Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/c27ae405-02ae-3da9-b8c1-d6f7863339c8.roa
File: c27ae405-02ae-3da9-b8c1-d6f7863339c8.roa (raw, json)
Hash identifier: EXhH9i++ImnlEc8FpzmJJwwTCI+iiK9tegQ5KzU4avM=
Subject key identifier: 82:8D:1B:BF:A2:A5:27:C0:5E:53:59:D8:98:72:30:F0:5E:E1:24:B8
Certificate issuer: /CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
Certificate serial: 010D0C9F432858465700C62252E3723F1B2241B0
Authority key identifier: 91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/c27ae405-02ae-3da9-b8c1-d6f7863339c8.roa
Signing time: Wed 26 Jun 2024 14:29:54 +0000
ROA not before: Wed 26 Jun 2024 14:29:54 +0000
ROA not after: Tue 24 Sep 2024 14:29:54 +0000
asID: 401207
IP address blocks: 198.133.128.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:57:00:c6:22:52:e3:72:3f:1b:22:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
Validity
Not Before: Jun 26 14:29:54 2024 GMT
Not After : Sep 24 14:29:54 2024 GMT
Subject: CN=bb07b5bc-13ba-4cf2-a95e-ab5579f5f0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:30:ed:70:08:96:88:9d:65:56:cb:31:53:
46:2d:51:7b:42:f4:e8:e0:2a:82:75:2f:e9:4c:58:
f7:09:fc:7f:c7:05:9b:8a:ed:10:39:ee:b7:da:71:
59:13:b2:95:f0:51:f1:79:2f:f0:d3:b1:b9:72:67:
d8:66:a3:53:45:eb:12:7b:ce:e7:8b:ac:5b:c8:37:
63:37:50:c7:f6:e1:fc:19:95:20:b6:ae:4c:23:18:
b7:f5:a2:ac:b7:62:d4:01:75:65:92:d0:ec:ab:fd:
8a:9a:cf:09:01:4b:68:ce:fa:b7:e7:16:cb:f7:aa:
60:f8:09:d8:a1:85:f0:8c:fe:0d:a9:2e:72:f3:2d:
b9:58:69:63:00:27:90:8b:6f:b7:76:9a:39:44:ed:
08:28:7c:91:2a:4c:35:c2:0b:5f:c8:34:3e:ef:74:
d0:66:c2:c9:d9:28:35:8b:25:30:b2:6f:3b:f2:0f:
e6:da:5e:7c:70:c7:53:3e:b8:1b:4c:0b:4e:8e:f9:
bd:9d:a9:56:4d:15:ed:d8:41:6c:af:79:54:a2:d0:
f4:ca:9e:8f:68:c8:85:39:d5:e7:ed:6a:46:c4:b3:
3f:14:ef:3a:39:81:fe:a5:49:2e:dd:93:d6:5c:24:
d3:14:22:21:4c:72:cc:54:4d:93:9b:ad:90:9c:c6:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:1B:BF:A2:A5:27:C0:5E:53:59:D8:98:72:30:F0:5E:E1:24:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/c27ae405-02ae-3da9-b8c1-d6f7863339c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.crl
X509v3 Authority Key Identifier:
keyid:91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:b6:21:67:75:92:d3:5b:77:24:41:b7:ae:ab:31:5d:1c:95:
0e:17:75:97:f3:b7:35:0c:48:ce:13:31:78:dc:6a:cf:f8:ba:
9d:d3:92:24:8e:7a:e6:a4:a7:37:e0:b7:12:a6:49:cf:0e:29:
72:da:b6:a5:9c:90:cc:dd:d4:d8:33:32:21:50:de:92:13:6e:
ec:8f:7c:11:14:86:3a:19:e5:64:6b:74:66:a9:ac:6c:57:de:
e9:c0:94:94:db:c1:af:f3:cc:2f:32:d9:79:8e:e6:c5:d9:b5:
e4:51:21:bf:b3:dd:c0:81:6c:02:70:06:68:fb:88:ab:c3:20:
9f:0c:b4:71:dc:ee:dc:fd:4f:1f:3f:e5:b9:44:f0:9f:13:9a:
b1:dd:31:c6:65:e2:7c:de:da:89:a5:17:82:41:4f:3a:07:18:
4d:29:13:f3:e4:39:a4:67:06:92:14:01:bc:d0:72:cd:cc:6b:
87:fe:b1:7b:4e:ae:7a:e5:fb:f7:7d:8d:74:09:f0:a7:08:5d:
e6:6a:d4:14:c0:e3:eb:d1:63:2b:4c:f8:d3:9f:1d:74:1b:8e:
7d:c4:d3:4e:fa:11:ef:0c:24:d7:65:de:01:ae:92:34:9b:fe:
eb:22:86:d6:8f:d5:6b:04:75:a0:4c:84:f6:f0:8b:65:e6:51:
99:dc:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:53:29 2025 by rpki-client