Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/8493eff3-290e-3f58-8e48-4d1f242aa5fb.roa
File: 8493eff3-290e-3f58-8e48-4d1f242aa5fb.roa (raw, json)
Hash identifier: vtfuG3qxM/ntz9OETET4uXsJCm2aYvfb7Nv+ZJdaF5s=
Subject key identifier: 10:D8:DD:58:6B:91:9E:16:13:BE:11:9C:C1:31:2E:B7:10:32:D2:3F
Certificate issuer: /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial: 010D0C9F432858428A4B5442DF111725896AA480
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/8493eff3-290e-3f58-8e48-4d1f242aa5fb.roa
Signing time: Fri 14 Jul 2023 04:18:36 +0000
ROA not before: Fri 14 Jul 2023 04:18:36 +0000
ROA not after: Thu 12 Oct 2023 04:18:36 +0000
asID: 399899
IP address blocks: 172.98.52.0/23 maxlen: 23
2602:fbb7::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:8a:4b:54:42:df:11:17:25:89:6a:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Validity
Not Before: Jul 14 04:18:36 2023 GMT
Not After : Oct 12 04:18:36 2023 GMT
Subject: CN=777489c7-a4bd-43e3-b687-795b1eb4fb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:e3:76:95:2c:28:8d:8f:7c:2d:17:e9:9c:
18:cd:a8:fa:e4:0e:80:70:f1:03:6c:3b:fe:dd:cb:
42:d7:e8:fd:da:9e:28:dc:ab:28:71:ec:16:91:82:
67:c2:18:23:32:be:6d:52:f2:f7:8a:77:b4:ac:6a:
8c:29:4e:2c:44:e2:a6:18:5b:72:5b:73:5c:03:8a:
16:ee:03:48:98:54:79:49:d8:57:a0:42:94:0c:34:
c8:f3:e5:46:76:ba:fc:6c:07:fc:2c:01:f8:a1:bd:
53:8d:66:8b:7a:f8:de:20:97:97:d2:54:c6:0f:8e:
52:54:00:eb:09:3f:3f:36:a1:c6:4d:0d:b7:0e:52:
dd:86:65:c3:ba:dd:24:4d:87:b5:f4:14:03:2d:24:
b3:d9:f7:00:eb:7a:18:95:4e:ee:89:d7:92:10:81:
d3:8b:4d:1d:fd:f2:b1:27:fa:8c:0d:9f:1e:d7:0a:
77:10:96:b4:37:f3:27:c5:6f:52:db:b6:15:70:6c:
87:bd:13:08:50:4e:9a:e9:f2:e5:41:77:3c:67:47:
b1:66:ca:8b:96:9d:df:1d:fd:2b:2e:2d:63:e2:b8:
95:ff:2d:a6:da:bd:fa:4c:21:18:7e:e0:26:e3:94:
01:77:e9:24:31:4a:90:52:26:61:66:1a:b8:1a:c4:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D8:DD:58:6B:91:9E:16:13:BE:11:9C:C1:31:2E:B7:10:32:D2:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/8493eff3-290e-3f58-8e48-4d1f242aa5fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
X509v3 Authority Key Identifier:
keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.52.0/23
IPv6:
2602:fbb7::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:b0:03:de:c8:94:b4:69:43:ce:64:48:0b:f0:eb:d6:ba:e3:
73:7b:c3:bb:7c:9b:0e:3c:7f:11:9a:43:68:29:22:bd:7f:81:
d6:9f:1e:df:95:11:ed:da:38:51:7d:0b:1f:33:97:84:1d:0c:
1b:cc:14:4b:43:6e:05:80:ec:62:2e:ce:e5:4b:88:61:ef:9c:
35:05:32:2a:52:9b:79:a5:0b:60:bb:74:0f:af:66:90:d6:9b:
b0:71:cc:4b:eb:fe:70:99:8f:65:b3:9b:cc:7e:f9:e9:1e:2c:
ec:2a:b4:97:59:04:f5:c7:ec:57:f2:46:c3:4c:8c:44:4c:27:
19:50:52:fe:40:ba:9c:3c:2f:45:f1:e1:66:fe:63:6a:0f:5c:
24:59:80:2a:85:7a:f8:28:f5:be:39:70:31:05:58:91:ee:b7:
c0:30:4e:53:20:f8:f7:01:e5:4f:1a:93:b3:00:e6:91:08:b1:
d7:b4:ee:46:ab:d5:11:c6:69:57:5e:2d:66:0b:4d:27:1a:be:
4b:de:74:55:bf:a6:53:b3:51:21:b7:e5:20:b7:94:39:f3:a7:
41:2f:0f:02:d7:67:bf:de:10:3d:0b:07:f0:8e:e1:1d:c5:96:
26:a7:2d:86:5d:4a:84:54:8e:58:09:07:7e:6f:ad:2c:85:ae:
b0:73:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:01:51 2025 by rpki-client