Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a6929bea-2440-333f-969e-485d6d042daa.roa
File: a6929bea-2440-333f-969e-485d6d042daa.roa (raw, json)
Hash identifier: eN40d75l32aXkH6nbPAceDdoszIyJeXNYX5eM8mmAjA=
Subject key identifier: D6:F3:D0:13:C1:B7:71:CB:B9:FB:01:45:C0:E7:01:8E:2D:D3:9B:2C
Certificate issuer: /CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9
Certificate serial: 010D0C9F432858481805650264B9483D7449E140
Authority key identifier: 1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a6929bea-2440-333f-969e-485d6d042daa.roa
Signing time: Wed 04 Dec 2024 10:37:09 +0000
ROA not before: Wed 04 Dec 2024 10:37:09 +0000
ROA not after: Tue 04 Mar 2025 10:37:09 +0000
asID: 401463
IP address blocks: 23.128.140.0/24 maxlen: 24
2602:f7b3::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:05:65:02:64:b9:48:3d:74:49:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9
Validity
Not Before: Dec 4 10:37:09 2024 GMT
Not After : Mar 4 10:37:09 2025 GMT
Subject: CN=f299712a-13df-4d49-b69f-324833fd2d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d8:4c:3e:81:d3:7f:b8:09:95:4f:17:89:1f:
f6:70:ea:70:20:bb:c2:85:84:54:4a:2f:83:17:6a:
aa:54:61:ca:e9:dd:2a:7f:93:27:50:85:7b:3d:a9:
83:b5:b1:8e:99:72:cf:71:55:ae:e3:53:98:86:df:
1c:03:e4:09:2f:dd:48:da:1d:b0:51:60:60:a8:46:
36:72:0c:38:28:00:ae:d5:62:2e:ce:e8:02:0d:17:
c7:6a:51:ef:6c:cc:60:65:43:54:0f:d3:42:21:d1:
a9:5a:b1:10:92:5e:29:e1:22:85:1b:45:1f:14:53:
f9:56:db:a4:ae:8f:90:e1:22:1c:54:12:24:ac:9a:
6e:33:3a:aa:77:b6:af:a9:6d:48:35:b4:f2:57:79:
3e:6e:10:98:71:8c:7c:34:aa:54:af:1f:29:96:d3:
10:67:4d:76:54:9e:17:50:7a:3e:0d:97:60:85:36:
ab:d2:53:6a:f9:3b:72:53:eb:58:b7:0c:4d:8f:24:
90:c6:26:4e:fb:80:31:c1:00:12:5e:2d:ac:71:95:
6a:dd:af:27:8d:e4:59:35:39:c6:17:02:30:bd:b1:
0d:cf:ae:f6:e8:d9:5c:48:b9:ea:97:f3:45:ed:45:
83:1a:46:1f:80:68:eb:9a:2f:bf:c8:e9:21:9a:f4:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:D0:13:C1:B7:71:CB:B9:FB:01:45:C0:E7:01:8E:2D:D3:9B:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a6929bea-2440-333f-969e-485d6d042daa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl
X509v3 Authority Key Identifier:
keyid:1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.140.0/24
IPv6:
2602:f7b3::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:24:34:8b:e1:d9:1a:1c:46:a0:f1:a3:ac:17:ff:47:24:e3:
68:f7:82:92:f4:b8:8c:8b:29:1b:51:75:e0:90:1f:6f:91:2a:
ad:9a:06:80:b2:1a:7e:18:a1:64:d5:64:6f:c3:55:dc:ac:12:
8a:81:7f:fd:74:fd:6f:30:9d:bf:37:a1:82:d3:da:40:02:58:
a0:74:e5:19:12:5a:2a:64:50:75:72:08:fa:72:0e:bc:aa:ba:
a2:ba:dd:ba:15:b4:f6:fd:57:97:23:a2:e4:58:af:ca:98:c5:
9f:41:79:5b:68:a5:1d:7c:15:36:0d:00:08:10:04:c4:fb:7b:
db:58:f6:76:8d:b2:8c:9c:03:20:58:bd:78:e1:79:2f:4b:95:
2b:07:0e:0b:92:2f:64:8e:07:bf:41:60:f6:8a:d3:1f:bb:1f:
de:4e:2a:6e:70:7c:a6:fb:ba:29:2f:4e:d6:94:31:3f:c5:23:
e1:1e:18:9e:9d:8f:02:09:24:fc:53:aa:49:4b:e2:6c:24:a3:
65:42:79:9e:6d:da:60:97:94:d7:82:c0:22:04:11:94:4b:b1:
3d:39:fc:e1:c0:5b:d7:8c:33:4a:f8:e6:15:40:61:91:7f:61:
73:90:ff:cc:22:41:ed:04:5d:02:81:fd:72:73:e2:1a:94:69:
0e:bd:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:22:13 2025 by rpki-client