Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2753c12d-bca1-3024-8107-0e0d152831ee.roa
File: 2753c12d-bca1-3024-8107-0e0d152831ee.roa (raw, json)
Hash identifier: 8Ar+54XZfpDkCB2dQRs5XJqcgwBKUvJ8C0pkMWhFcjY=
Subject key identifier: 81:81:CC:8B:BB:E3:B6:A7:E6:35:D0:19:AE:2E:1D:1F:9A:F5:22:5E
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285841E42AE64087E3B6913BBAA680
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2753c12d-bca1-3024-8107-0e0d152831ee.roa
Signing time: Mon 15 May 2023 16:08:10 +0000
ROA not before: Mon 15 May 2023 16:08:10 +0000
ROA not after: Thu 10 Aug 2023 10:55:53 +0000
asID: 205774
IP address blocks: 173.239.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:2a:e6:40:87:e3:b6:91:3b:ba:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: May 15 16:08:10 2023 GMT
Not After : Aug 10 10:55:53 2023 GMT
Subject: CN=feb0ab2c-1c5b-42ca-90e8-bc7081cdbe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:62:d8:e0:95:19:8c:b9:f6:5a:c9:dd:b9:
c5:16:94:d3:ab:73:77:fc:32:82:5d:aa:01:ff:46:
c8:fa:75:8a:fc:b5:c6:37:66:21:63:6a:0d:9f:fe:
83:bb:84:ee:5c:ab:36:d4:8c:1a:ae:2d:7a:b0:51:
97:8f:79:53:98:97:bf:04:1f:8b:b9:53:d1:ab:88:
37:bf:12:94:55:63:63:d0:6c:5f:41:03:a2:a7:1d:
d7:cd:7c:5b:83:dd:09:40:fc:44:a5:f1:2b:9a:68:
0d:98:f7:3a:fe:e4:ca:70:76:e7:04:34:e9:3d:bc:
1a:1f:14:7d:46:f9:83:f3:d1:e1:80:33:ae:b5:3b:
b4:bb:c5:8b:6c:85:1d:64:b4:83:a6:ea:30:e9:04:
0a:2b:83:2e:98:45:ed:60:a6:6a:88:92:d6:36:9a:
6e:45:f2:e0:2d:fd:d0:41:15:18:a5:be:28:16:1f:
1b:9a:ca:c2:05:e7:85:49:f1:81:fc:7b:86:e1:ed:
f9:2f:3e:dd:f6:1a:8e:2f:15:0c:8f:39:09:d3:bf:
65:75:0e:e6:e1:48:29:b5:9f:38:a3:ee:f7:32:75:
46:7e:7d:cf:02:99:6c:38:c2:ab:09:97:b5:a0:10:
81:c9:5d:67:13:4f:25:6b:97:fa:85:fd:1f:52:dd:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:81:CC:8B:BB:E3:B6:A7:E6:35:D0:19:AE:2E:1D:1F:9A:F5:22:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2753c12d-bca1-3024-8107-0e0d152831ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:7d:ff:33:48:de:57:11:13:90:98:90:62:90:d5:5f:b5:89:
c3:10:d8:4e:c0:a3:86:27:93:3e:b9:9b:25:62:0e:11:ea:4b:
e0:22:2b:ac:c7:19:92:2c:d5:e3:37:ca:10:55:a7:96:69:47:
4a:08:83:e3:71:8c:66:7e:13:cd:02:66:74:76:cb:d6:53:3a:
33:df:0e:23:d3:1e:e3:80:9d:4c:ed:5d:8e:2b:70:6d:e2:2e:
a9:dc:27:48:73:26:36:65:17:00:db:34:3b:e1:c9:e7:e8:10:
e8:7b:f7:fb:1c:f4:ad:ce:2e:12:c3:9a:87:72:71:ed:3e:9b:
68:54:c2:e0:17:28:97:c3:b1:c0:f5:a2:3a:2c:2c:c3:02:81:
ad:13:60:f2:10:73:0a:19:f3:36:ef:02:b0:8d:96:60:2e:52:
81:df:03:c5:ec:40:89:d3:ad:e1:55:22:bd:2c:1f:ae:e8:53:
fd:17:5c:b0:f4:0d:70:23:dd:e5:05:aa:4c:a6:87:8f:ea:c6:
3c:a3:ed:ae:4c:ec:ea:5a:dc:4d:20:49:26:19:fb:eb:d4:56:
ac:3d:4f:89:4c:b3:b5:d6:92:f4:1c:13:01:bf:ed:d9:ce:62:
50:4c:b4:c0:1b:75:91:9d:01:36:00:ea:6b:9e:be:f6:da:46:
dc:4b:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:39 2025 by rpki-client