Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca057c80-f0d7-36c5-8577-0eb8d1ae7e7a.roa
File: ca057c80-f0d7-36c5-8577-0eb8d1ae7e7a.roa (raw, json)
Hash identifier: EKXOZU/ifM/zg0B5kFtx92040o9+dV1ThQ5t2pEslak=
Subject key identifier: 5A:2D:24:38:91:EC:25:B6:59:62:B6:65:AE:DF:50:A1:EA:2A:04:AA
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858474B1B549C1FC7ACDED26E3980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca057c80-f0d7-36c5-8577-0eb8d1ae7e7a.roa
Signing time: Sun 22 Sep 2024 01:00:32 +0000
ROA not before: Sun 22 Sep 2024 01:00:32 +0000
ROA not after: Sat 21 Dec 2024 02:00:32 +0000
asID: 45671
IP address blocks: 172.111.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:4b:1b:54:9c:1f:c7:ac:de:d2:6e:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 22 01:00:32 2024 GMT
Not After : Dec 21 02:00:32 2024 GMT
Subject: CN=f13fa4f1-5712-40ac-b1c5-7a7d43b32f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:8c:db:74:b4:64:84:c2:51:f2:67:12:e7:
0a:15:76:19:5a:5c:de:b4:05:9f:7f:21:14:b8:b7:
90:cf:39:df:b3:9a:f4:63:3f:a9:1b:a5:5a:32:56:
f7:9e:b9:83:bc:29:11:74:4e:13:63:a2:19:42:20:
91:16:da:dd:20:9a:43:a1:f1:1e:51:1c:3c:8d:b2:
4c:6b:0d:02:d0:8b:6d:c6:7c:29:54:b6:97:27:aa:
81:ab:66:9e:67:c8:5b:39:e0:c5:02:f6:64:91:ce:
82:a2:94:95:19:7f:4f:04:6c:37:88:6b:4e:21:50:
f2:11:ea:a1:a4:f3:a0:46:60:d4:ca:4d:c0:4e:13:
f5:4b:fc:3d:15:86:19:c9:b0:2a:a6:1a:b9:20:c0:
39:b3:be:01:8b:dc:6c:da:96:5a:7c:ec:64:0e:4c:
8f:c6:d2:a4:2f:2f:60:d6:fe:f2:f7:d0:38:12:ff:
77:37:e5:62:4d:9b:8b:37:b2:e4:8a:5b:16:82:94:
9b:bd:c9:11:7b:ef:8f:dc:99:3d:a6:08:a0:7b:5b:
3b:e6:88:48:e7:79:5f:c1:15:e8:d0:32:6d:33:46:
85:3c:1d:04:13:39:66:54:fb:6b:da:38:ab:33:67:
85:0f:14:fa:7f:92:67:f0:22:b5:be:fc:45:c4:52:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2D:24:38:91:EC:25:B6:59:62:B6:65:AE:DF:50:A1:EA:2A:04:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca057c80-f0d7-36c5-8577-0eb8d1ae7e7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:f3:22:03:e6:6e:3c:72:43:9d:22:78:f7:af:f4:f3:dd:d6:
f7:de:b9:cf:98:89:17:55:85:2c:e4:4d:c7:8b:25:55:87:82:
49:51:86:69:02:d9:15:fd:7b:96:ab:a9:fd:cb:82:8d:a0:3e:
b2:09:ea:e7:a8:49:1e:76:4f:35:40:39:d7:13:e1:c6:11:63:
6d:e8:27:5f:2e:20:03:a7:ab:af:46:1e:fb:c0:60:90:ed:82:
e6:eb:10:31:0c:94:6c:1b:66:a8:77:43:af:08:9f:8b:b6:88:
a9:63:b8:e8:ac:ae:4b:d1:f8:ac:23:33:22:03:03:81:f2:3f:
99:65:c5:2f:cc:f8:19:d3:68:1c:89:d1:44:38:45:74:47:74:
45:e3:c4:4a:bb:19:c2:26:29:70:72:2c:33:6f:9c:1d:58:a4:
36:07:26:04:cc:c3:05:c3:35:fb:71:f1:c0:bf:5e:c9:18:af:
70:0b:19:2a:4b:f9:c5:1c:95:55:26:9e:8f:10:c4:0b:53:7b:
7e:10:09:51:7d:3d:d8:5f:5e:91:87:92:9e:29:92:f8:63:9e:
26:16:04:4f:6f:30:06:06:6c:c6:98:9b:a2:37:0c:34:2e:86:
32:31:33:64:cd:5c:ca:2b:6e:48:f1:8d:58:d2:85:c0:9a:9f:
05:f0:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:33 2025 by rpki-client