Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/9131223f-86e0-31ad-a13c-eae4ee54cdbf.roa
File: 9131223f-86e0-31ad-a13c-eae4ee54cdbf.roa (raw, json)
Hash identifier: oehN8eEiRbigXk9Jt1nOcKS+xXSkty7A28X2QV4+lQE=
Subject key identifier: 65:78:E6:F8:53:12:52:41:18:CB:CA:08:25:68:15:8C:6B:0D:B9:D0
Certificate issuer: /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
Certificate serial: 010D0C9F43285848239540593876B49E34399200
Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/9131223f-86e0-31ad-a13c-eae4ee54cdbf.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 400859
IP address blocks: 23.189.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:40:59:38:76:b4:9e:34:39:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=81986f7e-b349-42d1-9923-ff34183ecd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:34:a2:15:c8:5f:88:a8:d5:58:d6:1a:30:
aa:35:49:9b:5e:de:e8:a9:e9:4f:7b:59:43:fe:10:
d2:ad:18:db:6b:c8:ea:e8:f2:06:d2:0d:95:f1:58:
b0:d0:2d:fb:bf:62:a6:50:b7:40:2d:5f:5e:54:ad:
32:c3:7a:92:3e:6a:2c:9a:05:02:ae:ec:6b:7b:64:
d1:10:cc:2b:a8:82:30:6d:a5:39:bc:58:fc:57:01:
3d:25:7b:60:d0:36:55:fe:61:34:26:bc:0f:01:b4:
39:a9:5b:b2:ff:53:f0:04:40:95:fe:80:7f:5a:46:
19:e0:91:d8:fb:dd:64:85:d0:4c:66:64:f4:75:3a:
86:d8:b4:5f:3c:46:43:60:a5:b2:7f:69:ad:b9:85:
6a:4c:e8:0c:ba:d2:61:18:05:f5:7a:5b:3e:8e:47:
ca:65:eb:69:9e:a3:4b:7b:70:75:e5:44:a7:f3:99:
81:98:94:b9:a7:9f:c7:74:68:77:28:d8:3c:a9:76:
8e:f9:2f:b1:b5:bc:ed:1a:c5:57:d9:4b:f7:6f:a2:
16:ee:90:25:87:80:0e:82:ac:48:55:95:49:e3:a9:
26:62:13:c1:e8:be:a8:3c:b4:29:84:38:1a:4a:e8:
e9:82:b0:31:82:7c:3b:f2:99:4d:c1:2a:03:12:57:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:78:E6:F8:53:12:52:41:18:CB:CA:08:25:68:15:8C:6B:0D:B9:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/9131223f-86e0-31ad-a13c-eae4ee54cdbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl
X509v3 Authority Key Identifier:
keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:6b:41:62:77:f1:24:eb:cb:89:fa:a8:89:cd:73:cc:55:80:
c3:ea:7f:e7:d3:6e:38:67:40:57:4e:a6:a5:7f:c0:94:26:a2:
bd:28:41:e7:18:0b:cf:c8:c2:9c:79:12:a3:15:ae:bb:c9:60:
98:c8:ce:2f:a8:a1:aa:fc:ed:98:f6:f0:68:d0:ae:ea:fb:9d:
cf:12:50:5f:82:0f:57:00:d6:17:69:49:5f:a7:d1:87:eb:3e:
49:f1:69:97:f0:d8:17:8b:7e:bb:32:1a:b6:d1:38:f8:83:85:
06:63:00:d4:00:14:12:21:b9:9c:a6:82:58:21:67:46:c6:38:
a7:88:e1:b8:a8:26:e1:74:3f:d6:40:ec:4d:94:a6:a0:ca:15:
97:e1:26:53:fd:7f:9f:cb:1b:08:f9:94:4c:e2:7b:08:ca:c8:
1c:82:96:ff:28:14:fb:ea:38:ff:8d:fa:3b:17:9f:a6:31:87:
d7:3d:f7:9c:13:68:e2:af:bf:67:26:df:81:37:fe:d9:d6:6c:
64:8d:49:56:91:1f:c8:ab:df:40:00:cc:05:58:0a:a4:fc:c2:
18:32:a4:2b:e8:8b:cd:53:23:bc:26:24:90:bc:d1:31:0e:d3:
8b:9e:c0:b6:02:8e:8c:37:2a:99:85:e6:38:79:8b:c8:90:48:
0b:4d:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:07:11 2025 by rpki-client