Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/0fd6fb70-f735-39b4-be34-4ae6851d9ac1.roa
File: 0fd6fb70-f735-39b4-be34-4ae6851d9ac1.roa (raw, json)
Hash identifier: Fe+rWfVLouQynyd+u/KRjY6jdl6+tvYyxwPkYHWTQcY=
Subject key identifier: 9B:06:91:A8:7A:76:59:D0:25:AD:E6:1E:BB:A6:B7:D5:AE:53:21:72
Certificate issuer: /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial: 010D0C9F4328584867FAE894AC2C6FB2C805E8C0
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/0fd6fb70-f735-39b4-be34-4ae6851d9ac1.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 59426
IP address blocks: 23.177.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e8:94:ac:2c:6f:b2:c8:05:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=81d59a27-555f-4eaa-8d4c-4bbb9d4c5e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:1c:41:76:46:47:30:9a:31:e5:6a:40:a7:
1c:1a:fa:56:c7:93:28:68:f7:fc:be:f9:ed:b0:61:
23:3f:83:0b:aa:f7:33:a2:e9:28:4c:0c:9e:d6:4b:
03:8f:9a:75:73:fa:78:b1:03:9b:b7:31:f5:c6:53:
2b:a1:29:af:96:58:cd:5e:30:c1:58:25:95:b1:7a:
39:3a:cb:1a:c0:20:fe:43:19:12:a0:2a:d3:75:aa:
fc:1b:48:89:27:f7:e2:e2:90:24:91:81:db:dc:80:
fa:0e:49:7a:0d:0e:c0:ac:d5:c5:6f:04:ae:3c:53:
a0:cf:95:c8:33:74:20:13:08:8f:8e:3f:c2:a9:6f:
39:fd:3b:87:0c:89:55:3d:cd:d8:24:34:be:a6:d3:
98:c5:e8:b8:46:d7:c8:af:49:b2:5f:b4:6e:e8:53:
67:11:34:ca:8e:86:f5:55:28:b2:be:39:97:c8:db:
d6:71:b9:39:e2:75:41:b2:e0:db:76:fd:cc:0a:ee:
22:f5:01:f0:86:34:21:0e:a3:4b:3d:d0:88:2c:6c:
92:f4:bc:6b:5c:cf:7b:08:9d:1d:22:06:92:e3:fb:
a9:52:a7:f8:5e:62:53:bf:c5:0d:08:f3:d0:5d:c0:
27:23:c5:ac:f6:92:95:36:40:07:5b:0d:82:f4:79:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:06:91:A8:7A:76:59:D0:25:AD:E6:1E:BB:A6:B7:D5:AE:53:21:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/0fd6fb70-f735-39b4-be34-4ae6851d9ac1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
X509v3 Authority Key Identifier:
keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.177.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:58:56:a2:bf:79:1d:a6:28:4b:61:ab:98:4b:56:fe:bc:81:
8d:32:6a:36:91:b1:92:88:fa:75:5c:69:e2:04:c7:b8:1c:e3:
90:70:5b:19:00:2f:a6:9b:87:46:ae:3d:8a:ef:7b:4a:bb:15:
33:ec:a6:21:3d:94:0c:35:83:58:1e:fe:96:45:bd:b8:95:42:
a3:ba:39:35:e7:70:c0:85:97:b4:89:29:82:bd:67:e7:b0:97:
a1:c0:be:d6:5b:61:f4:dd:f5:91:48:61:c0:9b:14:d3:ff:08:
76:70:2d:93:4f:50:96:5d:ac:1c:ec:e6:4d:ca:ab:e4:a8:cc:
fd:24:15:d5:07:17:02:fc:4c:0c:bf:d9:0c:4f:98:b8:e7:0f:
5b:ba:39:d0:52:37:2f:23:fa:56:c4:ad:31:98:d7:59:7c:c3:
c4:57:0f:88:00:71:91:51:b0:ad:cf:c0:7a:4e:b9:38:8d:c5:
08:36:0e:5f:1b:b9:5c:3e:c1:c4:66:bc:fd:c8:1c:e7:62:47:
c4:55:12:e1:58:e6:ca:3b:a1:64:01:7a:cc:b6:e4:81:49:8e:
b8:c9:0c:21:b7:cf:95:9d:d3:16:c2:50:3d:f6:07:cd:a6:82:
ec:60:da:af:98:3f:8d:c3:28:3a:ad:57:4e:a3:18:22:4e:54:
cb:6b:80:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:41 2025 by rpki-client