Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/6306e1d4-971f-36b1-935f-6798b08f646c.roa
File: 6306e1d4-971f-36b1-935f-6798b08f646c.roa (raw, json)
Hash identifier: 8Uyis+Sb5tPckrN+iknYvcF2RpRNl4gz5cWn9hJvizI=
Subject key identifier: B0:5B:FD:3E:7A:36:17:57:40:85:AE:A4:73:9B:62:7A:4E:D8:BF:AE
Certificate issuer: /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
Certificate serial: 010D0C9F4328584807AA69471CD4E5ECBB7C9380
Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/6306e1d4-971f-36b1-935f-6798b08f646c.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 23.187.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:69:47:1c:d4:e5:ec:bb:7c:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=6371928c-060a-4307-b2d1-74f14c2fb98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:c5:a5:88:c3:8d:d0:17:1d:ee:e8:65:ea:
34:e3:8d:5b:f9:e3:4c:d2:fc:dd:0c:4f:45:9d:d7:
75:b8:9e:1c:26:b4:cc:f3:71:e2:47:6a:0c:bf:7c:
65:cf:ba:15:cd:ed:cf:9d:ff:f0:f4:52:1b:f7:69:
8c:4f:c2:99:10:84:bf:d9:f7:3b:ab:5f:0d:27:71:
b3:4b:f8:06:53:8a:92:9f:68:57:59:80:1a:7b:b4:
90:ba:f6:29:14:f7:ba:fa:1b:40:79:84:be:ab:f4:
92:5d:a1:94:d0:70:95:cb:b9:6d:ee:1a:77:7e:f8:
c3:ed:10:9e:72:a8:b5:11:df:70:e0:4f:2b:0a:c8:
07:79:16:e2:e7:7b:a9:c6:8a:45:2b:d6:34:8f:b3:
18:90:44:d1:94:6d:fd:61:8b:35:d7:50:64:67:a5:
20:af:86:99:30:cc:d9:45:c0:82:ae:8f:dc:99:71:
48:a5:d0:6a:54:6c:02:b3:a3:d1:04:bb:90:02:dc:
bb:03:a4:0c:33:64:b2:e9:c4:dd:20:6b:81:b6:08:
4a:a1:19:ef:ce:1b:17:86:c1:1c:82:b6:65:c1:be:
13:41:b7:1a:29:b8:b3:d0:c8:21:68:1e:05:03:0d:
f1:eb:e9:db:61:80:e7:e5:02:f9:a0:9b:0b:13:67:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5B:FD:3E:7A:36:17:57:40:85:AE:A4:73:9B:62:7A:4E:D8:BF:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/6306e1d4-971f-36b1-935f-6798b08f646c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl
X509v3 Authority Key Identifier:
keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:14:a7:86:e5:50:f2:ce:14:17:a4:f2:5b:24:d3:de:9d:11:
82:c0:49:f4:c4:a8:34:a6:41:1c:74:de:78:9f:e2:57:c1:7c:
27:83:c0:d6:e5:8f:82:d9:5c:a7:22:c9:5f:97:e5:8a:52:8e:
83:5c:f6:82:7e:b2:87:0b:ae:67:2a:ec:66:c6:26:26:77:27:
45:ef:2b:1e:ce:91:1c:3c:9b:ad:b3:90:3f:f3:e4:e2:b4:9d:
73:e6:47:85:ec:9f:3d:1e:d7:e2:0c:d4:42:eb:fe:77:d9:a4:
00:47:82:ce:c6:1e:fe:d2:a9:f3:da:20:69:a3:cb:df:09:3b:
84:33:69:23:1d:b7:4b:68:fe:dd:2d:6a:47:63:f3:f8:f1:d2:
d7:a8:eb:81:62:56:06:43:e7:af:9e:86:3e:dd:98:1b:d8:1f:
64:8b:ea:44:3b:a0:4d:89:34:cf:5c:84:71:69:47:5e:f6:ea:
e9:e2:57:18:be:fc:a8:8f:32:47:57:5f:b3:91:a6:ba:41:fc:
88:7b:0d:2d:e1:f1:2c:f9:d6:d6:7e:04:90:6a:84:4b:e6:a3:
49:8a:d9:32:30:3b:cf:4d:67:98:09:b7:fd:bf:be:ad:37:82:
ff:4f:8d:c2:2d:c9:00:d3:a2:5b:1e:4a:40:c3:55:06:23:8c:
1e:69:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:40 2025 by rpki-client