Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/c6441729-cf17-3927-b457-807e5ba5fcae.roa
File: c6441729-cf17-3927-b457-807e5ba5fcae.roa (raw, json)
Hash identifier: rXkW0rXFmAabyTeZBPuP0mg3d7trGjWyZg7LxYIM80U=
Subject key identifier: 3A:B5:0F:87:87:3B:C3:4F:BB:08:25:AA:04:2C:7D:70:79:32:DC:EF
Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial: 010D0C9F432858481FD484D7175C16B898A77F00
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/c6441729-cf17-3927-b457-807e5ba5fcae.roa
Signing time: Sat 07 Dec 2024 05:45:09 +0000
ROA not before: Sat 07 Dec 2024 05:45:09 +0000
ROA not after: Fri 07 Mar 2025 05:45:09 +0000
asID: 19148
IP address blocks: 23.150.24.0/24 maxlen: 24
2602:299::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:d4:84:d7:17:5c:16:b8:98:a7:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Validity
Not Before: Dec 7 05:45:09 2024 GMT
Not After : Mar 7 05:45:09 2025 GMT
Subject: CN=e205e7f3-4853-4c4f-9f70-1a2cc4235858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:22:8c:d8:e5:e0:da:6c:ec:1e:70:57:e8:
2b:bd:47:74:8a:fa:40:94:72:14:9d:b5:28:26:2c:
7d:23:9d:29:6e:b4:d5:37:04:56:39:ac:24:0d:d2:
5f:1b:04:92:a8:52:15:71:c7:33:67:13:24:f0:21:
61:3e:e0:9a:41:f0:96:c3:72:b1:32:d7:28:47:f0:
f0:e2:b0:a7:39:e4:a7:45:15:2e:26:00:85:e4:c4:
13:8f:10:26:80:ef:d1:03:61:0e:1c:72:cc:02:49:
07:ec:16:4f:f0:ca:5d:04:07:a5:ca:e3:4d:72:35:
96:13:08:19:8f:ae:62:5f:40:a8:3d:f3:3c:14:7c:
80:39:16:62:3d:ab:1f:7c:21:72:8a:c5:83:39:4b:
fc:88:52:4b:34:42:15:54:15:0b:b0:60:b1:96:25:
36:33:3a:79:de:c8:ff:dc:74:1f:8c:8f:d9:68:e3:
33:98:c1:ac:41:bc:2b:74:09:a5:31:76:16:ec:c3:
8d:d3:1a:be:41:2b:46:2d:3f:cd:06:9c:b0:ea:df:
ce:01:98:d9:55:2d:cc:9c:1b:f2:d4:5a:18:4f:4c:
26:fc:e7:77:15:c5:7b:0f:63:00:39:3d:d8:75:c3:
d5:e9:fa:a6:95:32:57:f1:4b:47:13:09:41:a3:ba:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B5:0F:87:87:3B:C3:4F:BB:08:25:AA:04:2C:7D:70:79:32:DC:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/c6441729-cf17-3927-b457-807e5ba5fcae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
X509v3 Authority Key Identifier:
keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.24.0/24
IPv6:
2602:299::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:56:13:c9:80:af:13:89:62:d0:c6:f4:96:c9:0a:a9:ad:34:
3e:2c:16:9b:b3:53:7c:17:60:d0:df:5e:51:0b:12:82:38:d0:
fa:f4:07:32:5c:a4:07:28:23:26:27:cc:6f:c8:d3:36:e7:0d:
e3:98:f9:3e:d0:cd:f1:48:f2:75:88:1d:10:4e:81:88:21:62:
06:af:f7:d2:39:ed:71:ef:40:1b:c8:f2:70:e0:2d:ac:a4:82:
3e:c4:87:d8:6c:3a:6e:c0:a0:3a:e5:93:7c:f5:2e:17:11:d3:
e7:be:7d:9f:9c:37:b0:50:a9:bf:8a:55:d3:22:51:01:4e:2f:
2a:95:8d:8b:79:e9:39:93:4e:26:e3:62:26:d6:7b:a8:ed:e5:
0a:57:84:e3:b3:35:42:7c:08:5c:c6:28:fd:27:56:fb:cf:ae:
e5:9e:99:7f:72:a7:53:e7:b4:60:43:e1:7d:ef:27:2f:e0:1b:
43:c5:ee:43:d9:f7:37:65:b1:8b:53:c4:d7:3a:0d:8c:03:19:
a0:78:40:84:7c:b0:2a:b4:4a:a9:f9:31:48:49:70:10:0a:27:
18:aa:0c:ff:9f:40:19:60:de:26:15:23:de:77:ab:5e:ab:fe:
ff:10:0a:10:aa:96:47:0c:87:0c:9c:c4:69:a2:e6:86:42:ef:
dc:53:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:21 2025 by rpki-client