Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/a2071ca8-8a30-3fa1-95c3-b1274082e1f9.roa
File: a2071ca8-8a30-3fa1-95c3-b1274082e1f9.roa (raw, json)
Hash identifier: PCMbDte3Pr/oKID5w8opSzk3SdI7nMWVSxjt1MgQDIQ=
Subject key identifier: 5A:1F:EF:F4:DF:76:32:FF:94:20:DA:96:5E:C6:04:10:15:E8:E3:60
Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial: 010D0C9F432858484D759547750F586DEA618B40
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/a2071ca8-8a30-3fa1-95c3-b1274082e1f9.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 4755
IP address blocks: 23.136.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:95:47:75:0f:58:6d:ea:61:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=4f87d1f1-c294-4e78-995a-b660a7cf71a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:d5:da:af:9f:36:0a:51:6e:0e:e5:ef:15:
7e:37:7b:53:8a:b7:2d:e3:fc:49:d5:3f:df:fa:ee:
1b:6b:f1:2a:fd:d6:7c:f4:a2:3b:f9:ab:01:e1:d8:
c4:97:23:24:2c:ae:9e:89:41:bc:c2:5c:70:7c:19:
00:82:79:d9:d9:58:4d:fd:9f:68:cb:d6:7e:87:4c:
1e:ff:7f:ba:15:04:a6:45:24:c1:0d:da:44:c6:ea:
48:20:9c:0a:c2:42:75:eb:95:00:78:0e:ee:d3:c6:
63:3a:cd:5c:01:98:c0:73:7d:54:4a:0b:2e:12:d7:
78:ea:fe:03:4b:97:9b:d8:5e:cc:8e:56:57:be:48:
72:cd:fa:b6:f6:19:75:d6:bb:bf:dc:e8:e2:02:00:
d4:57:fe:f8:de:a4:87:e4:6d:58:77:12:8e:5c:93:
0e:4c:6b:7d:2e:4d:e6:57:4d:d8:fe:d3:22:a0:d0:
17:3a:b8:7d:ed:47:9f:6a:22:67:a8:29:b7:d4:e9:
0d:29:87:28:71:95:77:3f:03:4a:a9:ad:5e:47:4d:
50:03:55:fa:43:78:2d:9b:74:62:d3:45:1c:5c:65:
03:e8:b9:a1:03:e1:23:a2:7a:24:d7:13:c2:1c:3f:
e0:e7:52:e1:e4:86:c0:a9:46:5a:b4:d5:7d:ce:38:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1F:EF:F4:DF:76:32:FF:94:20:DA:96:5E:C6:04:10:15:E8:E3:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/a2071ca8-8a30-3fa1-95c3-b1274082e1f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
X509v3 Authority Key Identifier:
keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:90:b8:c5:e5:ec:a8:8c:5c:0f:bb:ab:35:2e:bc:4b:81:94:
62:f7:36:b4:f8:d4:30:3a:d7:85:c4:7b:b1:0c:aa:21:46:b1:
81:8c:04:93:c5:6b:a3:24:d9:17:87:82:19:c4:8c:99:e4:aa:
10:e5:a2:61:80:45:62:ee:03:52:4b:86:2e:58:32:9f:f4:e9:
d7:0a:fd:a4:e9:79:1a:72:67:e2:d3:c0:f0:2d:46:fe:8a:f8:
e5:af:3c:c3:51:38:ca:44:3f:3e:f5:b3:54:b1:e3:4c:e1:70:
eb:f5:fe:cf:7a:f5:01:1e:18:77:b1:ae:ef:55:a2:36:54:7d:
2f:27:5b:f5:64:41:ce:60:07:60:9c:63:3f:5a:10:2e:87:1b:
09:95:72:da:fd:e2:2e:81:57:5f:0f:18:be:3c:e9:1b:44:3c:
1a:61:1f:9d:6d:b7:1c:3e:52:73:ac:88:59:2a:61:30:2e:9b:
f7:b1:7c:2f:22:2e:13:6e:07:90:7e:2c:d8:df:02:08:63:b9:
ef:e7:70:5f:c0:9f:c8:ed:69:68:fd:bd:81:1c:40:48:77:3c:
db:e6:81:3f:4b:19:75:b8:a2:f4:75:e9:3c:bd:5f:d7:17:e3:
a7:ba:8a:86:f7:83:a5:f7:e6:e1:dc:6e:da:6e:79:3d:54:1a:
aa:3a:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:40 2025 by rpki-client