Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/17583a28-1017-3fe9-8893-cabdaa82d2da.roa
File: 17583a28-1017-3fe9-8893-cabdaa82d2da.roa (raw, json)
Hash identifier: ZUntEotoUj58fy166z7zSg8HpQt3WSIaa9fgZ0N5y0A=
Subject key identifier: 36:95:C3:F8:16:39:C7:19:D0:9A:81:6E:C0:8A:1E:D6:1C:6B:2C:CB
Certificate issuer: /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
Certificate serial: 010D0C9F4328584841E00EA9DB3551D13ABBCD00
Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/17583a28-1017-3fe9-8893-cabdaa82d2da.roa
Signing time: Thu 19 Dec 2024 10:25:53 +0000
ROA not before: Thu 19 Dec 2024 10:25:53 +0000
ROA not after: Wed 19 Mar 2025 09:25:53 +0000
asID: 6079
IP address blocks: 23.189.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:41:e0:0e:a9:db:35:51:d1:3a:bb:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
Validity
Not Before: Dec 19 10:25:53 2024 GMT
Not After : Mar 19 09:25:53 2025 GMT
Subject: CN=9bfd12f3-20f9-4c86-b316-02d58e493049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d8:83:dd:ec:36:f8:f5:93:ab:90:38:87:6c:
4d:8c:d2:eb:36:64:42:9e:5d:1d:df:28:9c:f9:35:
34:cd:2d:a2:78:ff:b6:0d:b5:22:bd:ea:ef:2a:c9:
5a:fc:e9:e9:da:96:7c:a6:ad:64:d7:f4:db:f0:4e:
8d:0a:48:ae:26:90:8c:5c:2f:3b:15:f6:71:b0:d3:
80:2d:d2:04:01:7f:80:7b:0c:c2:ad:0d:e3:e7:8d:
a6:03:48:5a:7e:fc:99:35:64:89:52:4c:dc:81:b0:
05:f7:f8:e3:b2:28:c7:3e:f2:01:6e:16:26:43:77:
e2:0a:db:d9:d8:c3:9e:17:83:c7:5d:b5:3a:d4:2b:
6e:0e:1f:dd:ce:03:fd:a7:d9:c2:7e:29:95:fd:fc:
ca:3e:2f:9d:73:cd:3b:d0:b5:e8:c4:02:e7:28:60:
98:03:08:d9:43:c1:25:5e:27:49:01:86:21:28:cf:
2c:38:9f:f4:b3:5a:d5:bf:29:cb:8e:93:c4:f7:2c:
10:ca:e1:48:a3:7b:45:3c:87:1f:96:2c:19:26:0d:
e7:0e:67:ee:b0:0d:5c:37:f5:ee:63:e9:cc:60:8a:
c8:9a:a8:75:0b:9d:fb:63:95:43:2e:90:1b:ab:da:
5b:06:4e:23:da:6e:1a:b8:84:96:87:d0:3a:8e:f1:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:C3:F8:16:39:C7:19:D0:9A:81:6E:C0:8A:1E:D6:1C:6B:2C:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/17583a28-1017-3fe9-8893-cabdaa82d2da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl
X509v3 Authority Key Identifier:
keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:df:5c:bf:25:2a:bd:9a:69:5c:3f:67:b6:95:88:bc:ed:20:
a9:44:ee:c4:f8:37:e7:f2:e8:a0:2b:44:1e:54:f2:74:2a:95:
ac:79:d3:30:2d:58:b1:c8:58:b6:6e:43:d1:4f:bf:bd:4b:39:
a5:87:75:02:fd:6b:2b:41:1e:86:c4:e7:b3:d1:68:f9:28:5d:
e3:d7:4a:fc:32:f8:44:03:c2:a1:18:e0:34:e4:d0:f6:d1:e8:
7f:cc:5f:b0:5b:ce:8d:34:1d:0a:3b:69:51:c2:3a:c3:78:0b:
20:b2:23:2c:54:d8:1e:03:55:42:55:f7:5e:58:73:6c:f9:99:
23:e0:d1:91:7d:7c:77:96:5c:de:44:e7:fa:62:d1:d7:2a:e1:
e0:56:b2:4f:2f:4b:32:d3:8a:aa:81:a7:c0:e0:4a:6f:31:3b:
b5:06:4c:ef:46:84:c6:63:31:54:7d:68:a4:53:70:07:80:b2:
16:d5:01:ff:ce:a8:f4:5a:e5:7c:26:ec:90:74:d3:52:a6:84:
23:0b:3e:d5:e2:02:9b:75:8c:aa:e0:68:63:4b:e4:76:6f:7f:
6d:d9:cd:65:2b:30:86:4e:70:05:e3:08:b4:46:cf:99:00:af:
92:78:2b:aa:c3:5b:1d:9a:85:b1:cb:0e:3d:be:95:6c:5b:09:
3a:47:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:24:19 2025 by rpki-client