Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/e604b8f8-f4bc-3307-b243-08689dfe397d.roa
File: e604b8f8-f4bc-3307-b243-08689dfe397d.roa (raw, json)
Hash identifier: /zZVTiP5dr8/FZG0qvFlj2RzZzLmJv63XUZzGdHme+c=
Subject key identifier: 3F:F3:C8:80:60:41:E3:BF:7F:9B:CD:B2:70:15:93:5B:29:A2:29:9B
Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial: 010D0C9F4328584570EE86B1C12240D07760C600
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/e604b8f8-f4bc-3307-b243-08689dfe397d.roa
Signing time: Fri 05 Apr 2024 04:37:13 +0000
ROA not before: Fri 05 Apr 2024 04:37:13 +0000
ROA not after: Thu 04 Jul 2024 04:37:13 +0000
asID: 16509
IP address blocks: 23.154.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:70:ee:86:b1:c1:22:40:d0:77:60:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
Validity
Not Before: Apr 5 04:37:13 2024 GMT
Not After : Jul 4 04:37:13 2024 GMT
Subject: CN=3cbeaffd-8b62-441b-b76f-3205a2c66f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:13:a2:df:e2:28:f3:f3:62:98:f5:1e:b4:
08:a7:ed:c7:5a:e8:f1:00:a4:ba:f4:8b:67:6f:f6:
63:1f:a7:4a:3d:f7:26:ca:fc:7b:05:03:8c:e2:5c:
bd:3a:be:2a:24:8a:98:10:03:58:b1:69:a4:fe:34:
e8:8a:1f:03:fc:cd:4b:e0:b0:c2:32:be:34:a3:9b:
9c:39:d1:3f:c5:9e:81:b0:12:2c:e1:50:98:8d:96:
da:28:d4:e4:dc:19:86:4a:ff:56:9a:9d:01:1e:2a:
0d:14:82:ab:40:68:78:1f:f9:5b:80:fa:b7:23:42:
e9:b0:37:09:7d:3f:39:f2:04:89:ee:7d:2b:c2:39:
2d:04:6a:4a:82:c3:48:4e:63:db:d7:91:7f:2e:b2:
87:81:4f:79:d4:11:25:35:f3:ec:4d:84:19:bc:19:
ae:49:2b:cd:b2:02:81:52:e4:3c:8f:dd:be:69:81:
a0:93:c3:f0:bb:9a:9b:fe:8b:d4:9b:b7:ca:56:ae:
2b:61:af:af:d5:cb:b0:04:18:2d:aa:35:40:07:8f:
b9:39:a1:47:dc:9b:e4:a8:80:85:da:6b:2a:7e:fd:
b0:21:a1:5d:ea:c3:c7:5b:2d:1a:51:ee:42:60:e2:
bb:44:d1:fe:c9:6a:06:28:a1:7d:21:d9:a7:2d:d2:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:C8:80:60:41:E3:BF:7F:9B:CD:B2:70:15:93:5B:29:A2:29:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/e604b8f8-f4bc-3307-b243-08689dfe397d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
X509v3 Authority Key Identifier:
keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:93:c5:ee:93:16:a8:24:d7:4a:0e:9d:5f:53:03:a9:9f:a2:
58:45:6c:63:24:17:38:59:60:fd:ec:c2:27:0c:62:f4:d8:26:
67:5c:35:7e:14:62:39:76:4d:46:c3:db:1f:40:29:68:ce:73:
19:a6:79:8e:9b:19:c3:d5:b7:f1:c3:d9:a7:65:c8:0b:c0:8d:
55:01:b9:4a:5a:df:99:28:63:8a:1a:7f:b6:90:9b:e4:bd:b1:
71:14:28:22:c9:c5:a7:c5:26:88:ec:7d:96:7b:a6:21:08:44:
2f:35:e8:84:34:5a:54:09:98:a6:70:78:0f:33:4f:84:5c:94:
02:75:b7:8d:6c:de:67:17:b4:2b:0a:7e:d9:3e:a7:1d:1e:85:
c1:99:7e:c8:9f:4a:6c:1b:36:e1:72:4b:20:74:36:3a:7c:f4:
bc:ca:9f:44:f6:33:51:3e:91:3b:60:e9:d7:a0:71:29:d1:1f:
70:52:a1:98:de:c9:c5:74:fe:3f:2a:53:29:25:e7:8d:15:17:
bb:71:bc:29:d3:d6:6f:0b:d4:b9:37:c5:57:6a:eb:54:04:bd:
5d:85:3c:08:1b:0a:bf:ce:dc:ca:1d:64:64:00:0c:35:fb:8d:
37:97:87:a9:35:8d:c7:a3:d3:8d:fb:02:e9:0b:06:f4:27:c5:
79:93:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:03:58 2025 by rpki-client