Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/25d11f63-5dc6-3b61-aa36-c122042afb6b.roa
File: 25d11f63-5dc6-3b61-aa36-c122042afb6b.roa (raw, json)
Hash identifier: 6/qKWrOm4qQTySC07/GGVdDC9t9Ep1PHsOdD2OOFIfU=
Subject key identifier: 04:65:C2:6A:CB:64:51:1E:F6:DD:DC:23:51:94:57:9E:12:7F:CC:7A
Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial: 010D0C9F43285847E01A92DFA8FC705D98E3EE80
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/25d11f63-5dc6-3b61-aa36-c122042afb6b.roa
Signing time: Thu 14 Nov 2024 09:54:34 +0000
ROA not before: Thu 14 Nov 2024 09:54:34 +0000
ROA not after: Wed 12 Feb 2025 09:54:34 +0000
asID: 153371
IP address blocks: 23.175.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:1a:92:df:a8:fc:70:5d:98:e3:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
Validity
Not Before: Nov 14 09:54:34 2024 GMT
Not After : Feb 12 09:54:34 2025 GMT
Subject: CN=3bbc1505-42a4-4315-9e16-677b2d3bfb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:72:95:d1:5f:91:af:30:4e:92:3c:a3:7e:
e1:d0:0f:45:d6:25:63:2f:78:74:e5:f1:c1:1d:f6:
60:cd:98:bb:d9:a8:4a:94:b1:4d:a9:91:c6:47:5f:
04:b2:04:ff:ac:87:91:79:6a:59:42:e5:a9:85:5e:
c9:86:39:4e:31:72:dd:bf:e5:1c:a3:53:24:57:c6:
fa:4e:5a:92:55:e5:c9:bf:e6:3a:e0:62:30:1b:b0:
ce:d7:4c:4c:dc:14:3e:5f:76:c2:5e:d8:fe:42:9c:
e8:11:bd:6b:f9:eb:30:a0:58:d5:f0:a3:8b:39:90:
ce:f3:1d:5f:03:a5:89:fb:ca:35:99:4f:4d:84:0d:
11:18:aa:ad:3e:05:fd:d3:bf:78:e0:c3:91:01:7b:
00:31:eb:3c:99:44:e4:1c:5c:c8:39:9b:12:12:bf:
17:47:14:d0:58:bf:bc:24:85:b1:a7:05:ac:0c:6d:
90:95:5c:07:13:6c:44:7b:79:e5:d4:5d:e8:c9:93:
0a:25:03:16:58:7e:e0:2e:58:10:69:3d:e2:21:db:
08:b8:2a:96:c4:d1:79:00:a0:8c:e5:a9:4e:79:06:
09:89:2b:65:06:75:54:33:6b:79:65:68:ac:c9:49:
82:e2:f7:dd:bf:d1:fa:84:3e:57:9b:c7:7c:23:77:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:65:C2:6A:CB:64:51:1E:F6:DD:DC:23:51:94:57:9E:12:7F:CC:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/25d11f63-5dc6-3b61-aa36-c122042afb6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
X509v3 Authority Key Identifier:
keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:32:fc:20:1d:11:9e:87:c4:f1:e1:b9:3f:1b:81:d5:ed:bb:
87:ab:85:a5:40:ec:bd:06:ac:37:fb:ee:22:79:b9:1f:a4:45:
ff:fc:02:81:d5:2d:c5:cc:95:2c:e9:7b:4d:e1:31:81:37:6f:
d9:1f:02:2d:ca:c0:90:30:b2:1d:48:e8:a2:59:98:8e:0f:2e:
41:e3:2b:1e:65:a5:60:2a:67:90:c5:7d:a8:c6:4d:d3:e5:bd:
8c:6e:0d:fb:4f:12:33:10:18:10:e5:90:49:a5:e0:d9:1c:4a:
9d:ae:4a:77:0b:ea:ec:f9:df:62:ed:dc:96:c0:08:88:23:9a:
ed:09:d5:0a:79:42:02:08:44:3b:a6:5e:9f:df:a8:77:56:80:
b5:8d:4d:80:17:b4:d9:7b:e7:0e:40:24:c6:cb:ad:80:6f:72:
7d:3f:01:e9:b9:61:9f:2a:8e:81:1a:0b:03:69:93:eb:74:4b:
10:c6:01:9b:aa:ca:6e:eb:35:88:84:22:0c:17:a8:93:9c:de:
af:9e:6b:c6:dd:34:d8:de:e9:81:bf:56:fb:d3:9c:f9:54:64:
9d:bf:c6:eb:40:ee:e2:97:a6:5f:bb:d4:e7:be:00:66:f3:a6:
b3:f0:ba:c5:db:31:7e:10:7e:f8:34:57:a2:70:47:2b:78:18:
b5:52:e4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:51 2025 by rpki-client