Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/94305331-41e8-317a-9217-cc9d1977f53f.roa
File: 94305331-41e8-317a-9217-cc9d1977f53f.roa (raw, json)
Hash identifier: zCIC+9O1szVWYA8DBy8JRRGr+FouIsrzxRTlNT1pfw0=
Subject key identifier: 25:5C:A6:29:48:A2:C4:E6:9B:62:C4:A7:89:E3:50:A6:80:8F:3B:F6
Certificate issuer: /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Certificate serial: 010D0C9F4328584857E5E68BAF5EE41C507D4E00
Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/94305331-41e8-317a-9217-cc9d1977f53f.roa
Signing time: Fri 27 Dec 2024 07:45:26 +0000
ROA not before: Fri 27 Dec 2024 07:45:26 +0000
ROA not after: Thu 27 Mar 2025 06:45:26 +0000
asID: 30006
IP address blocks: 23.169.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:e5:e6:8b:af:5e:e4:1c:50:7d:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Validity
Not Before: Dec 27 07:45:26 2024 GMT
Not After : Mar 27 06:45:26 2025 GMT
Subject: CN=c17cc8fe-8943-4364-9cd9-f8c0c67f5bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:60:9a:f1:c5:59:34:5e:7c:cf:35:20:d5:2f:
05:60:87:22:86:91:53:ff:6b:69:9c:c5:42:76:b0:
c7:b8:b5:ab:f3:f9:9b:44:78:db:5a:3b:7d:f8:1c:
2c:44:85:a3:56:7f:fc:52:94:97:e1:fa:03:ff:2a:
de:58:aa:62:a9:47:51:ec:78:28:de:ac:7e:8e:62:
d3:7d:da:73:79:af:dd:a9:ae:99:42:f1:72:e3:e4:
f2:c4:f0:c8:2c:52:3d:d4:22:2a:b3:ac:5a:fa:80:
55:90:ec:da:3e:15:f7:d3:ff:b8:94:8a:a1:82:e7:
d3:78:f4:82:36:50:8c:6a:82:dd:01:58:1f:6e:7c:
5f:35:61:e7:8b:29:00:42:3d:1f:c8:ae:95:6d:21:
c8:a7:bc:85:b5:3f:17:13:9b:2a:b3:ff:ad:d4:95:
b6:c6:56:fe:22:3d:d1:aa:47:14:be:96:6c:fa:c2:
9c:e0:35:71:97:cf:d6:bb:3b:69:3e:36:23:8a:0e:
4e:8e:b5:ec:09:f6:1b:4b:ec:ad:07:78:57:e1:f3:
2c:dc:88:40:2f:b7:54:1f:f2:e5:39:0f:c2:3e:15:
3b:85:d8:08:aa:ce:f0:ec:6b:5e:0f:84:28:0e:42:
3e:98:a1:c3:38:65:c5:b0:d5:0f:29:a9:b0:1d:fd:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:A6:29:48:A2:C4:E6:9B:62:C4:A7:89:E3:50:A6:80:8F:3B:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/94305331-41e8-317a-9217-cc9d1977f53f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl
X509v3 Authority Key Identifier:
keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:b3:0a:47:b5:07:64:2a:c1:d0:d2:5b:cc:0e:fe:88:63:61:
10:3a:a6:83:ac:62:1b:8d:59:f2:d4:fd:1b:d9:9b:38:30:7a:
84:57:fa:5f:02:f3:e3:da:4d:67:ec:24:b5:36:bf:0d:26:93:
3d:f0:5c:77:ec:fc:08:de:f0:41:ea:f5:5e:85:db:9d:1f:2f:
52:7c:02:aa:d7:a0:30:73:be:2f:05:16:ab:30:cf:18:9f:84:
8f:63:0f:a4:3e:c7:71:2b:1e:f5:66:15:90:6e:b6:38:ab:d5:
88:33:ac:d7:ef:7e:a3:e4:d3:f9:12:da:cc:35:51:a3:09:53:
db:54:70:1a:03:5c:d8:45:d4:ed:7b:a9:a9:91:b9:19:e0:61:
d0:8f:02:d8:f2:dc:5b:0f:6c:2b:50:26:e6:e0:50:81:e7:62:
84:09:6d:da:69:36:eb:e9:a9:2b:1c:89:69:4b:7a:9b:7a:fd:
42:fc:29:19:44:e2:f0:96:3e:db:bc:32:5e:03:6f:97:21:9f:
9c:87:0a:22:5a:72:5c:58:37:ab:32:88:58:49:f1:ad:75:b7:
f5:23:d6:4f:87:45:c7:df:fc:57:52:36:76:31:6c:7a:96:5d:
a1:41:08:7d:fb:5d:87:40:07:94:1d:82:b8:bf:ff:cc:e8:1b:
dd:ed:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:07:42 2025 by rpki-client