Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/daf4c89e-f6ea-3914-8e43-6d6fc8dacec1.roa
File: daf4c89e-f6ea-3914-8e43-6d6fc8dacec1.roa (raw, json)
Hash identifier: +6VzTzaJ0Wl9FRQy6XC5ZXcUsjR2KxYqIv2S5pzel5o=
Subject key identifier: BB:AE:F9:85:0C:BD:F3:42:89:6D:EF:D1:4F:45:45:29:37:D6:3C:69
Certificate issuer: /CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Certificate serial: 010D0C9F4328584812D526B86E70E51A3B9B3680
Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/daf4c89e-f6ea-3914-8e43-6d6fc8dacec1.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 7029
IP address blocks: 23.189.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:26:b8:6e:70:e5:1a:3b:9b:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=b70dfca8-833e-4096-9f7f-9ada70381d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:34:e7:77:08:cc:db:d4:1d:c9:48:e5:93:
5f:6f:b8:9b:53:d2:6c:c1:cb:02:49:95:b6:6e:a1:
b5:5d:d4:a4:5a:c6:73:4f:a5:4f:85:03:60:e6:8b:
a4:df:df:41:b8:cb:40:4d:02:90:33:fc:0f:59:4a:
ff:b0:3a:18:e1:23:69:0e:ba:1b:ee:1c:a2:e7:e5:
9c:31:d1:bd:d7:3f:b3:6b:1e:56:d4:48:4f:6d:91:
5b:43:97:0f:d7:9d:73:1d:35:18:27:0f:67:09:9d:
6e:af:9c:de:7a:04:28:00:22:21:bd:0e:8a:0e:ca:
cc:70:d5:b9:42:dc:d2:af:d2:24:75:ac:2f:c3:08:
18:40:ff:e0:62:9e:df:21:00:10:ee:d8:72:b6:89:
58:bb:30:56:8a:7c:15:69:f8:64:96:4e:49:54:97:
3a:26:32:ce:d0:4b:9c:68:52:ae:87:ee:40:68:2f:
21:2d:28:20:ff:93:be:71:f7:d3:d9:a5:f3:d5:50:
ea:e0:61:e9:fe:8f:bb:e1:6f:67:3c:7e:fe:4d:d2:
97:a5:61:af:75:3c:40:e6:8d:f3:d5:4f:da:7d:9f:
1c:ea:35:be:77:f0:e1:ee:d5:22:54:64:65:0d:48:
34:28:cd:88:72:a3:e3:dc:3a:ea:a6:e0:80:24:4d:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:F9:85:0C:BD:F3:42:89:6D:EF:D1:4F:45:45:29:37:D6:3C:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/daf4c89e-f6ea-3914-8e43-6d6fc8dacec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl
X509v3 Authority Key Identifier:
keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:3a:b0:6d:62:15:2f:59:25:ee:14:25:d0:ab:d5:c2:15:78:
12:71:9c:94:44:6e:1b:93:70:df:0e:90:b8:e9:d2:64:b4:2d:
8f:cc:93:be:fc:57:43:e4:99:d8:6a:b8:0e:41:98:fb:bd:b0:
96:e7:4c:cb:2b:c9:38:77:32:3c:00:08:44:44:d4:6d:fb:f8:
15:22:31:d3:99:45:e3:43:b3:9c:45:8a:65:00:15:87:10:7a:
80:d0:11:f4:14:9c:11:b7:7c:f5:d1:ba:e5:cd:1c:c2:42:3a:
f4:3e:be:a3:1b:94:3d:90:4c:5c:78:0b:a1:1d:e8:ae:41:c4:
ef:a1:2d:e3:60:7d:9f:32:a7:98:da:ab:9b:7f:cc:93:46:b1:
ce:d1:bc:d6:db:47:cf:78:fc:77:1a:1c:2e:47:ce:05:f9:88:
c7:59:9a:6e:34:75:b3:34:79:75:d3:f8:87:96:49:e0:2a:aa:
14:a0:dc:cb:75:98:c2:07:15:0f:11:1f:03:d6:3f:70:d8:31:
6e:7f:0f:4a:87:d5:1c:44:07:7d:cf:dd:8a:57:34:77:21:83:
14:47:11:e8:13:f1:8d:8e:90:4d:72:40:bc:9a:7b:d3:cd:e6:
6e:4f:fd:2b:9e:35:2b:21:09:4a:4a:d4:19:ec:4e:4e:fd:21:
79:14:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:05 2025 by rpki-client