Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aa61ab8-191e-3681-b226-b46822ae9b7e.roa
File: 2aa61ab8-191e-3681-b226-b46822ae9b7e.roa (raw, json)
Hash identifier: zLoCfkBVva4HJU7nb7TsdY03a95/LbDufPfHK3LWauo=
Subject key identifier: CC:17:6A:75:20:18:8A:FB:30:E5:74:F5:BE:5C:8F:08:DD:DB:C4:6C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424AFE3C1916755E92E17380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aa61ab8-191e-3681-b226-b46822ae9b7e.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.33.58.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:fe:3c:19:16:75:5e:92:e1:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=59f43fd2-87fc-4098-8d09-f828a4bf9141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:a1:51:90:13:de:38:bb:33:91:5d:7a:05:
7a:1b:d9:1c:be:04:c7:d2:bd:ee:ba:a2:8e:73:ea:
7d:38:02:43:e8:cf:57:92:1c:5d:fd:04:23:24:2b:
4f:a7:cc:aa:60:67:16:98:7c:4b:90:e6:ba:1e:de:
56:26:92:c1:82:81:e0:b0:75:2b:59:4c:9d:4a:44:
b5:f4:93:0a:86:e7:a5:22:54:66:58:40:e7:d3:7c:
21:46:6f:39:eb:6d:d6:ce:02:59:18:6b:23:08:c4:
cc:83:25:17:0b:91:92:3c:39:dc:dd:a9:40:ae:76:
02:30:af:e1:76:57:6c:13:51:4e:d4:bc:60:ed:5d:
6f:93:c9:03:83:de:b9:c4:3a:22:3a:bb:8e:92:c2:
e0:f2:40:89:4b:e6:92:0b:98:d2:44:5d:ea:0b:ff:
7e:48:6f:a0:53:f9:f3:fe:62:22:a3:96:8c:ab:c8:
e8:99:3c:23:c9:0b:c6:f9:8b:8e:75:8d:76:eb:de:
56:c2:6a:ae:ec:cb:f8:7d:f3:23:46:ed:02:00:fb:
3c:45:1a:e3:8f:b4:1c:b5:32:94:f8:fd:ae:7b:9e:
e3:e9:aa:97:4c:bc:cb:15:9e:8c:f0:2f:af:0e:af:
c1:46:5f:08:fb:7c:30:bd:10:7a:88:e4:66:86:07:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:17:6A:75:20:18:8A:FB:30:E5:74:F5:BE:5C:8F:08:DD:DB:C4:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aa61ab8-191e-3681-b226-b46822ae9b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.33.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:80:66:4e:d5:f4:71:95:73:0c:b7:5d:7d:c7:87:06:10:1f:
fc:cb:8b:03:2c:d9:27:40:d2:f0:82:20:79:a2:de:ba:7e:b6:
01:ab:88:c1:6f:71:e8:fb:ad:81:05:4b:96:88:6f:5b:ba:15:
5e:6e:9e:a1:26:47:5a:42:2b:8f:2a:9d:a9:12:a2:dd:c9:69:
e5:24:aa:59:79:d6:49:d1:75:52:3d:79:53:48:be:fc:e2:ca:
d8:86:ee:ca:7b:f0:61:27:82:79:0b:aa:9c:62:b1:42:b2:d2:
18:cc:4f:ad:af:a7:2c:ad:0d:1c:48:ee:1a:b8:4e:4f:b4:f4:
1a:06:6f:a6:c1:1a:da:34:91:92:a3:8b:8c:2a:33:15:fb:81:
41:2d:06:9c:8e:ae:23:d3:72:05:fe:6c:18:b8:88:fb:07:6f:
fb:6a:97:81:46:ed:be:1a:c4:ec:14:10:ec:ce:78:8e:3c:db:
0a:72:6e:a5:96:fd:27:7a:c2:66:5e:f8:78:60:d7:d6:d6:10:
d2:dc:3f:af:26:c2:e9:c0:29:fe:df:70:13:ed:31:7f:70:5f:
2d:0f:c7:55:8f:8b:d9:f1:e7:ac:ab:ca:72:d2:72:9a:19:8d:
aa:d4:ed:11:3c:6d:2b:25:05:d7:e3:0b:00:9b:9d:67:0c:bb:
36:bb:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:42 2025 by rpki-client