Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89258964-df30-3ba9-80b7-e763176db26e.roa
File: 89258964-df30-3ba9-80b7-e763176db26e.roa (raw, json)
Hash identifier: Fyiw7ezlgDTvmcvcmnv5/TyFIXZqkx9tEs04jLoc/E4=
Subject key identifier: B0:03:05:52:35:9E:9D:87:5B:55:C7:78:79:44:53:2C:66:59:CF:C4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858474C80DC149BDD17034668DCE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89258964-df30-3ba9-80b7-e763176db26e.roa
Signing time: Sun 22 Sep 2024 13:00:40 +0000
ROA not before: Sun 22 Sep 2024 13:00:40 +0000
ROA not after: Sat 21 Dec 2024 14:00:40 +0000
asID: 16625
IP address blocks: 96.17.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:4c:80:dc:14:9b:dd:17:03:46:68:dc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 22 13:00:40 2024 GMT
Not After : Dec 21 14:00:40 2024 GMT
Subject: CN=a2bf6518-ab15-4f12-866d-e763af7833e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:7f:23:30:0d:b1:b8:8c:b0:9d:c7:fc:3f:
a6:5b:91:6c:3d:54:48:b5:92:e6:ab:f9:5d:27:fa:
17:b1:52:75:d3:02:9a:e5:2d:68:32:fd:7d:03:d9:
48:ba:61:fe:d4:f2:b5:92:26:de:68:cd:7c:75:91:
8e:47:58:b8:de:ad:87:7a:96:7b:df:97:6e:30:eb:
f2:d0:6a:ec:4f:46:28:24:a5:41:e9:69:59:d6:0e:
5f:35:71:23:a5:78:c6:55:64:a5:24:2f:d7:5b:1c:
99:85:07:8f:1c:8d:a4:96:9e:73:81:ca:c4:5e:cd:
b5:fc:fb:4f:f6:2b:94:64:80:19:6e:66:c8:08:76:
ce:d8:a5:47:0f:a0:8f:c0:95:95:75:70:8f:f6:a8:
17:e3:12:b4:1c:15:c8:c1:cf:7b:d5:26:31:37:7d:
f7:bd:f7:22:3a:35:5d:14:b0:6c:53:2c:e9:2b:22:
f6:b4:9b:31:95:80:77:6e:fe:e3:0a:6f:ae:b2:14:
c9:1a:dd:2b:a0:57:f8:e9:a5:51:0d:bc:0d:ea:42:
f1:63:1c:14:c6:81:f9:2f:92:69:9c:22:a4:6b:34:
80:bf:66:65:63:5f:57:a3:e4:aa:c3:d5:b1:2e:00:
5e:ec:49:5a:ec:de:4a:4b:fb:28:79:05:63:7e:aa:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:05:52:35:9E:9D:87:5B:55:C7:78:79:44:53:2C:66:59:CF:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89258964-df30-3ba9-80b7-e763176db26e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:84:20:d9:b1:6e:44:b7:83:fd:08:86:39:e4:a6:1c:59:f7:
8a:f5:d7:96:f4:86:88:b3:c7:54:1f:00:3f:42:c5:50:d5:d2:
05:64:8f:09:80:aa:39:83:64:bb:4f:65:a2:95:1b:7f:9a:da:
07:45:75:24:54:b9:e0:b9:49:c1:5f:66:26:5f:5c:b6:25:6c:
40:f2:7e:26:f3:7f:e8:ac:45:8d:ab:6c:71:3c:4a:9c:d0:0c:
65:1b:04:98:d0:ee:ea:08:83:7c:e0:be:06:79:92:ec:f4:8b:
90:e1:2e:8b:d1:fe:b0:ef:ab:9b:27:8f:fd:2f:b9:b6:a8:fc:
00:23:f0:c5:58:88:fa:41:cf:db:91:25:9b:f2:d2:be:12:12:
86:f6:22:a3:0a:3b:6f:10:49:b6:e6:28:47:7d:a8:9f:6e:ac:
0d:81:4d:f6:75:b7:ed:bc:75:80:bc:65:25:de:d4:65:63:ea:
96:1a:9d:a5:8d:dc:a8:33:21:38:1e:d2:b0:c1:77:33:15:43:
98:ec:f7:d7:87:c5:7b:bb:d0:c1:1a:19:8f:c7:a0:cc:6f:f3:
ee:66:e8:9f:1a:34:ae:c8:a6:60:bf:50:63:89:ec:6c:b9:cb:
23:37:14:e4:11:a4:cc:a2:86:5e:a6:2f:39:c9:33:07:91:6c:
2b:8b:2c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:41:46 2025 by rpki-client