Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39bb077e-5193-39ad-89fb-685afa6a684c.roa
File: 39bb077e-5193-39ad-89fb-685afa6a684c.roa (raw, json)
Hash identifier: QCUxSVTJtZ3L2z9CBtq0CUfUzFCFhJBhKQAC1TA0+rw=
Subject key identifier: 63:66:CA:5D:4E:7A:DE:E8:7A:D2:86:FA:11:4B:AE:9B:57:46:9D:13
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424AFE47FB8C82A622A99BA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39bb077e-5193-39ad-89fb-685afa6a684c.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.33.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:fe:47:fb:8c:82:a6:22:a9:9b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=1c64488e-4da9-4e6a-b1e3-250b739b8da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:d1:43:41:e5:2f:66:93:4a:ba:09:3c:e2:
1a:ae:a2:7d:34:cf:32:75:9c:b8:aa:1e:0b:09:fb:
72:e8:31:4c:c5:a5:08:16:a4:fe:45:f4:4d:73:fa:
82:ed:c1:d8:8c:45:4c:0c:8f:73:2b:8e:20:a4:d6:
82:cb:0e:2c:25:54:4e:8a:20:88:cd:66:78:dd:d0:
d8:aa:57:cc:12:eb:01:dc:d9:9c:a0:1e:9f:7c:96:
4a:ef:9c:01:40:34:6b:70:ac:7e:dc:84:c9:2b:16:
ac:6b:93:8c:61:31:60:92:2f:fa:8b:89:38:e2:0b:
95:e5:9c:14:e5:f9:96:7d:e8:06:e3:02:b8:05:19:
b4:c5:17:74:9f:a0:66:1d:29:f9:24:25:47:d5:3f:
16:2b:ac:d6:8f:b8:f5:fc:da:ee:d7:6e:2b:ca:4f:
d0:f5:12:36:6a:6e:76:4e:10:d3:fb:55:f2:84:d0:
36:68:21:c3:d6:f2:c6:78:5d:2a:89:d8:49:4c:57:
2e:d5:cb:ba:6f:48:97:26:fc:4c:b4:d0:da:9a:0c:
0e:9c:51:d2:23:6c:64:b5:79:79:58:d1:62:d5:00:
8c:1e:65:65:a4:3a:08:8f:93:e3:86:d8:ed:ae:17:
17:f3:82:77:54:4f:aa:1f:94:8a:85:8a:de:f9:bc:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:CA:5D:4E:7A:DE:E8:7A:D2:86:FA:11:4B:AE:9B:57:46:9D:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39bb077e-5193-39ad-89fb-685afa6a684c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.33.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:85:36:8b:e2:12:b9:92:69:df:9a:07:09:e4:c1:71:4b:a3:
c2:74:eb:eb:b5:b6:34:b8:1e:cb:5f:0c:a0:1e:e6:a6:f5:0e:
01:e9:3d:d2:3c:0c:42:1d:03:83:44:09:ae:08:7e:be:1a:b5:
71:0c:81:52:4f:02:6e:df:eb:37:90:f5:de:cc:e6:a8:75:fe:
17:4f:1b:ad:be:fa:07:b3:b1:7d:ba:df:6d:99:c9:b9:55:56:
38:a3:04:8e:a9:40:0d:52:ce:aa:fb:0f:db:2b:a3:a0:17:50:
33:f0:71:93:5e:57:fd:2a:c6:da:62:a8:53:a5:32:35:46:f2:
6e:cd:72:5e:ee:9b:8f:5d:00:93:43:36:fe:6f:4f:33:01:12:
48:9b:47:5f:0c:0b:00:ec:5b:ae:29:f7:a2:0b:ae:99:4a:2f:
36:8a:27:d0:02:c9:ad:e4:89:b1:ca:1b:48:3f:d2:89:e0:cf:
66:d4:72:25:12:00:a6:30:30:92:49:0f:21:4e:45:65:bd:b0:
63:18:42:84:f7:77:64:20:69:6f:a4:d2:e2:dd:b9:e0:db:27:
4e:75:88:ac:3e:42:00:54:6a:1f:03:0e:27:a6:0b:80:90:45:
7f:83:8f:95:e0:9e:a7:f5:6c:7f:72:d7:6e:40:82:4a:ec:d4:
e1:25:85:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:36 2025 by rpki-client