Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6957b758-bc1a-306d-a991-d1d4e54ec53b.roa
File: 6957b758-bc1a-306d-a991-d1d4e54ec53b.roa (raw, json)
Hash identifier: YdSIJsDME171MSWP5upmcgq33ncIMIoVya8iRZ+zlsw=
Subject key identifier: FA:78:B4:0C:EA:2A:36:29:64:DC:8A:75:62:CC:19:54:BA:5C:DE:72
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858480509FADCEA469357ACAF8200
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6957b758-bc1a-306d-a991-d1d4e54ec53b.roa
Signing time: Wed 27 Nov 2024 15:26:02 +0000
ROA not before: Wed 27 Nov 2024 15:26:02 +0000
ROA not after: Tue 25 Feb 2025 15:26:02 +0000
asID: 16591
IP address blocks: 99.198.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:05:09:fa:dc:ea:46:93:57:ac:af:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Nov 27 15:26:02 2024 GMT
Not After : Feb 25 15:26:02 2025 GMT
Subject: CN=ed5c67e7-c5c0-4060-b2b0-4f2393ca7d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:e0:80:a3:4c:18:c1:50:a7:df:ad:18:b4:
57:fe:c8:ad:87:81:1c:f5:d3:1a:c0:0f:c7:f5:db:
1b:fd:e9:9d:97:4c:49:1a:17:1d:6c:f8:ca:1b:3d:
a8:79:d7:35:59:0d:cc:58:8f:b6:ee:92:06:2b:f1:
3e:3c:25:0d:da:86:4e:7c:42:54:0e:4b:e5:42:35:
32:ee:24:b4:29:93:bc:66:7f:94:a9:a1:bf:11:02:
01:bc:7a:7f:70:31:56:1c:59:e8:5f:3a:b2:14:77:
0b:d5:33:c0:e1:45:c1:17:ad:e7:fb:d0:ca:10:fd:
62:b7:77:72:71:d8:b6:36:24:df:c9:d8:73:35:ca:
49:ad:db:c5:d2:cd:7f:e8:58:b7:8c:78:0c:44:df:
40:83:2d:78:8e:4e:8b:a3:ac:dc:13:ef:e7:8d:7f:
c3:72:b8:2d:6c:1a:aa:b7:52:2a:4b:85:5d:7b:6a:
af:cb:b0:5a:a8:3f:f7:f7:5c:d5:03:4c:d4:ce:a3:
32:68:91:89:85:26:68:53:7e:98:68:7e:71:b4:10:
54:e7:db:0e:aa:73:e1:43:e0:47:ef:33:79:0f:1b:
b6:3c:6a:91:4a:04:90:0c:6a:6d:5b:71:be:6a:1f:
7b:23:b4:f2:f3:1e:aa:cf:1d:87:d4:bd:2e:75:7c:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:B4:0C:EA:2A:36:29:64:DC:8A:75:62:CC:19:54:BA:5C:DE:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6957b758-bc1a-306d-a991-d1d4e54ec53b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:8d:db:ab:a9:d6:65:59:38:a4:2d:b8:a0:02:70:34:51:43:
1b:c9:75:98:cc:ce:e7:19:6f:f6:13:b4:26:23:9d:aa:3c:4f:
be:5f:dc:de:a5:7d:1d:b9:c1:62:a4:02:7b:e7:d7:9d:e8:24:
d2:47:b1:28:32:22:0b:50:89:62:08:2b:44:70:ef:75:1f:ef:
21:f0:e6:f7:98:c3:9b:a8:36:2e:b0:e2:53:7a:d5:9d:d2:16:
98:73:4f:b0:5c:d1:4d:29:41:17:35:b7:bb:b6:07:e0:5b:91:
d9:9e:cc:0e:ec:af:80:a2:38:5d:c4:ef:19:70:2f:be:b4:13:
89:25:d0:30:21:91:52:42:a6:f9:0c:58:89:40:0f:bf:d4:11:
ad:8b:29:fd:72:41:cc:cd:6e:e1:1d:82:ca:05:80:e5:ef:e6:
76:e2:89:e0:6e:0b:c7:38:6d:03:b8:d6:e5:ad:78:5e:8f:7b:
79:81:3b:3a:08:d1:79:7d:d1:4b:6c:e0:5f:81:45:af:b8:44:
56:c8:42:17:af:d9:1c:0c:3a:44:8c:56:a8:04:a7:bc:89:94:
74:3a:75:58:69:52:a4:a1:78:57:2f:e2:c3:32:6a:fc:5f:07:
ca:d9:da:4d:d7:be:e7:01:e4:4a:80:0a:ab:97:bd:59:fd:e6:
86:eb:09:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:47:02 2025 by rpki-client