Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/3050968f-8f2d-31ba-8a13-c4182f541edc.roa
File: 3050968f-8f2d-31ba-8a13-c4182f541edc.roa (raw, json)
Hash identifier: fUVzRrnUpyJbp4QZGzb5nMx59Qgv5OmP8K5R07Be39Y=
Subject key identifier: 52:F3:B7:19:6A:93:FB:B4:F4:E1:47:48:B8:85:97:CE:24:31:A0:77
Certificate issuer: /CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47
Certificate serial: 010D0C9F4328584861004AD0BDD2572954F16E00
Authority key identifier: 38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/3050968f-8f2d-31ba-8a13-c4182f541edc.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 400859
IP address blocks: 23.189.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:4a:d0:bd:d2:57:29:54:f1:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=e57e321b-c798-4634-a3b4-b1ff33be8336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:a0:f9:17:77:7a:9d:a9:0b:08:06:f6:c6:
e2:04:80:97:88:3e:cf:58:e6:39:84:b3:7c:41:2c:
3f:2e:9e:2a:f9:37:64:8e:27:df:ad:b4:d9:1a:3d:
42:af:a9:4f:23:03:d8:31:ba:72:77:a2:2f:d3:bc:
65:69:6a:55:b8:5f:5d:34:c5:4d:e7:38:52:2a:14:
18:bf:6b:39:41:86:93:bd:80:92:39:01:9d:f3:ef:
7a:9e:a6:8e:23:af:4b:3e:34:36:35:cf:3d:43:3c:
d2:4c:72:ef:b1:ba:e0:75:b8:1d:e5:b7:90:d6:d7:
d4:9c:c7:b6:56:b2:e2:9a:8a:e8:cc:8f:f9:0a:3b:
c7:4c:c2:b8:cf:94:c5:4a:c2:a3:57:1f:ba:80:00:
0f:24:d4:41:b3:5d:f9:6c:11:e2:03:0e:12:a6:68:
01:5d:a8:d4:6d:1c:16:94:d7:bb:a0:b2:7d:ce:e1:
82:e7:1b:2b:35:31:fa:96:05:8f:30:9d:1a:bc:ed:
90:9b:5d:10:9f:12:5e:b8:8e:1d:46:7b:48:35:d6:
02:65:0e:0f:66:2b:16:d9:e3:b5:80:54:47:5d:53:
de:57:4e:db:83:e0:65:9a:62:03:68:63:b2:a1:b9:
3e:20:f4:d1:77:d2:b1:e4:9e:63:68:6f:cc:83:18:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F3:B7:19:6A:93:FB:B4:F4:E1:47:48:B8:85:97:CE:24:31:A0:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/3050968f-8f2d-31ba-8a13-c4182f541edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.crl
X509v3 Authority Key Identifier:
keyid:38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:ce:23:18:86:d7:d2:bd:4e:8f:53:94:92:ad:ab:0a:53:38:
fb:20:a5:d9:90:ee:78:43:da:36:1a:dd:b2:cc:92:17:ac:3f:
39:ed:77:b0:da:9b:a7:26:11:cc:a1:92:2e:7a:4d:ef:d0:7a:
83:0a:19:11:9d:3e:0b:8f:6a:c9:a9:f5:44:af:8d:37:8d:3c:
7a:11:45:72:f7:7e:3d:6a:94:dd:08:57:41:8d:00:38:cc:3b:
e8:c7:56:18:14:54:d3:c3:3a:db:2c:aa:fe:8f:5a:74:d3:b5:
df:50:b5:b6:fd:ae:aa:35:8e:e5:cd:3d:56:d2:4a:eb:50:59:
be:e3:a8:08:d2:22:a5:82:60:7e:e0:3b:cc:ca:e3:ff:36:5a:
77:cc:30:5c:b0:61:8d:bc:5c:1a:18:99:7b:95:5c:b1:e8:21:
45:b1:04:ab:2b:8e:8a:24:9e:f3:76:c7:32:88:14:9c:a5:2a:
48:2c:14:f5:7b:f1:df:04:59:b6:31:f2:0b:92:2c:ee:af:1e:
ef:27:c0:8c:57:16:3d:b4:e8:ba:a7:1a:bd:7b:8e:a6:38:01:
27:8d:36:b3:88:e1:ff:62:54:48:20:0e:a3:7a:a9:2d:88:e5:
72:d5:73:91:19:9c:6a:c6:b6:93:49:cc:49:ed:1d:ce:ec:2c:
52:02:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:22 2025 by rpki-client