Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b5877d28-07cc-3ecb-8666-6071dfce2339.roa
File: b5877d28-07cc-3ecb-8666-6071dfce2339.roa (raw, json)
Hash identifier: YXe/D2z/VgzM/OkemRCvQxE2EMBfWANfAD8F6iO4OaI=
Subject key identifier: 95:CC:98:50:F7:4C:FF:96:22:2D:A4:27:68:04:39:F1:A6:D3:00:1A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285843A837AFDF9DEC5097F8BA0700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b5877d28-07cc-3ecb-8666-6071dfce2339.roa
Signing time: Tue 24 Oct 2023 14:20:12 +0000
ROA not before: Tue 24 Oct 2023 14:20:12 +0000
ROA not after: Mon 22 Jan 2024 15:20:12 +0000
asID: 212238
IP address blocks: 172.111.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a8:37:af:df:9d:ec:50:97:f8:ba:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 24 14:20:12 2023 GMT
Not After : Jan 22 15:20:12 2024 GMT
Subject: CN=6075d702-fed3-4cbc-8a2d-e62a2539c325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:da:6f:76:e6:d1:72:c3:ca:10:1a:dc:b7:
ce:39:ef:26:3c:2c:76:a2:5e:09:25:41:03:41:98:
cc:32:41:7b:ac:96:7d:db:3c:2d:9a:7b:55:da:ae:
3e:79:b1:07:27:af:0b:53:94:1f:62:16:9d:5d:1f:
6f:40:2e:0e:0e:82:4f:1e:b5:9d:a3:ab:06:4d:9d:
ea:e9:98:ee:b6:ac:6f:cb:a0:82:61:50:77:19:8c:
67:3d:1e:bf:d9:a9:ee:a6:49:28:1e:18:76:6f:fc:
06:28:d5:77:99:10:32:46:3a:66:a9:8e:c7:ab:ca:
a8:31:e7:02:62:42:9a:cc:12:c9:54:a3:35:65:c4:
0f:6c:ad:75:c1:94:ef:96:b6:7f:c9:53:a0:ce:7b:
f7:ee:c2:8e:13:a2:1f:6c:5c:8c:88:d1:7d:73:4c:
e5:81:98:10:cd:bc:a8:64:23:9f:6a:50:1a:c8:3a:
6b:32:2b:3a:8b:d7:1d:4a:41:4d:d3:1d:fc:d1:20:
1d:91:73:6e:f1:0d:aa:4b:18:40:7a:47:f6:40:1a:
6e:2d:c6:e7:af:43:c4:0c:57:ab:b6:73:26:5c:53:
9f:c6:e1:c0:76:68:49:d1:0d:d2:38:c8:55:08:23:
4b:78:7f:76:37:8c:a7:b9:4a:a6:35:69:ec:d4:77:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:98:50:F7:4C:FF:96:22:2D:A4:27:68:04:39:F1:A6:D3:00:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b5877d28-07cc-3ecb-8666-6071dfce2339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:86:9c:3f:5a:b5:93:c0:08:82:b5:f2:25:74:af:04:8d:b4:
b4:74:0a:44:55:7a:51:01:ce:b1:83:6b:97:bf:e4:42:77:22:
9c:0b:66:4b:fd:fc:9f:96:4d:fc:90:fc:e7:d2:36:52:54:df:
8d:82:a8:b1:2e:d3:bc:96:87:ee:ee:de:10:08:78:48:1f:a1:
4f:af:9d:47:4b:48:53:46:a5:c1:3f:97:9d:c6:71:3f:4e:5e:
eb:b7:5a:1d:ce:94:3d:e3:43:f6:bd:9f:7b:70:79:a1:eb:bd:
54:bd:0e:4e:0c:e3:9a:38:69:e3:24:78:6f:5f:83:84:de:20:
1d:e8:f8:56:de:0b:01:a2:22:66:cf:53:73:dd:0b:e1:88:67:
8a:e5:90:26:ad:bf:a3:72:c1:5b:48:b0:c9:be:01:f9:dc:5c:
08:9e:66:1c:d3:30:e2:ac:09:07:e8:ab:43:bb:f9:c4:4c:61:
24:80:8f:c6:ae:21:e0:01:a5:5d:94:9b:58:39:34:2c:aa:1a:
93:ba:17:89:a4:a3:62:c0:06:5e:0a:54:c4:3f:31:1c:6e:ef:
28:d6:6f:e4:e9:fa:f9:5b:18:2f:b3:7e:29:f9:9c:fa:47:85:
2b:47:11:94:4e:d2:0a:5b:24:bf:3a:46:17:3d:a2:5f:61:2d:
b1:8a:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:48 2024 by rpki-client on console-ams.rpki-client.org