Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/8476de12-60e8-3331-ad6b-1ff7149cd2fa.roa
File: 8476de12-60e8-3331-ad6b-1ff7149cd2fa.roa (raw, json)
Hash identifier: gPziY7EkHzLKdN6ZdSnp8Hr6EMZEysRyjMMxFF/XV14=
Subject key identifier: 9B:3F:8A:B3:9F:84:23:2C:EB:57:05:66:88:80:F2:FD:9E:F2:7A:1E
Certificate issuer: /CN=791130fd-44cf-4486-92b3-7838b38e49ea
Certificate serial: 010D0C9F43285848186A91FFFC79FCDD4C1EBF80
Authority key identifier: F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/8476de12-60e8-3331-ad6b-1ff7149cd2fa.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 150698
IP address blocks: 23.157.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:91:ff:fc:79:fc:dd:4c:1e:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=791130fd-44cf-4486-92b3-7838b38e49ea
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=b64607bd-24d5-4b28-be40-cf54281687ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:f4:dc:49:50:7a:9d:e7:ef:cf:a3:15:1c:
0a:b9:5c:fc:8e:f1:88:b3:9a:10:56:7f:09:a4:58:
76:33:46:1e:72:7d:e3:20:de:97:5b:63:ba:7a:d2:
ba:0e:d0:2d:d3:a8:7d:8b:ed:41:8d:60:c7:73:a2:
32:aa:33:12:c6:a3:db:ca:a0:12:0d:1f:0b:d7:de:
a8:d8:cc:76:01:c8:87:7d:68:9f:b3:2c:09:07:d0:
49:ec:91:70:6a:fa:f3:19:7d:c0:74:88:43:71:db:
36:6c:2e:22:5a:89:45:7f:d0:b0:8a:61:1a:cb:90:
04:d1:cf:61:f4:9b:03:b9:c5:de:2b:c8:0d:32:75:
5d:77:fa:12:92:f9:62:54:a3:cf:9d:ce:12:cf:49:
bf:1e:72:a1:38:b7:05:8c:ae:db:fc:87:2a:a8:4a:
8d:d0:7e:7a:22:b8:4e:1a:f1:c6:8c:a1:67:ce:f7:
af:15:29:24:68:13:8a:4e:6d:a9:3a:69:74:07:ce:
1f:82:48:60:c7:60:2a:37:fe:8e:9a:72:20:ea:90:
9b:48:a0:4f:73:e7:2a:a3:d2:2c:28:28:6d:26:25:
67:9f:fe:6c:60:8a:b0:09:cc:c8:4c:78:ab:96:0c:
7a:20:4b:e8:30:b3:c5:e3:e5:e1:53:f4:27:bd:1d:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3F:8A:B3:9F:84:23:2C:EB:57:05:66:88:80:F2:FD:9E:F2:7A:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/8476de12-60e8-3331-ad6b-1ff7149cd2fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl
X509v3 Authority Key Identifier:
keyid:F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:10:89:f6:a3:ae:f8:06:60:7e:01:d8:c3:04:ca:97:1f:56:
21:af:37:cf:01:90:1b:15:bd:53:77:39:64:dd:eb:58:a3:d0:
31:47:2b:cf:27:b3:b4:38:32:bb:fd:bd:c8:22:bf:a4:d3:fc:
00:2f:2c:10:ab:01:3d:42:e5:97:71:ee:80:85:b9:8a:26:34:
87:a1:dd:2b:ac:76:7f:45:be:d6:fe:99:bc:5d:c3:7f:ae:0d:
6c:49:d9:af:3e:47:18:6b:f4:ea:6b:c2:20:64:6b:c1:5f:31:
4e:a2:48:e0:8b:38:fb:93:28:7d:a3:8f:d8:98:ad:c2:4d:a1:
f9:f8:fd:34:73:3a:e3:17:ad:5a:90:75:a6:2f:17:22:be:74:
08:8b:d6:56:40:2e:ad:ba:ab:d8:0f:1f:45:1d:e4:8b:24:b3:
b7:0e:b5:37:d9:29:ed:77:56:d0:48:34:90:cd:c5:50:24:c1:
45:de:6e:18:60:11:58:dc:37:2a:f2:eb:bc:dc:a5:b9:b4:16:
6c:3a:70:e1:a0:56:28:d9:6b:34:14:01:f2:02:71:bd:58:de:
46:2f:dd:56:3f:44:b4:48:39:c2:28:cb:52:3d:5b:3b:3b:5b:
fe:02:b9:9c:03:19:a1:57:6d:d8:b8:f5:74:b7:71:f5:ca:33:
fc:f6:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:02:04 2025 by rpki-client