Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3760f44-cf6a-367d-8db1-64bece4b18e7.roa
File: c3760f44-cf6a-367d-8db1-64bece4b18e7.roa (raw, json)
Hash identifier: QNVN1iS+Jkm3s+Q40/fRFONLHwD1E4JoO1mAy9tQR8A=
Subject key identifier: 7F:BF:CE:76:24:B6:54:15:EE:95:7A:76:37:E1:3F:39:4A:9C:8B:50
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424AFE10AF154CCBECF35B90
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3760f44-cf6a-367d-8db1-64bece4b18e7.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.33.52.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:fe:10:af:15:4c:cb:ec:f3:5b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=cb3fbfb1-b3af-4690-a059-b1520a2962ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:dd:96:28:d5:2e:f1:64:e7:fb:c4:4b:8c:
50:73:e2:7e:78:82:3f:32:1e:26:36:62:c1:9c:4d:
9f:05:99:b9:4a:9f:69:1a:cd:05:2e:0b:50:58:e3:
89:4a:d2:e0:5f:72:65:57:ef:13:63:5d:5c:1c:00:
21:ca:5f:ca:0d:5d:e7:8e:e3:d4:3c:c4:f5:ee:58:
f3:e2:31:b0:af:fc:3d:75:68:2f:24:77:21:ec:95:
8d:ae:33:73:89:aa:58:35:35:85:71:8f:46:98:94:
5d:53:6d:1f:5b:28:39:08:44:be:57:62:a6:69:66:
5a:20:18:32:81:2d:5a:7d:5b:ae:f3:45:b2:21:75:
38:ac:11:5d:1d:f8:f5:90:fb:f4:8c:34:87:56:26:
b3:56:e9:62:8e:6d:50:d0:b9:9a:d5:58:8d:0d:db:
8c:f2:3c:9b:9a:b1:95:e4:2e:5b:7d:a9:ab:05:11:
00:df:e9:5e:b4:be:74:04:45:af:3b:30:a1:e2:f7:
1b:e2:8f:1a:62:2f:b1:51:18:af:a0:d2:f8:1a:57:
99:bb:0e:5e:04:9b:51:a5:b2:0c:58:e5:7e:09:96:
c7:f8:83:a9:97:a2:dd:a1:bf:d0:cd:2f:a8:99:ec:
d3:fc:00:df:3c:e0:07:cd:0e:2c:8f:4c:35:bd:fd:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BF:CE:76:24:B6:54:15:EE:95:7A:76:37:E1:3F:39:4A:9C:8B:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3760f44-cf6a-367d-8db1-64bece4b18e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.33.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:af:48:cc:f3:2e:cc:d5:c5:e3:e3:83:2c:4c:2c:ed:38:15:
60:c2:c7:08:c7:7e:a6:ad:33:f6:b8:50:28:2f:5f:48:4a:8d:
bb:69:fb:1d:11:e7:2e:c2:80:c9:4a:d9:be:d9:82:db:0a:8e:
ad:c0:c3:56:00:48:5a:63:48:99:fb:1a:a4:90:ae:8a:2c:12:
f3:53:da:e0:55:e7:a5:01:03:bf:e3:32:f9:d0:d5:20:fb:b7:
0a:70:90:d1:d5:38:64:7a:30:35:27:4f:e1:b4:92:ba:40:de:
54:ca:7a:43:48:86:8a:14:64:4c:21:16:2a:3b:13:ea:87:86:
db:e4:e1:79:19:cc:65:c0:7c:4b:10:d3:33:9c:93:cf:09:48:
46:c1:80:40:03:e3:d3:ab:1f:f3:db:9a:2b:15:17:e2:dc:a1:
83:f7:62:fc:dc:75:41:54:d4:8f:89:6b:3f:47:ea:68:ab:e0:
4c:5b:9a:f7:ab:51:fa:16:ec:ae:7a:41:3e:90:c4:78:3b:97:
00:ec:51:0a:52:ba:4a:c5:86:16:c1:4e:5a:95:f7:4d:a7:27:
6a:aa:61:80:5d:5a:92:20:44:76:55:22:30:e0:42:5f:8a:24:
79:96:cb:a8:7a:3c:e8:06:b7:40:0e:f3:fe:20:f1:b5:13:7f:
ca:90:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:47 2025 by rpki-client