Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/5bc57602-06e0-30c5-b387-536edc7566b3.roa
File: 5bc57602-06e0-30c5-b387-536edc7566b3.roa (raw, json)
Hash identifier: UZKyXUhInJdcubjEc3+rDLvkW1sf3gxsuGCc94relN8=
Subject key identifier: 87:71:1E:C4:6B:B1:8A:47:F3:B8:C9:9E:ED:CF:13:D2:32:F6:82:C6
Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial: 010D0C9F43285845A6F4A64F062E6964623A5300
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/5bc57602-06e0-30c5-b387-536edc7566b3.roa
Signing time: Wed 24 Apr 2024 13:03:12 +0000
ROA not before: Wed 24 Apr 2024 13:03:12 +0000
ROA not after: Tue 23 Jul 2024 13:03:12 +0000
asID: 205455
IP address blocks: 23.154.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:a6:f4:a6:4f:06:2e:69:64:62:3a:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
Validity
Not Before: Apr 24 13:03:12 2024 GMT
Not After : Jul 23 13:03:12 2024 GMT
Subject: CN=c1f6721b-bede-4c05-8856-99134cfce1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:c3:62:18:a6:14:5e:55:7c:2f:38:19:a5:
23:6a:82:f0:5e:23:14:52:b5:c2:3c:bc:63:80:2f:
8c:33:8b:b3:2e:9d:23:d1:89:3f:15:3f:df:71:76:
43:0d:56:d1:23:36:b3:da:fb:49:55:58:c6:fb:40:
c6:66:34:09:ce:3b:c6:f1:37:86:93:c5:32:e0:91:
d6:d7:1c:0d:f5:4e:89:34:50:92:cf:40:a9:c7:91:
e7:6d:25:ed:73:4e:15:8e:73:34:1c:4c:78:2d:ae:
0a:4f:90:03:9f:8b:77:f4:00:1a:7a:76:79:6b:3d:
f0:6a:d3:f0:14:50:8d:f9:25:e0:9b:cb:20:8c:58:
31:06:0a:c7:bf:f1:4b:5d:5f:c5:65:9d:b8:09:cb:
15:80:b1:71:1c:60:56:1a:8a:ec:9e:43:66:39:ee:
4f:b9:4a:53:22:b5:cb:22:b7:74:d1:c3:f8:9e:8c:
f1:5d:60:64:a0:9f:d1:9a:13:59:60:04:f5:98:04:
57:7f:a2:da:b0:10:a3:69:85:a7:8a:a9:14:e5:11:
5e:e4:87:e2:2f:9d:54:1d:dc:71:13:6f:ea:09:97:
46:32:c1:4a:0d:7f:c9:40:d1:4c:80:2b:12:b9:05:
5a:12:de:94:db:e2:5b:db:a1:33:c2:c9:65:1f:da:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:1E:C4:6B:B1:8A:47:F3:B8:C9:9E:ED:CF:13:D2:32:F6:82:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/5bc57602-06e0-30c5-b387-536edc7566b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
X509v3 Authority Key Identifier:
keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:20:15:e3:14:08:25:50:f4:6e:69:a1:56:8a:9b:ad:5a:c8:
82:ab:7b:3b:3d:d6:7a:1a:52:22:dc:8c:d6:bf:cb:df:0c:29:
b6:92:bb:58:8a:95:5d:6d:c6:45:ff:77:d8:e1:a2:b3:f7:e7:
22:58:ab:ee:a0:df:79:2d:25:02:63:e0:26:d9:f6:01:a3:b9:
af:16:cf:e4:2f:90:7c:9a:30:8c:4c:4f:4d:43:6f:a0:66:11:
4a:97:2d:44:fd:6c:a7:8a:dc:fc:f0:11:3d:06:c9:94:d9:f1:
1d:ca:eb:71:ae:a4:46:9c:49:ea:f2:db:9e:36:ab:88:8a:fd:
02:69:f0:8a:20:60:8b:5f:dd:d3:bf:21:73:65:cc:ec:f2:4e:
c5:70:82:d4:97:54:9a:f6:be:21:7b:aa:5c:7a:1e:4c:71:72:
df:b5:32:88:54:31:c3:3a:62:ad:07:e1:d3:9c:f1:0d:18:e6:
98:ad:45:60:37:57:33:5a:ea:3f:b4:16:cc:8f:66:97:ad:82:
07:f5:fb:70:ac:a7:67:93:b4:65:7e:e9:a3:98:1f:50:d4:92:
c7:c8:ed:2c:5f:e6:8b:7a:04:ab:23:d7:99:ff:d0:e7:a3:88:
16:8b:a0:bc:d2:b3:b7:90:b0:ab:b7:08:88:d2:64:2a:01:68:
2c:e4:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:15 2025 by rpki-client