Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be6b413d-f802-362b-bd51-fc10fac624b1.roa
File: be6b413d-f802-362b-bd51-fc10fac624b1.roa (raw, json)
Hash identifier: xBNCNk+BWQg6e5uXyXv74zOzleSbPll6JO7Dyw8E2+k=
Subject key identifier: FF:AF:45:F7:B4:BE:5E:D2:9F:C6:25:E5:62:03:6F:08:AC:11:41:71
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584802B7804450B544EB7655D260
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be6b413d-f802-362b-bd51-fc10fac624b1.roa
Signing time: Tue 26 Nov 2024 19:28:14 +0000
ROA not before: Tue 26 Nov 2024 19:28:14 +0000
ROA not after: Mon 24 Feb 2025 19:28:14 +0000
asID: 16591
IP address blocks: 99.198.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:b7:80:44:50:b5:44:eb:76:55:d2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Nov 26 19:28:14 2024 GMT
Not After : Feb 24 19:28:14 2025 GMT
Subject: CN=ef2babf2-19d8-45be-b2bf-458d635dd210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:e6:45:38:b6:af:3e:5c:be:eb:45:5d:b1:
46:af:db:cd:07:1b:79:9d:38:47:c2:dc:03:1b:64:
fd:37:44:5b:4b:af:85:10:9f:f8:26:bc:33:3f:cb:
cb:d6:18:fc:47:a2:6b:4d:ad:06:03:14:f4:86:77:
ce:ff:56:a5:f7:3a:f6:78:b7:a4:da:61:78:8c:60:
22:10:bb:e2:8d:49:9a:13:a8:9a:bf:71:4f:ee:19:
cc:47:3e:2d:a9:f3:a1:c7:a5:5a:0a:fb:3b:3e:08:
33:92:34:6e:51:fe:2d:f0:67:9f:a8:3f:4c:c5:70:
da:d2:70:e8:dc:42:2e:3b:ea:21:12:11:bd:1d:63:
1f:d2:2a:d0:76:29:3c:a0:71:ab:7f:92:73:30:63:
d4:a5:15:22:46:20:5f:c6:1f:1c:57:f9:64:02:9b:
9d:72:01:a8:7a:6b:51:7d:c2:83:25:f8:da:e7:ea:
ea:18:6d:41:de:4b:a5:aa:04:c7:e3:c3:70:05:b9:
a7:b8:a6:c6:f3:d6:fa:b9:88:f2:01:54:d1:13:7d:
00:0b:60:af:4f:64:e9:52:ef:42:4e:70:2f:d5:b8:
f4:1b:a9:5c:04:77:92:b2:36:b9:2a:27:58:5f:c2:
2b:b3:e3:84:ef:5c:df:c7:3c:33:95:28:28:cd:82:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:45:F7:B4:BE:5E:D2:9F:C6:25:E5:62:03:6F:08:AC:11:41:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be6b413d-f802-362b-bd51-fc10fac624b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:e9:a1:85:bb:64:f7:7c:73:50:22:7e:d1:82:79:7f:8b:12:
15:3f:1f:d3:3a:eb:41:2e:38:e4:34:c9:a1:cb:09:8c:6f:30:
76:0d:13:de:79:8e:07:9e:53:d7:aa:9f:1e:da:4d:5c:a5:5b:
2d:b4:70:dc:6c:88:f0:71:96:32:03:cc:fd:c6:35:a1:b6:bd:
55:bd:d8:4c:7e:9d:47:28:dd:8c:fe:df:04:fe:e6:40:12:94:
e8:f9:b9:0b:fc:c1:97:8a:4b:fc:83:a5:d4:a0:ba:b7:f7:9a:
5d:47:a3:f0:37:bc:77:7f:15:12:f5:80:27:88:a9:9b:c8:7f:
38:20:93:6c:9a:0c:b3:2b:62:e3:4a:bf:6f:e4:06:71:4f:7f:
9d:e7:7e:80:b0:ea:2a:94:b9:da:19:73:cf:40:8a:55:02:7b:
de:08:68:10:ec:05:10:91:18:fa:06:8d:41:9a:64:de:bf:ab:
f4:61:bf:45:43:bc:59:41:10:bf:7d:c5:5a:fd:a5:9d:b5:3e:
c9:91:95:5a:32:1b:2a:ed:6e:f7:b0:29:fd:e9:30:2c:93:30:
8d:5e:0e:7b:70:9e:b2:07:a0:d7:c4:ad:7a:33:bc:2c:6d:86:
38:9e:5f:5a:9c:63:c3:31:d3:cd:80:4f:5b:6d:52:04:ee:fe:
b9:5e:05:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:32 2025 by rpki-client