Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/fc4937d1-9f6d-30ac-9295-fd74b8623d1a.roa
File: fc4937d1-9f6d-30ac-9295-fd74b8623d1a.roa (raw, json)
Hash identifier: hQCpJb7aF0X1ywjy8IKSu1vdyEj2Hbl4T6rkIYYuvoM=
Subject key identifier: 1F:96:20:E6:6D:E6:ED:05:79:82:9F:5C:FB:36:1B:95:0B:00:2A:43
Certificate issuer: /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Certificate serial: 010D0C9F4328584834557C913BB13B509275D6C0
Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/fc4937d1-9f6d-30ac-9295-fd74b8623d1a.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 46365
IP address blocks: 23.152.56.0/24 maxlen: 24
2602:2cd::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:7c:91:3b:b1:3b:50:92:75:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=43972e0e-da63-43f0-b209-c9839b992e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:20:68:32:ed:af:15:e5:5f:96:7f:41:38:
25:41:0f:ec:b2:3f:0d:c6:7f:70:f7:62:91:92:8b:
61:7d:ef:36:c4:fc:43:83:72:7c:6d:a6:4b:41:0f:
4b:8e:94:fd:2c:69:1c:36:ca:c0:ce:f6:2c:d4:05:
22:e5:1a:1e:4e:63:52:4b:2e:1a:20:1c:4b:14:65:
da:f4:3a:d1:f8:9c:71:0a:f2:ac:d0:50:cf:ce:30:
1a:93:04:2c:29:97:cd:7c:d6:69:e9:72:f8:b9:99:
bf:5d:fd:da:51:ad:0a:3c:02:09:28:8a:b7:6a:58:
a8:96:46:26:29:bd:40:ee:97:10:fe:d0:f7:7b:24:
b7:8f:d8:17:db:be:9f:13:2b:91:e5:af:d3:b3:19:
92:e0:43:35:41:1f:c9:4b:15:52:ba:06:ae:a4:eb:
3a:60:b7:16:61:0b:1e:b9:84:dc:f0:aa:f3:be:75:
f7:46:d6:5f:f2:9d:00:21:34:1e:2e:9f:f5:54:28:
11:f8:ad:1e:b7:d3:6b:52:35:7c:dd:da:61:39:9c:
9c:e9:ee:fc:06:78:e5:67:2e:6d:d4:cf:be:bf:de:
64:7d:f7:1c:42:19:13:d6:bc:9b:d5:c0:25:e7:2a:
33:38:ef:be:20:bc:16:69:2b:3f:68:fb:71:18:1d:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:20:E6:6D:E6:ED:05:79:82:9F:5C:FB:36:1B:95:0B:00:2A:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/fc4937d1-9f6d-30ac-9295-fd74b8623d1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl
X509v3 Authority Key Identifier:
keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.56.0/24
IPv6:
2602:2cd::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:31:49:6e:7f:91:38:1b:5a:91:eb:c9:60:f2:9a:86:4f:87:
2c:09:ea:87:17:10:67:cd:70:2e:05:b4:69:e1:56:0a:12:2d:
ad:75:36:bd:71:9a:29:9b:35:ea:39:f1:53:1f:bd:21:b7:6e:
b0:e7:d6:f6:58:db:a8:8a:c3:9e:c2:e4:e8:87:96:db:bc:97:
c8:b1:2d:6d:ec:9d:91:08:ff:e8:3c:86:0b:34:0d:8b:19:fe:
99:75:af:f2:13:8f:e9:2d:44:0b:cb:2c:52:d5:b3:c6:15:fd:
77:60:14:b3:63:d5:90:cf:3a:2e:e4:3e:1f:a3:2b:f8:a0:ee:
ce:a6:b1:92:a9:0d:9a:1e:4d:62:57:93:75:7f:d7:6c:98:53:
e3:8d:ca:5a:ea:45:c4:45:dd:cd:ee:f5:e7:a1:82:95:60:ac:
01:90:b3:3f:a4:44:1f:da:c9:0d:64:5f:04:c7:6d:87:96:64:
81:11:fb:19:14:79:2c:71:cb:b8:fb:b8:0f:5a:c1:74:7f:09:
70:7a:7e:47:cd:0e:fc:ee:72:be:18:00:7d:56:50:6c:cb:3d:
62:2a:a8:7e:81:1b:ea:2e:c4:1a:6d:9a:b8:db:aa:52:71:43:
0d:2a:e9:9d:5e:c0:59:7f:a8:f9:d5:8e:92:87:a4:01:60:9f:
45:bf:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:56:36 2025 by rpki-client