Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/cc789a6b-f530-32a5-8bd1-0667d8c35835.roa
File: cc789a6b-f530-32a5-8bd1-0667d8c35835.roa (raw, json)
Hash identifier: LDlP/DiqPmzT1Ury38uwL4ObgJ6koHX9kIRijdTgzCE=
Subject key identifier: 88:D1:12:AD:04:D3:80:75:DB:B4:B9:EF:0F:75:F3:A4:6A:84:02:1F
Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial: 010D0C9F43285847FDE4DA25A54E791760C52560
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/cc789a6b-f530-32a5-8bd1-0667d8c35835.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 40124
IP address blocks: 23.150.24.0/24 maxlen: 24
130.51.94.0/24 maxlen: 24
2602:299::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:da:25:a5:4e:79:17:60:c5:25:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=b9aecb37-dc06-4d66-9adc-e8796b0d31cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:1f:88:46:eb:b2:36:12:2e:f6:bc:1e:a1:
48:ef:5e:4f:14:76:ec:3a:f5:c7:fd:6b:f6:02:22:
1b:60:18:ff:8d:51:f6:eb:ff:fc:a9:f1:f8:63:f2:
b6:be:93:0f:ea:4c:c3:62:df:bd:ce:aa:26:3e:66:
d0:f0:8c:0e:d5:8e:05:1b:ce:5a:17:a3:34:73:52:
19:e9:62:8a:45:99:5e:99:87:6a:86:70:20:80:cb:
5e:15:b8:d7:0c:32:6a:5f:01:23:30:3c:e3:c4:39:
02:86:35:de:78:55:2a:08:7b:e7:a9:c8:b9:92:0e:
dd:08:5f:bc:16:55:bd:1d:49:b0:32:e8:b0:8d:f3:
30:aa:83:51:99:91:6e:87:7a:7d:ba:dc:26:9d:f9:
cf:6b:37:1c:7f:8f:ba:c5:81:59:c3:76:99:0a:20:
1e:f7:1f:db:81:3b:73:4a:5c:63:6c:54:bf:8e:a3:
0e:77:c0:95:08:fb:45:c1:a8:e8:80:86:62:14:6b:
eb:b0:45:6c:3a:36:a0:31:e9:aa:3e:1b:eb:47:20:
fe:95:fd:1d:d4:bc:db:6d:62:99:2b:40:5a:89:75:
54:eb:b1:e0:8e:35:b8:50:61:a4:8c:04:67:f0:7f:
25:86:64:6f:2b:56:6e:33:ba:73:c9:99:40:96:81:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:12:AD:04:D3:80:75:DB:B4:B9:EF:0F:75:F3:A4:6A:84:02:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/cc789a6b-f530-32a5-8bd1-0667d8c35835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
X509v3 Authority Key Identifier:
keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.24.0/24
130.51.94.0/24
IPv6:
2602:299::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:d8:83:8f:46:ad:79:a4:8a:ce:9f:4c:4d:ed:af:9c:40:47:
15:0d:6d:80:f8:ca:00:01:1c:10:aa:77:00:3b:3a:a0:37:14:
a0:c7:44:92:29:0f:9b:6a:32:87:e1:28:9e:16:79:8f:57:d4:
fe:e3:e5:dd:69:9a:d2:f5:a3:93:87:c5:c1:45:78:fc:e6:b6:
51:44:6e:a8:10:27:87:67:87:47:9f:d6:f2:3f:29:42:b9:fa:
5d:7a:97:38:57:a3:5b:fd:d5:b5:44:49:d1:52:26:2c:86:e0:
b1:8b:b9:24:af:ec:97:9d:a5:b1:e3:64:f0:25:44:7a:ff:05:
83:4c:31:48:82:b8:d5:0d:3a:42:91:13:e8:97:2c:85:71:09:
89:63:95:b8:5f:51:d0:e4:77:9a:7b:a4:fc:6d:35:fc:01:62:
77:27:95:2a:1b:58:5c:c9:ec:24:bb:7c:a3:3a:9d:bb:f3:6c:
1e:99:ce:c6:3e:2a:e3:87:0f:05:a9:21:3e:cb:ae:0b:85:eb:
9a:d8:6b:1b:40:be:4c:70:30:90:55:0a:37:f8:1f:f3:75:39:
d2:00:54:50:fc:98:ee:25:79:36:a2:9a:be:51:63:40:0d:37:
92:db:da:9d:71:c3:bb:87:0b:22:bb:ab:40:3d:b1:c8:ec:ab:
c9:ef:af:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:20 2025 by rpki-client