Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5a6bda3-9bd6-30a0-a8b0-27b596da928b.roa
File: e5a6bda3-9bd6-30a0-a8b0-27b596da928b.roa (raw, json)
Hash identifier: twpsnGW7cSV3yWBVFkYFDcezkng64IGkf/1ixC8er6M=
Subject key identifier: FA:68:9C:30:B9:32:ED:D9:02:13:F7:5D:D2:2E:03:2C:86:61:DA:62
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424AFDFF603086F1ECDE8680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5a6bda3-9bd6-30a0-a8b0-27b596da928b.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.33.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:fd:ff:60:30:86:f1:ec:de:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=ab28116f-20ec-4f5a-b2d8-e10072c36932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f6:0c:ef:2f:81:e4:0f:8b:7c:69:e9:f9:b1:
e6:c9:9a:d7:22:c3:bd:e7:4f:4b:40:22:5f:b0:0e:
92:3f:77:b3:10:aa:10:51:11:36:5a:b6:83:12:39:
6d:27:32:d3:9f:24:47:20:92:f5:78:75:30:b9:21:
2d:5b:76:87:f8:05:ae:96:55:19:6c:3c:bb:2a:15:
60:dd:88:43:3e:68:8f:b6:b4:63:ef:71:f3:47:08:
9c:3c:c1:63:1d:68:49:ca:9d:cd:e4:fd:62:5e:15:
bc:92:52:5a:ef:b3:dd:71:83:19:5f:a5:db:05:9f:
e7:90:12:71:6f:10:50:8e:c0:f0:d4:dd:73:5a:0f:
b2:1f:75:dd:88:2c:b2:3e:0e:90:8f:ad:a2:91:f3:
6b:a8:46:08:a8:fa:32:56:0c:0c:96:f8:56:88:45:
50:12:34:44:da:05:e0:8f:82:ea:71:d7:d6:e0:74:
81:9f:4e:60:f8:57:7e:1b:c2:72:bd:18:5a:c0:2f:
eb:b5:f7:f3:92:19:7c:95:ac:c4:4e:25:f4:0a:91:
29:50:ca:76:f1:ee:88:99:a9:34:5d:32:f3:9d:ad:
13:ea:9b:f1:37:e6:ad:d2:07:1c:20:c0:1a:e5:68:
a0:1d:7d:d3:fe:fc:4c:54:a0:dc:ab:0a:f4:fa:04:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:9C:30:B9:32:ED:D9:02:13:F7:5D:D2:2E:03:2C:86:61:DA:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5a6bda3-9bd6-30a0-a8b0-27b596da928b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.33.50.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:6e:df:34:d8:a4:3c:5b:b4:ef:b8:84:56:c9:8b:a9:f8:76:
e8:db:d9:af:d3:9c:ee:cf:4c:cd:a2:78:75:8f:d2:7b:74:78:
a5:8b:8f:06:2f:0f:5f:61:25:f8:a2:67:4e:74:d8:65:a6:85:
5a:60:7b:ac:41:88:38:d5:03:ac:22:17:3d:66:3b:20:30:50:
25:c4:94:8b:8a:f4:12:45:e7:8b:69:a5:07:71:a9:3f:1c:08:
7a:4f:96:9a:a6:0e:b2:66:01:69:4d:4b:71:82:84:41:7b:ea:
1f:db:a9:f8:a2:90:1b:cd:23:c0:16:ed:ae:25:77:03:5c:3b:
04:f7:01:10:a2:73:43:c1:fe:4d:2a:cc:15:83:b5:af:6e:49:
1c:0d:e3:99:ff:c3:00:62:57:86:4c:48:03:7a:da:41:46:9e:
42:9a:46:d8:03:1e:a6:4c:ff:6a:74:7a:54:da:98:27:5b:69:
d5:d4:25:2e:47:66:2a:3c:ee:3e:74:45:b8:5a:5b:23:76:08:
46:73:fa:cb:25:2c:f3:0d:18:1b:0b:08:00:1c:cb:a8:4a:bf:
55:c7:9a:c9:90:ed:06:ca:96:b3:3b:fb:01:2b:ac:30:ca:9c:
54:46:c9:f6:54:70:12:6d:00:bb:c2:67:ef:78:1f:89:a5:5d:
44:9f:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:36 2025 by rpki-client