Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/122547cd-1424-3cbe-9653-998ce5ecb634.roa
File: 122547cd-1424-3cbe-9653-998ce5ecb634.roa (raw, json)
Hash identifier: So5IHZY8pSWeJ4vSlENwvFDbv4HvDNV2k0wG0qEGfNU=
Subject key identifier: AE:40:01:E8:FB:EB:9F:CE:85:76:44:CA:34:97:E7:1C:40:9D:CC:1C
Certificate issuer: /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial: 010D0C9F4328584842460A30B4EC3917D456D320
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/122547cd-1424-3cbe-9653-998ce5ecb634.roa
Signing time: Thu 19 Dec 2024 13:51:22 +0000
ROA not before: Thu 19 Dec 2024 13:51:22 +0000
ROA not after: Wed 19 Mar 2025 12:51:22 +0000
asID: 213750
IP address blocks: 23.146.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:46:0a:30:b4:ec:39:17:d4:56:d3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Validity
Not Before: Dec 19 13:51:22 2024 GMT
Not After : Mar 19 12:51:22 2025 GMT
Subject: CN=d69d65c4-aa3a-4539-a378-b386ec6bc0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:ec:26:17:4a:6d:46:a4:17:1c:00:57:ce:
07:b2:0f:ac:e4:18:1d:a6:79:2b:79:59:e4:30:64:
a2:c5:9c:41:2b:bf:f8:53:b8:3e:bd:d9:a1:c5:52:
0c:62:ab:1a:13:f5:b8:1c:50:a6:b8:9c:54:db:bc:
98:57:a5:51:64:50:a8:21:57:48:13:4d:b1:75:89:
28:91:00:86:4d:d4:5b:77:bb:ba:fb:1f:53:0c:cb:
ed:25:4b:fa:6f:0d:0f:a6:1c:9a:3b:62:d7:7f:c6:
44:0c:eb:fa:d7:4d:76:0f:05:f3:d8:eb:a9:f3:14:
d4:23:7f:46:d6:c6:48:ba:f4:b1:79:3d:8c:1e:80:
da:00:29:db:dc:ed:a0:fe:60:8f:61:25:a6:8e:7b:
71:38:20:4f:64:ce:55:9d:57:c8:dc:60:79:9c:38:
50:c6:0a:a5:3c:db:64:e7:18:f2:db:27:23:a9:19:
a0:38:b2:9e:7e:21:cf:7d:88:44:60:73:70:5b:5d:
75:d8:52:33:99:14:f8:c9:bf:60:2a:24:37:69:cc:
55:48:51:79:44:3d:c3:2c:b8:94:86:f4:e1:ab:ba:
0b:54:8f:d8:8a:81:70:c7:7a:83:4a:87:18:89:5d:
b8:54:9e:66:3e:7a:eb:e6:5d:e5:5e:e6:0c:e6:3a:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:01:E8:FB:EB:9F:CE:85:76:44:CA:34:97:E7:1C:40:9D:CC:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/122547cd-1424-3cbe-9653-998ce5ecb634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl
X509v3 Authority Key Identifier:
keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:a5:00:77:40:eb:94:be:ad:c2:b4:c6:ab:38:2d:83:cc:b3:
af:35:f1:8c:fb:1f:83:3c:38:4d:52:bd:47:8a:27:55:e0:03:
26:12:21:d5:82:cf:fa:73:ac:f9:d7:a9:04:91:f7:66:ce:eb:
0e:69:f8:6f:85:c9:c6:2b:8e:68:38:6c:a3:a5:1c:47:cb:d7:
5f:e2:16:5c:4c:f2:53:9a:0e:da:7b:2d:7c:87:f8:9e:7c:30:
f0:1e:96:44:1c:a7:e0:cf:e3:be:8b:0b:d2:9e:67:dd:e3:37:
b3:76:dc:e2:7e:93:62:47:50:ce:1c:29:81:72:a0:12:57:a8:
de:01:a1:5d:1f:5f:0c:7f:2e:b4:0f:45:d1:a7:3b:22:cf:e7:
49:e7:ca:a9:e7:d6:60:3f:bd:c2:3f:94:21:92:fd:58:c9:23:
a0:e2:ae:ef:e6:62:29:df:97:ce:28:88:dc:23:56:7d:e7:e2:
84:ca:3d:53:a0:19:57:0f:2c:04:fa:8c:fc:1a:15:29:db:e7:
ab:c5:da:30:0a:e5:c8:03:18:a9:13:4d:cf:57:28:c3:57:78:
6b:7e:84:4b:8c:63:5b:97:8a:fc:15:af:84:da:d9:65:87:bc:
a3:1b:3e:73:40:f5:a1:39:38:d5:0e:e2:52:87:1d:e2:f5:dc:
30:bf:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:51:41 2025 by rpki-client