Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/0221de9a-1196-3d1d-b9e2-2d6f8c5bfe80.roa
File: 0221de9a-1196-3d1d-b9e2-2d6f8c5bfe80.roa (raw, json)
Hash identifier: RuuTpPaELvWrRGZ/8r2r8dac0z4SGL2JhloI16y8T5E=
Subject key identifier: 55:C1:E3:02:34:6A:89:87:74:81:61:D3:FF:97:55:94:1F:46:71:00
Certificate issuer: /CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Certificate serial: 010D0C9F432858488DAB4E62549DF7CD8E725180
Authority key identifier: 3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/0221de9a-1196-3d1d-b9e2-2d6f8c5bfe80.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 150698
IP address blocks: 23.167.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4e:62:54:9d:f7:cd:8e:72:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=2b9d2411-0111-428d-a4c0-f5bc6a6b7fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:62:c6:e8:20:94:1f:ba:92:30:b6:98:d7:
5d:14:14:f6:0a:6a:96:5d:96:a5:03:23:f5:15:7e:
98:72:b7:66:b2:38:04:6c:5b:ae:ba:af:fd:ce:a7:
38:a6:51:b0:9c:c8:eb:19:9e:ae:8c:02:3b:bb:95:
eb:ae:e7:28:43:8f:60:fd:60:8a:4b:dc:7b:0b:1b:
a5:28:b0:4b:2f:6d:33:15:fa:14:30:7a:14:c8:31:
3a:15:d1:63:b1:e4:25:8e:a1:2f:fe:d0:d2:f6:63:
39:44:7b:b6:45:b3:3b:7b:e4:58:e4:51:82:79:15:
ab:06:bc:9e:77:5e:52:d7:d2:4f:39:38:8d:fc:2e:
78:15:b3:d3:ca:bb:fd:94:19:cd:7c:e0:b1:22:bf:
d9:a7:a1:4f:81:a8:48:ea:73:0a:7a:9f:ea:df:a0:
7b:09:58:cc:72:08:21:b4:d8:0b:b7:16:bf:b5:d1:
93:ab:0e:55:48:90:52:ec:6b:a4:86:f7:36:c1:ee:
f3:57:00:72:0f:b6:64:87:5e:5e:89:9d:87:a6:71:
27:f2:c3:88:56:87:80:6d:73:fb:15:f5:7e:56:59:
72:15:26:c5:8a:3f:ae:49:40:0c:9b:c8:b5:11:3e:
94:af:97:23:c8:a2:80:38:5a:3c:b9:cc:a4:87:57:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C1:E3:02:34:6A:89:87:74:81:61:D3:FF:97:55:94:1F:46:71:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/0221de9a-1196-3d1d-b9e2-2d6f8c5bfe80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl
X509v3 Authority Key Identifier:
keyid:3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:f4:9a:17:a2:b8:00:a4:33:d4:fc:dd:da:a1:c2:21:14:49:
7e:ed:a8:f9:0f:d3:08:ef:0e:46:85:f3:b4:90:14:40:46:58:
a7:f6:2a:f5:27:6b:a1:f1:54:f0:20:05:86:c0:32:28:b1:33:
85:32:8d:c9:8b:7f:0a:b5:2f:cf:f9:2b:5f:06:a1:eb:bb:7f:
09:e9:9c:15:da:ed:3e:16:5c:19:7f:34:ef:e6:69:bb:b0:8f:
c6:aa:47:d2:15:09:70:bf:d3:0d:de:4f:58:8c:7f:70:88:fc:
5a:ba:27:2f:b9:31:e1:af:33:db:ef:c3:21:a8:8a:b2:d9:0a:
b4:ef:87:4d:29:27:c2:e8:6b:e8:a9:a4:7a:6e:85:f2:b3:d6:
1f:cf:4b:d2:d3:63:52:54:69:29:3c:77:0b:d6:af:2e:8a:b4:
55:4c:d6:9c:f5:f0:3b:77:d2:ca:2e:4d:b3:d7:bc:cc:94:1b:
7d:85:51:08:b6:38:70:21:e7:6d:11:74:4a:68:ca:60:1c:c3:
5e:b1:dc:23:37:15:95:76:1d:56:9a:0b:bb:27:42:2c:b7:7a:
d8:8c:92:8a:77:ca:34:15:e9:97:ff:cc:bc:eb:3f:85:9d:68:
27:d2:ad:48:e4:39:ef:b9:8d:c9:8b:70:dc:c4:8f:15:03:9e:
fb:55:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:37:54 2025 by rpki-client