Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/ed3caa1c-3c5f-3fa2-bd63-4b638f8ae1cd.roa
File: ed3caa1c-3c5f-3fa2-bd63-4b638f8ae1cd.roa (raw, json)
Hash identifier: xYGmRrYgcB6LZn9h+2Ra3q6Repb3aW+xXZlK0VpnofM=
Subject key identifier: 20:BD:30:F2:91:CD:CA:57:CF:99:46:44:78:EC:49:5C:F9:11:F7:C6
Certificate issuer: /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial: 010D0C9F432858486C585537883B3136E69DDF80
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/ed3caa1c-3c5f-3fa2-bd63-4b638f8ae1cd.roa
Signing time: Fri 03 Jan 2025 15:32:10 +0000
ROA not before: Fri 03 Jan 2025 15:32:10 +0000
ROA not after: Thu 03 Apr 2025 14:32:10 +0000
asID: 63232
IP address blocks: 23.131.60.0/24 maxlen: 24
2602:f763::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:58:55:37:88:3b:31:36:e6:9d:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Validity
Not Before: Jan 3 15:32:10 2025 GMT
Not After : Apr 3 14:32:10 2025 GMT
Subject: CN=6e1bd41b-ff98-4b8b-bc5d-d181e6af6d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:59:56:d8:20:20:40:b8:e9:75:72:58:7c:
45:4a:11:2a:e1:ed:c9:13:ca:c1:71:45:9a:ee:29:
e5:17:31:9c:d5:e5:03:c8:d7:e0:fe:aa:91:13:ea:
6e:f5:c2:ce:41:da:e7:16:cf:40:28:55:06:01:9f:
77:f3:fd:32:2e:43:60:94:93:63:ac:a1:81:67:6b:
9b:51:95:79:87:b9:a7:14:ce:ef:e4:7c:91:82:69:
e9:d1:2c:dc:e0:1f:c1:74:d5:64:01:1b:0f:0e:c7:
4c:0b:78:94:f0:30:76:9c:27:3b:e1:73:a2:6c:97:
e8:d7:31:43:20:35:0b:b9:dd:22:8c:94:8d:ad:05:
f8:f6:73:1a:36:37:b9:96:e9:69:61:b1:1d:92:a4:
a4:6a:83:b1:21:fc:90:a4:b0:dd:f5:ff:52:66:e0:
5f:14:08:90:9e:18:3d:61:2a:1f:51:8c:f7:94:e8:
7b:20:2e:70:65:1f:1e:31:2c:a0:c0:79:c9:98:f3:
1e:c6:d1:e2:b0:72:a0:1d:75:57:b1:5d:f0:d7:36:
16:ad:30:e4:32:42:5a:20:52:ca:43:a9:54:4d:cc:
c0:4b:bf:2f:20:74:64:a7:59:40:25:4f:5a:c7:35:
8b:dd:a0:28:cb:6b:f2:1c:2c:0c:c4:1e:79:8b:12:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BD:30:F2:91:CD:CA:57:CF:99:46:44:78:EC:49:5C:F9:11:F7:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/ed3caa1c-3c5f-3fa2-bd63-4b638f8ae1cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
X509v3 Authority Key Identifier:
keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.60.0/24
IPv6:
2602:f763::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:14:ee:5e:e4:96:fe:19:56:97:cf:7a:e2:1c:20:4d:2c:35:
a1:3b:b9:7b:e1:b6:09:2e:a4:31:1c:d6:bf:44:b8:b2:95:fc:
66:1b:35:fd:00:a2:67:87:cf:4e:8a:92:73:63:49:19:c2:e0:
11:61:34:ec:fa:01:ea:81:2a:63:bd:ba:c0:ff:d8:e4:0f:3d:
25:c8:da:d3:74:a6:6f:e5:f3:44:48:4b:12:eb:39:23:29:20:
10:9f:ae:de:d7:bc:fc:6a:ff:6c:df:9f:02:d7:11:fa:d6:7f:
f5:1f:b6:38:06:a7:b5:25:0b:c7:2f:bf:b2:5d:66:5c:b6:2e:
c8:41:26:44:91:a6:e6:9a:51:0f:7d:72:6b:a7:0a:16:35:fe:
b2:07:61:00:eb:97:36:35:00:3c:f0:87:12:4e:1d:26:45:4d:
e7:cc:e9:9f:45:71:26:f2:3b:ed:31:d7:d5:a7:ec:bb:52:37:
1b:9a:6e:4f:b2:8c:7f:70:92:cc:44:e2:ab:96:94:82:c3:f8:
c3:ed:aa:c6:64:14:da:cf:27:b4:19:f2:02:dd:cb:7b:77:4a:
13:62:c7:67:38:46:67:e5:92:ee:31:b9:9f:a7:75:45:32:68:
34:9d:ce:4d:99:50:43:09:ba:d4:5f:30:98:b6:ce:57:68:a6:
05:46:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:45:16 2025 by rpki-client