-9097-3d09-88b3-68f897035633.roa
Signing time: Mon 20 Nov 2023 12:37:12 +0000
ROA not before: Mon 20 Nov 2023 12:37:12 +0000
ROA not after: Sun 18 Feb 2024 12:37:12 +0000
asID: 1239
IP address blocks: 172.98.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f3:65:08:71:18:0c:18:d2:ec:6d:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Nov 20 12:37:12 2023 GMT
Not After : Feb 18 12:37:12 2024 GMT
Subject: CN=6b5a15ee-09bf-4630-8a2e-265b99e27e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:a2:f2:f1:ac:4b:a6:25:cc:11:b6:fe:b2:
07:cc:91:08:8f:42:68:a3:ce:f3:ba:7f:c4:77:f9:
e1:9e:42:ae:1a:98:7d:a7:57:72:99:76:10:88:59:
16:83:e3:8f:90:b9:72:b7:28:c9:4b:80:43:bd:53:
6f:a2:38:66:a7:0c:18:37:3c:66:9a:b0:1e:9e:d4:
de:dd:99:3e:75:81:2f:9d:93:42:74:39:82:86:d7:
18:67:df:05:fc:44:09:e4:b6:08:f6:f5:66:06:d4:
62:58:b5:e1:bf:3b:de:61:be:90:98:24:9b:20:82:
9a:15:b2:f4:e5:f1:50:97:09:3a:7a:ab:fb:e1:6d:
7b:82:b4:aa:db:2c:b4:44:c2:17:46:4d:b1:46:7b:
de:05:29:d8:03:53:b2:ab:6d:61:23:67:f5:61:b2:
e7:1c:11:00:47:dc:af:3d:66:05:a3:37:07:26:e8:
3f:7c:7b:09:7f:37:c8:c6:5a:39:b8:8a:29:6f:5c:
77:37:f2:ee:73:38:de:38:d0:49:1e:46:3e:dd:90:
9d:2d:1d:6d:f0:85:e2:fe:21:82:c2:51:e8:57:7d:
9c:99:e6:65:a4:e6:94:1d:7d:70:54:a4:23:40:85:
17:d6:df:20:58:2f:15:d4:e1:61:61:d0:d6:f7:b4:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:DB:2F:0F:C9:97:E9:0F:10:BB:68:C1:52:0D:65:3C:BF:FE:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5ce0f511-9097-3d09-88b3-68f897035633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:f4:12:91:3c:d3:a1:47:d4:23:f6:d8:a4:fd:1c:a8:1c:47:
2e:a5:56:2d:3b:e7:8b:d4:b1:23:a6:2b:7a:a8:99:76:15:07:
4a:e4:6d:bb:1f:5b:fa:c2:7d:c2:ff:cf:60:8d:3d:93:69:a0:
e5:ae:53:36:23:6a:3c:e6:99:2c:e9:1a:c2:22:80:54:59:4e:
90:4b:42:95:bf:10:f0:96:8e:1f:90:66:f9:00:ca:1d:d7:62:
dc:23:dc:fe:03:1c:19:d7:9e:56:40:de:40:b7:a9:af:a1:a3:
fa:c2:20:b3:d4:6a:f2:ce:4e:72:7a:13:78:f6:eb:28:42:6f:
ed:7b:05:bc:99:12:3f:36:0c:54:67:8a:9c:8b:25:3b:37:b6:
75:92:74:54:3e:75:17:43:2d:55:eb:a7:a9:4b:f1:96:fc:43:
20:e5:ee:03:8e:43:aa:bd:25:c1:6b:f0:26:c4:8e:aa:ec:78:
6d:26:29:62:37:cd:c4:4c:7e:3f:c6:9a:67:8a:93:9c:0a:aa:
31:ce:25:cd:18:4c:e5:0c:bf:b7:0f:16:c0:9f:a5:d1:ab:b0:
35:a4:a8:5e:f3:c7:b9:d0:d9:ac:31:33:fa:d0:46:3c:20:3c:
bf:96:2c:9a:f1:fd:4c:2d:2e:14:43:68:56:38:f3:0b:b3:d3:
ca:57:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:36 2025 by rpki-client