Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b521dd6-15ad-3824-b81e-6ac48c6f5b22.roa
File: 8b521dd6-15ad-3824-b81e-6ac48c6f5b22.roa (raw, json)
Hash identifier: ooAzTjbvzye/HniJFfKPsiOOXZSmcDZtm7Cv5vGoDJc=
Subject key identifier: 46:86:C7:7A:20:48:FD:E2:06:2F:74:FB:ED:F2:24:92:61:B0:CA:45
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424AFDD51873B4B0D0031F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b521dd6-15ad-3824-b81e-6ac48c6f5b22.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.33.44.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:fd:d5:18:73:b4:b0:d0:03:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=c35d5174-9845-4e30-8d54-66913437390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:39:86:03:7b:48:c8:ae:5d:41:34:f4:67:
5d:10:5f:5b:64:a0:72:c6:ec:02:b3:f3:f5:6e:a3:
18:86:ee:74:b1:cd:95:e9:71:63:d8:2a:10:e6:9e:
56:87:5e:84:dc:cd:5c:c2:61:bf:ef:32:e0:ce:a3:
f1:66:0e:5d:83:bd:42:1e:bd:5e:57:c0:d3:b3:1a:
ac:a1:7b:7f:54:b9:62:50:6f:45:9c:81:f5:2b:aa:
bf:77:5b:78:46:4b:ea:6a:e4:51:eb:ed:ee:b9:7b:
28:ac:1e:ec:38:02:a9:93:88:76:61:88:06:2a:22:
8c:77:c2:9c:0d:91:aa:88:1b:09:02:eb:9f:33:4c:
45:38:2e:4c:e3:65:58:ab:e4:8c:5d:a8:f2:f1:dc:
7c:fd:7b:a2:9d:2e:ec:3a:b2:04:39:d2:d0:ff:9e:
b7:4b:f9:e7:53:ad:ed:eb:62:aa:45:c5:8a:21:e8:
78:bb:6c:97:92:86:84:1f:d2:fd:a8:1c:08:5f:5a:
61:8c:3f:bf:3d:be:e0:e3:57:51:f7:24:bd:67:55:
d2:b5:c9:50:32:5c:64:05:8b:73:cc:7f:9f:c3:72:
01:7b:57:95:04:10:92:61:1c:25:69:5e:0c:20:b2:
7f:81:0a:a4:40:b9:dc:76:5b:9d:d8:32:b2:fe:66:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:86:C7:7A:20:48:FD:E2:06:2F:74:FB:ED:F2:24:92:61:B0:CA:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b521dd6-15ad-3824-b81e-6ac48c6f5b22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.33.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:40:6c:d7:5f:bb:9c:39:64:53:84:41:b9:a6:22:89:4a:fb:
97:cc:70:29:73:50:d0:49:77:08:3f:47:67:17:d1:9c:6f:11:
7b:7c:86:22:20:f0:5f:d0:0d:fd:d1:d6:39:a2:a4:96:2e:ae:
97:0c:e3:1c:08:ad:dd:a8:f6:ab:c7:46:4a:ea:33:5e:35:c8:
13:f3:a4:31:6b:af:91:3a:f0:99:a4:fc:16:58:d3:65:a0:d4:
e2:83:ef:0c:54:ab:5c:9d:a4:de:6d:47:31:ef:bf:09:ba:71:
8a:ad:41:00:82:47:d1:7e:86:61:ce:78:d4:b6:34:d7:77:f3:
3b:90:54:0f:0e:1e:26:67:04:de:07:76:3e:4d:87:5d:2c:59:
65:08:34:f7:2d:22:6e:b5:34:2a:9d:15:55:a3:b1:de:3c:cc:
03:cc:0d:2d:e9:7f:4a:80:de:1c:fb:3f:16:75:b7:8a:39:22:
da:96:55:66:15:99:88:94:69:ed:10:0b:6e:88:86:65:20:4b:
85:21:b9:c5:1a:fb:52:86:5a:a4:3a:2a:12:8a:51:5c:d1:de:
81:fc:9b:e2:0f:d6:b2:31:7e:50:f5:92:f7:ab:9d:ed:48:2b:
ce:ae:c7:ef:25:d8:d7:d3:76:64:5f:52:39:14:18:db:99:ca:
46:1e:18:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:52:09 2025 by rpki-client