Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/1e1cf64d-983f-3be9-9419-33d7630a5140.roa
File: 1e1cf64d-983f-3be9-9419-33d7630a5140.roa (raw, json)
Hash identifier: RcZsrEE80gsAFJ9u8eFni9rzL2qEUk3mFhR54dapmfo=
Subject key identifier: 89:2C:48:2E:77:3B:DE:07:75:6B:91:3D:2D:CA:5F:64:3F:FD:3A:7C
Certificate issuer: /CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
Certificate serial: 010D0C9F432858466E9801D24EACCC04798A3300
Authority key identifier: 6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/1e1cf64d-983f-3be9-9419-33d7630a5140.roa
Signing time: Fri 05 Jul 2024 01:18:12 +0000
ROA not before: Fri 05 Jul 2024 01:18:12 +0000
ROA not after: Thu 03 Oct 2024 01:18:12 +0000
asID: 834
IP address blocks: 23.151.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6e:98:01:d2:4e:ac:cc:04:79:8a:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
Validity
Not Before: Jul 5 01:18:12 2024 GMT
Not After : Oct 3 01:18:12 2024 GMT
Subject: CN=dfa1f11c-14b5-4eec-a976-1631c5e9e508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:4f:2f:62:75:c8:b9:50:4f:ea:e2:34:9c:
2e:ca:a2:6a:60:f2:d6:87:6b:64:5d:a4:ea:ab:2d:
6d:5f:de:90:6b:7b:da:df:49:e9:f1:ab:25:49:c5:
32:28:38:64:ac:41:c0:36:91:e3:b6:7b:31:94:e0:
31:8d:69:1a:b1:de:1e:67:22:fd:7f:ea:b9:ce:f4:
d1:40:f0:06:b7:b8:8b:e6:8c:cf:5f:50:05:5e:62:
ce:17:d4:ce:fa:ed:fa:44:fa:7f:5a:3c:60:7a:6e:
84:07:3f:90:5c:cf:c4:6f:16:93:21:da:8b:a2:7d:
9a:18:6e:61:f5:7d:27:eb:d6:d6:57:e1:23:d8:56:
5e:b2:bd:a9:94:72:5e:d0:9d:25:dd:b5:04:79:f8:
6d:c4:05:dc:2b:a0:d1:18:f6:02:32:6c:3c:25:a9:
0e:ac:f4:b8:35:a0:0f:f8:47:6b:4b:91:7e:5c:46:
37:f6:e7:e2:2f:d1:86:93:46:94:70:85:2d:8c:be:
23:38:89:15:fa:78:37:66:5c:fa:d0:2c:b6:87:43:
b6:19:fe:f3:e9:dc:11:c0:e9:d3:35:82:ec:ca:24:
7b:b0:c8:b2:b1:45:be:ec:7a:67:52:ac:20:08:37:
a3:3d:33:11:71:fb:f1:ea:8c:84:e3:8d:6e:84:7a:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:48:2E:77:3B:DE:07:75:6B:91:3D:2D:CA:5F:64:3F:FD:3A:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/1e1cf64d-983f-3be9-9419-33d7630a5140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.crl
X509v3 Authority Key Identifier:
keyid:6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:d0:6b:42:b4:68:d5:cd:72:c9:7c:b4:ec:42:6f:f1:28:07:
d8:c1:c6:ac:31:db:52:21:e5:36:9b:c0:47:96:88:0e:e0:07:
d9:df:31:85:e1:eb:d4:04:c1:8c:c6:f9:70:aa:47:68:78:f6:
24:51:e0:e3:2c:fd:59:d4:a6:ac:51:af:3a:62:66:db:f1:1c:
b1:a6:2d:d1:8d:47:b8:94:06:25:b0:83:61:40:c7:b1:71:ed:
40:1a:88:76:89:cd:8a:e4:16:12:eb:0d:6e:8b:ea:47:3e:2c:
3d:b7:34:08:9d:9c:12:d7:30:c8:28:bc:84:5f:4f:3e:63:8f:
2f:5a:e9:39:e7:a6:4b:7b:0a:4d:53:90:dc:54:b2:6e:14:0c:
2d:3e:3c:9a:f7:81:67:d7:bc:f2:47:4a:13:90:9c:5d:e4:2d:
17:cb:3a:21:9f:25:aa:92:32:b5:ce:75:d9:cf:ec:fc:36:4c:
2b:74:b2:a0:a6:c2:48:38:2f:b2:d8:c8:3b:c9:84:c4:15:d4:
f8:db:09:44:95:4e:e8:20:af:41:a0:9c:1a:6a:24:19:a3:88:
16:5a:80:48:a4:f4:e5:b8:5c:c3:23:5a:f2:72:c8:04:0c:67:
88:88:12:a8:68:a6:04:1c:05:f9:8f:4b:e4:c8:b0:58:cf:77:
5f:2c:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:17:43 2025 by rpki-client