Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d6afa99a-663f-37de-957f-327b2adaa593.roa
File: d6afa99a-663f-37de-957f-327b2adaa593.roa (raw, json)
Hash identifier: IKm77J8JuPrEry648cXdOiZKX6A8J/hUp/KbGoRpWKs=
Subject key identifier: 1C:43:1C:E5:CA:AE:34:25:23:0B:79:92:5B:0C:24:FC:A1:45:3C:E4
Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial: 010D0C9F4328584858A05C7FAA7AEAA620BA5780
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d6afa99a-663f-37de-957f-327b2adaa593.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 40676
IP address blocks: 23.133.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:5c:7f:aa:7a:ea:a6:20:ba:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=a832507b-f925-4c9f-8ae9-36037685ad1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:04:52:2b:50:06:ed:76:1d:b3:b3:a8:d5:
7e:f5:76:bc:d6:82:f8:1f:30:78:7f:6b:e6:41:83:
2d:a3:3d:00:9d:67:54:e1:7f:22:10:53:4f:5c:0f:
26:04:c2:93:df:94:d0:2e:ef:86:49:5c:9a:dd:ce:
77:f5:dd:ab:df:f2:30:3a:30:9b:26:b8:1c:8c:01:
23:d1:32:57:41:e0:a8:2d:da:09:26:80:a8:96:54:
44:21:3b:47:a5:f8:51:e2:8a:ad:37:57:3c:c9:78:
91:50:05:48:80:88:4e:75:94:26:f0:78:03:48:87:
f7:cf:10:98:d1:bf:e2:61:95:eb:63:b6:a2:23:5d:
ec:8e:fa:9a:69:c9:fb:4d:09:fa:70:a6:4d:f4:6d:
b9:97:71:38:23:19:93:9e:11:0e:74:f5:9f:19:4c:
b6:59:3d:a2:f7:53:89:a8:0d:7c:53:d7:61:5b:94:
77:16:e5:7d:d3:05:dd:19:1a:52:49:67:e3:e9:39:
0f:63:12:b0:38:af:6a:ec:be:40:61:b4:9d:e6:c5:
2a:51:d8:0c:63:d3:a2:86:16:02:e0:81:e3:8e:5c:
95:12:6d:ff:f1:56:a3:9c:dc:2e:79:08:33:00:da:
c4:f2:a7:ca:73:fb:b2:55:7d:3a:69:ec:cc:c8:87:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:1C:E5:CA:AE:34:25:23:0B:79:92:5B:0C:24:FC:A1:45:3C:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d6afa99a-663f-37de-957f-327b2adaa593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
X509v3 Authority Key Identifier:
keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:4e:37:81:01:e7:ac:87:f8:be:2c:53:57:02:8c:ea:6c:14:
76:b6:90:2f:75:94:2e:32:39:30:f4:0e:55:08:63:c5:5a:24:
2d:2b:40:5b:f9:7d:ac:0e:52:fe:4c:70:34:67:dd:d7:69:72:
7a:73:90:fb:dc:95:88:06:09:55:47:45:49:ce:ad:02:a0:86:
25:9d:6f:8a:30:b0:7a:d5:3c:28:27:2e:1d:c1:ed:c2:f8:51:
77:bf:00:3a:f3:8a:00:85:c2:34:48:cc:73:aa:f2:cf:fb:48:
ee:70:4e:63:f0:6f:8d:96:92:86:1c:28:a2:71:7c:74:77:ce:
4b:22:78:f2:99:fa:e2:9d:de:99:93:4a:84:e8:f7:a9:b3:af:
1e:e3:ef:c3:a7:48:cf:31:c0:47:c5:e9:f2:76:93:9b:13:bb:
3d:38:16:5f:14:a4:6d:43:dd:e5:27:4e:20:5a:dc:ea:97:2d:
06:87:bd:41:a0:eb:77:af:ef:2c:80:9c:21:18:35:43:bb:08:
1f:a1:9a:c9:2b:fd:71:9d:97:ff:49:d4:78:c9:23:5f:f1:95:
d8:eb:83:92:9d:9f:d2:6d:93:85:24:c8:db:6d:c7:3e:98:10:
60:75:98:67:12:7d:bf:9f:13:e3:f1:e3:e3:f8:2d:f6:ad:31:
c1:35:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:12 2025 by rpki-client