Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7041d83c-326b-3c3c-9a32-8d1c1dfccdad.roa
File: 7041d83c-326b-3c3c-9a32-8d1c1dfccdad.roa (raw, json)
Hash identifier: YqtZT3z2ghR2Kpv4ChoUXxFn7aTx0ekwAeEBlDlrTsI=
Subject key identifier: 47:CE:1E:1C:80:AC:C1:00:D4:AF:7C:46:BA:20:B7:E2:BB:39:3B:18
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285842335DBD8DB6CF6D4F364F3F80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7041d83c-326b-3c3c-9a32-8d1c1dfccdad.roa
Signing time: Tue 13 Jun 2023 01:00:17 +0000
ROA not before: Tue 13 Jun 2023 01:00:17 +0000
ROA not after: Mon 11 Sep 2023 01:00:17 +0000
asID: 33083
IP address blocks: 172.98.170.0/24 maxlen: 24
172.98.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:33:5d:bd:8d:b6:cf:6d:4f:36:4f:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Jun 13 01:00:17 2023 GMT
Not After : Sep 11 01:00:17 2023 GMT
Subject: CN=ad906c93-fbc0-49d9-bb9d-5ac8c597de20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:cb:e8:48:8b:c3:13:3e:0c:18:ed:4f:18:
17:c4:4b:b9:0a:4b:15:a7:3e:a8:2a:cb:35:31:31:
24:8c:73:46:f5:52:6a:97:a4:9c:ce:62:68:93:02:
94:d0:01:37:6a:a7:d4:02:87:bd:49:1f:9c:ad:de:
fc:fe:51:b0:ba:41:6d:0f:5f:a0:c9:ac:ee:d7:83:
36:dc:02:dc:9d:00:15:3b:e0:a3:8b:86:b8:be:8b:
a6:2c:7c:aa:a0:b9:44:14:37:e3:f5:e3:f9:a9:06:
03:c1:d1:26:42:f4:aa:d3:b7:f8:e2:bd:2b:ea:bd:
19:18:3c:10:eb:0d:70:73:84:3f:38:68:21:3a:54:
0f:c0:23:c7:c9:b0:97:87:2f:91:16:54:67:64:68:
b3:18:e9:45:ff:47:ff:6b:b8:28:4b:5f:46:bc:16:
c6:5b:03:b1:71:cf:3a:2e:bb:03:4f:6f:4f:14:22:
d8:a0:06:eb:75:e9:66:d8:a6:c4:3e:00:93:b7:9a:
75:57:25:1f:43:ff:07:47:a7:27:af:c4:8c:cd:4c:
da:7a:1d:f1:96:0b:e3:83:49:7f:f9:10:c9:75:d7:
15:22:0c:f8:72:35:9c:e4:a5:d3:7a:8b:ff:d5:e4:
4c:ac:0d:a8:bc:92:64:53:f0:74:e6:42:55:6a:f8:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CE:1E:1C:80:AC:C1:00:D4:AF:7C:46:BA:20:B7:E2:BB:39:3B:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7041d83c-326b-3c3c-9a32-8d1c1dfccdad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.170.0/24
172.98.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:fc:8a:74:16:99:66:ac:6a:e3:b3:fa:96:76:8f:5f:ac:e8:
e4:1d:40:d0:8b:1c:15:d2:27:20:3e:2b:d4:88:29:dc:95:7d:
51:52:da:0d:a1:7e:18:68:18:af:97:73:37:6a:cc:79:1f:aa:
d9:0a:7a:46:70:38:f3:69:78:8d:05:3a:48:ae:89:f1:59:28:
1d:6a:85:ba:c3:1e:54:13:3c:9f:7c:71:dc:10:0b:e0:2a:b2:
ad:5f:8c:e3:08:24:65:3b:95:b6:01:11:ca:d8:cd:94:3b:f6:
96:cf:59:c9:49:41:da:4e:a6:a6:74:8f:c7:65:c8:ea:26:1b:
0b:1d:9d:e8:58:fd:a7:b5:0b:5d:e4:62:3f:6e:42:47:db:80:
c0:7e:a1:e3:ec:37:42:18:c3:9d:e8:53:05:c8:2f:dc:5f:1e:
b3:a7:b8:b4:66:85:f9:f4:4b:53:07:4f:15:14:ff:fc:9c:1c:
ed:41:66:d7:77:0f:f0:86:bd:e9:94:8a:6c:db:43:c5:39:43:
5b:8d:d5:4c:80:69:96:b8:0e:9d:0a:80:a8:ed:38:cc:60:d2:
64:e0:2c:c8:b8:e4:7c:64:a4:d7:9f:fd:5c:37:89:a2:a4:de:
82:26:6a:eb:d1:42:07:26:a6:c7:7d:e8:2f:5d:39:c9:ba:53:
1f:d0:4b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:21 2025 by rpki-client