Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/2bc0c262-2c61-3f38-8323-29a50a777805.roa
File: 2bc0c262-2c61-3f38-8323-29a50a777805.roa (raw, json)
Hash identifier: oDR1+6/iWA7jCC5mt3isK1oczXmFjg52aRq3zs/o9Ss=
Subject key identifier: 52:B4:69:05:23:0C:86:02:BA:23:42:AA:48:D2:1A:A9:C0:E1:98:7B
Certificate issuer: /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Certificate serial: 010D0C9F4328584800230C7EA29B64C1295AAD80
Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/2bc0c262-2c61-3f38-8323-29a50a777805.roa
Signing time: Mon 25 Nov 2024 21:17:30 +0000
ROA not before: Mon 25 Nov 2024 21:17:30 +0000
ROA not after: Sun 23 Feb 2025 21:17:30 +0000
asID: 8075
IP address blocks: 198.35.20.0/22 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:23:0c:7e:a2:9b:64:c1:29:5a:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Validity
Not Before: Nov 25 21:17:30 2024 GMT
Not After : Feb 23 21:17:30 2025 GMT
Subject: CN=edadcfef-5924-4dc4-8089-34b7f0c9f1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:05:e0:ab:67:10:e9:ac:37:68:f3:f7:07:
98:79:08:d9:00:d1:fb:3c:ca:34:6e:1f:43:cd:bc:
3a:b1:2d:76:77:73:e9:bb:2f:84:78:49:a2:e6:ff:
ee:05:03:51:e6:b1:59:d9:74:58:04:41:e1:ac:fb:
3b:90:a4:9c:07:fb:7d:8e:7a:cb:50:da:33:ea:f0:
ef:10:d5:fe:17:6a:1e:cf:9d:04:da:9d:13:05:f3:
c0:e8:04:31:d1:a3:e1:f2:65:b7:2a:ef:67:4a:32:
30:1e:f3:fd:fe:0b:0b:6f:2c:f2:33:fb:3a:02:81:
3e:d6:b2:64:4d:ce:4e:96:70:cf:4d:38:34:ca:00:
c6:ad:a3:b3:97:e5:dc:82:4f:6b:0e:bf:79:77:e9:
fa:2a:4f:79:c4:4b:da:fa:f0:49:4c:a7:2c:b2:fa:
df:08:9c:3e:dc:4a:bb:10:bc:a9:5d:cd:12:e5:ae:
d3:0f:f0:c3:e4:5c:3d:2d:51:69:4b:fd:d1:ce:6b:
8f:ba:4b:c1:65:ab:d0:16:7d:e9:a5:76:9c:c1:15:
85:6d:f5:e7:43:99:54:19:ec:1e:89:f3:3e:15:2d:
0a:31:2a:43:50:a5:92:4b:89:6a:d4:46:6b:a2:97:
96:a0:e2:5c:ca:cc:93:c2:78:2b:6a:50:6c:76:7f:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:69:05:23:0C:86:02:BA:23:42:AA:48:D2:1A:A9:C0:E1:98:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/2bc0c262-2c61-3f38-8323-29a50a777805.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
X509v3 Authority Key Identifier:
keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.35.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:42:2d:36:0a:85:b1:58:dd:48:eb:96:e4:06:15:68:1b:b9:
66:d6:aa:3a:b9:1e:87:73:26:14:50:a4:67:a4:b0:01:19:44:
d1:cd:ce:50:fa:5a:39:4a:dd:ca:3e:82:09:6f:43:d9:08:7d:
d8:09:a0:74:9e:1f:1b:ba:f7:b0:7d:40:24:d1:a0:fd:e0:44:
02:9f:28:e3:e6:0d:7d:e9:03:58:de:15:4f:f0:04:60:24:7e:
20:90:48:4a:c4:a4:71:66:0c:fd:f3:c5:fd:5d:2d:bb:c1:56:
c0:98:f8:fd:7e:4d:5c:aa:01:17:5f:06:7e:79:79:ce:b7:4c:
cc:5b:07:fb:ce:92:40:d0:07:ab:84:ef:ab:33:ad:fc:0f:bf:
74:dc:8a:4c:85:5e:84:f4:de:50:f9:25:42:cb:74:b3:2e:20:
62:ed:9c:fb:ad:fe:d5:cc:e3:8e:c1:06:00:dc:d3:8c:d8:bd:
7f:40:17:3d:4e:b3:22:4c:63:7a:e9:27:50:43:8a:4a:c7:0c:
97:fd:90:4a:68:c1:4d:a4:a3:86:47:92:26:f2:c3:44:c1:49:
db:2d:b1:2a:59:dc:dd:49:62:62:18:16:22:18:0f:84:9b:84:
69:ec:af:3b:a8:b5:1f:c1:38:42:d7:0e:e3:d4:a5:aa:64:38:
de:83:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:02:17 2025 by rpki-client