Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f037ffb7-8dd8-3098-b64a-4b86c66354c2.roa
File: f037ffb7-8dd8-3098-b64a-4b86c66354c2.roa (raw, json)
Hash identifier: HJYaKD9r5HE5sL/aCr4JDBp0ZtuabGqLlwP4Pco7o+0=
Subject key identifier: 5A:54:24:F4:86:28:AB:A8:99:52:76:3E:A0:10:8A:8F:0E:2E:08:7D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424AFDACF9C6B810CC067A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f037ffb7-8dd8-3098-b64a-4b86c66354c2.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.33.38.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:fd:ac:f9:c6:b8:10:cc:06:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=a8c6d748-028e-4a44-a077-75b21e5845c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:49:60:a4:2f:b7:99:85:21:6d:8b:0b:c9:
cd:7c:c8:6c:86:b0:19:58:2d:6b:0b:82:b7:78:32:
3e:3b:ee:1a:c3:8d:f3:52:5c:df:5b:22:fe:95:7d:
cf:c8:38:a4:88:42:7d:2e:0a:74:49:41:ee:39:8d:
32:a7:bf:13:47:cc:ac:b1:4b:19:53:21:e6:41:33:
d1:c2:6a:d4:5e:d2:0a:5a:ae:fd:40:ee:8a:56:b7:
f4:f5:58:14:ed:00:49:80:6e:21:9f:0c:fa:fd:55:
87:0c:82:53:ba:69:42:f3:11:aa:0d:0d:9a:7c:4d:
e2:3d:58:be:9b:96:3b:8f:66:00:c2:76:02:26:5e:
5f:08:1c:22:4c:f3:9d:f0:a2:be:e3:43:de:be:96:
a1:82:28:e2:4e:10:66:2c:3a:e7:0e:04:67:5f:2e:
e6:ae:05:7e:ce:6d:37:03:3a:0c:9d:05:49:04:03:
dd:d3:9f:6d:d4:1f:50:f0:57:d4:9f:9a:4d:df:ef:
42:4d:59:3d:04:e2:72:a3:e3:d7:8b:91:1a:2e:78:
d2:90:11:ea:e9:9f:55:03:a8:dd:51:46:5f:86:a0:
a5:6f:18:ed:c2:7b:7f:18:1f:17:22:f4:0a:d6:0b:
1c:54:73:24:20:80:6d:9c:db:fc:09:ac:c2:d2:35:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:24:F4:86:28:AB:A8:99:52:76:3E:A0:10:8A:8F:0E:2E:08:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f037ffb7-8dd8-3098-b64a-4b86c66354c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.33.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:52:88:b4:98:8f:90:b9:4e:20:8a:46:4f:87:84:f9:3f:d1:
54:52:32:44:0c:1a:b2:a6:d0:34:bf:90:36:e7:15:1e:f5:8f:
09:7d:c9:cb:30:66:f1:12:e9:26:bd:de:a5:ca:16:eb:9f:a1:
19:99:83:73:1b:2f:22:f7:5a:43:5c:43:5d:da:4b:90:8c:5f:
21:c0:ab:c7:2f:86:e1:16:a2:c4:bb:09:40:99:fc:97:a7:f9:
28:48:45:85:be:3c:13:2d:c0:9a:e4:88:fc:24:5d:f0:20:c7:
11:08:43:93:f6:ac:f0:22:78:97:63:77:e5:47:44:d9:f5:81:
e4:fc:ab:73:af:57:e6:f0:2e:a2:65:9d:6c:13:d6:2b:c9:ee:
a5:c7:de:25:17:e3:19:2f:78:23:df:b0:b2:9b:e1:93:9e:a1:
e4:cd:9f:53:85:8a:bf:41:f4:02:ca:fc:5f:29:16:31:4e:22:
d5:3a:0a:70:f9:d5:b3:5b:ac:a2:90:3e:04:e9:33:e5:96:21:
a8:5b:8b:f0:67:22:56:e1:8c:b3:23:78:7c:8c:38:0d:55:c6:
68:b5:32:77:21:51:e0:2d:6b:c3:73:80:9a:64:bf:82:6b:54:
0f:e2:84:4a:4a:05:d3:06:f7:d2:53:50:87:e7:90:b0:93:87:
1f:f7:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:22 2025 by rpki-client