Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/9d2e3501-7b90-3005-a930-ab479ef3c03f.roa
File: 9d2e3501-7b90-3005-a930-ab479ef3c03f.roa (raw, json)
Hash identifier: JO0fkPnxe9M9I67G0fw2+f4VnZy4UbTFP3Vk8udGhk4=
Subject key identifier: BD:AA:6E:0F:99:A7:11:83:47:6A:6D:BE:33:3B:76:6A:33:36:19:D1
Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial: 010D0C9F43285845A75A7700D3437FC9AC85BD80
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/9d2e3501-7b90-3005-a930-ab479ef3c03f.roa
Signing time: Wed 24 Apr 2024 16:28:21 +0000
ROA not before: Wed 24 Apr 2024 16:28:21 +0000
ROA not after: Tue 23 Jul 2024 16:28:21 +0000
asID: 205455
IP address blocks: 23.154.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:a7:5a:77:00:d3:43:7f:c9:ac:85:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
Validity
Not Before: Apr 24 16:28:21 2024 GMT
Not After : Jul 23 16:28:21 2024 GMT
Subject: CN=b9ff20f7-b7bc-4201-beae-1de751650a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6c:d7:14:6a:fd:0e:89:33:00:a9:45:35:ee:
68:d1:f8:33:cb:5c:4f:57:6d:eb:f0:38:5e:6c:c7:
e7:67:4e:fc:e0:f3:96:ce:e8:2b:5b:eb:74:5d:5f:
d1:43:66:28:af:13:25:e6:35:fc:e4:b9:22:56:c0:
de:9c:a3:e7:5d:27:25:42:89:3e:9a:0b:02:fc:a9:
07:17:cc:22:42:01:4d:30:5c:32:82:ac:9e:7f:5a:
3a:51:8f:2c:6a:dc:15:9b:4d:2d:6c:de:45:08:d1:
69:47:30:bf:69:03:9b:7f:2e:2d:5b:33:84:df:89:
a6:ca:aa:92:09:cc:6b:a0:81:4c:50:52:01:0a:43:
5f:f0:de:c7:41:67:4e:29:c6:f7:b2:4a:38:d1:ff:
1a:d9:e6:43:d1:50:07:bd:e5:9d:8a:d4:7f:70:c7:
83:3f:55:65:ef:66:72:01:1b:52:cb:74:ef:eb:05:
b7:00:b2:86:70:8a:e2:0f:be:20:1d:13:4f:5b:d3:
1d:c7:0f:9c:93:a6:65:18:5c:ee:67:2c:3c:0e:57:
86:59:11:db:f1:a4:b8:1a:5e:62:d7:49:e1:d6:bd:
93:cf:b9:17:f3:06:46:67:80:2b:72:00:f0:8c:69:
cd:4c:d0:ee:98:cb:b4:51:57:15:13:a0:49:d2:43:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AA:6E:0F:99:A7:11:83:47:6A:6D:BE:33:3B:76:6A:33:36:19:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/9d2e3501-7b90-3005-a930-ab479ef3c03f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
X509v3 Authority Key Identifier:
keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:fb:f0:c5:07:63:91:90:df:2d:65:6f:a3:b4:7b:d8:e0:54:
da:d3:74:b7:41:07:36:da:39:b6:9a:54:c3:86:eb:3f:7d:32:
7b:e5:2e:3c:e1:47:32:5a:a9:4c:83:21:fd:5e:35:0c:54:46:
b8:3a:22:9d:43:3b:7f:52:ef:dd:26:bb:e1:cf:77:88:e5:d5:
36:9a:df:f8:3a:03:a4:c4:9f:c4:47:57:bd:97:22:4a:d1:bd:
28:69:3c:c7:b4:0d:da:89:0f:d6:d2:88:13:87:4d:9f:cc:94:
a4:a0:57:32:1c:8f:1c:e6:ff:a2:51:77:05:a3:b1:21:8f:86:
f1:ef:80:37:0f:33:f0:a6:15:d4:d2:51:64:fa:11:23:0a:d9:
ba:75:19:9d:ef:51:b8:12:97:36:8a:c0:92:5b:f4:87:89:b7:
4a:da:c5:c6:bc:e7:8e:c7:24:0d:8f:13:2d:34:ae:25:81:93:
14:44:93:c6:0e:6c:12:80:96:be:75:10:e9:88:db:7a:5b:54:
fc:b8:7f:04:d0:94:5c:9e:5c:9d:f0:93:5f:9a:f4:e7:17:f0:
c6:03:61:c7:27:03:ac:6f:2b:27:72:de:82:1e:cb:1a:57:a1:
70:64:42:74:89:bc:2f:b5:ce:2a:59:f4:22:b5:51:da:99:52:
8a:52:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:08 2025 by rpki-client