Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/c264f446-5b92-3bc4-a4b0-b69cf6dacde3.roa
File: c264f446-5b92-3bc4-a4b0-b69cf6dacde3.roa (raw, json)
Hash identifier: Nn/SPQbsS0ms/OQMlpxiGNUjR7Zxl1kJeTCxOOW9X0o=
Subject key identifier: 4F:72:1A:AC:27:22:FC:57:80:15:DA:8F:11:B6:B7:59:1C:3C:5E:A0
Certificate issuer: /CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
Certificate serial: 010D0C9F4328584803E1DB75280F29A8357A2400
Authority key identifier: EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/c264f446-5b92-3bc4-a4b0-b69cf6dacde3.roa
Signing time: Wed 27 Nov 2024 05:29:23 +0000
ROA not before: Wed 27 Nov 2024 05:29:23 +0000
ROA not after: Tue 25 Feb 2025 05:29:23 +0000
asID: 401512
IP address blocks: 23.129.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:e1:db:75:28:0f:29:a8:35:7a:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
Validity
Not Before: Nov 27 05:29:23 2024 GMT
Not After : Feb 25 05:29:23 2025 GMT
Subject: CN=7462c54a-c1e0-426b-8c89-f877ea8e1064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:dd:1d:95:df:06:45:6e:cb:76:c6:06:95:
a6:2b:14:f3:ce:f1:d4:73:35:6f:fe:d3:01:f6:b0:
02:a5:5c:f8:d2:af:83:fc:af:08:1a:cd:43:64:9b:
47:7b:01:aa:39:ff:8c:54:c4:bd:d8:9e:3a:22:9d:
37:89:69:cf:a6:aa:30:9b:0d:14:ff:f3:70:2b:59:
a9:84:1c:90:91:64:1a:19:a9:eb:c3:f4:c1:89:b7:
c5:9a:81:1f:5a:2c:59:a8:dd:20:5f:73:3f:b4:3d:
a5:3c:80:d7:da:b1:de:cd:c2:18:13:42:3b:0a:a1:
12:9a:90:a3:d5:27:a5:89:62:d2:e5:9f:80:13:80:
be:62:a3:61:10:a1:54:3b:8b:27:9f:cb:bd:ac:b9:
9b:b1:c9:b2:53:c6:e9:c7:fc:6a:49:62:34:bd:25:
a0:a6:c4:69:31:07:f8:e7:93:ac:d7:4a:dd:b9:71:
60:bd:91:82:d0:ca:c3:5d:d8:58:88:79:d4:38:b1:
ac:a2:7a:74:49:ba:e4:ce:30:c3:ff:4a:7c:71:d2:
de:77:06:43:8f:43:92:2a:c0:f6:1b:77:fc:91:40:
3e:ba:4e:5a:42:42:e9:4c:ef:d2:0c:89:e9:77:4d:
0c:5a:d8:3a:16:ef:de:a5:34:c1:d6:15:66:59:b7:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:72:1A:AC:27:22:FC:57:80:15:DA:8F:11:B6:B7:59:1C:3C:5E:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/c264f446-5b92-3bc4-a4b0-b69cf6dacde3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl
X509v3 Authority Key Identifier:
keyid:EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:8f:d9:88:66:56:cc:15:a8:77:1b:91:26:9a:7e:4c:8c:43:
35:75:40:91:9f:1e:0a:cf:55:83:6e:e6:59:c0:09:70:47:3d:
58:6e:5a:a3:d7:3c:28:b4:78:80:1b:ad:31:7a:86:99:e6:fc:
fb:38:39:02:7e:2c:32:00:21:97:72:d0:e7:61:78:58:18:a6:
39:61:ad:9b:03:05:b1:0d:4e:29:a8:a9:42:87:cc:ae:b2:43:
8f:51:2a:77:71:79:54:d8:83:0e:7f:f9:9f:fa:95:4e:1e:db:
7b:44:0b:73:45:e9:8e:88:9b:81:1e:1c:0c:3b:7e:aa:4d:00:
5c:86:00:d0:cc:45:fb:8d:65:80:39:9d:b2:ac:09:89:7b:43:
61:0a:5d:27:a6:b0:9e:6a:fd:c5:32:39:d7:d2:bb:fc:b8:00:
8f:fc:07:48:e2:21:43:d6:5d:ce:83:88:ad:23:80:c9:32:34:
32:07:c7:23:d0:be:96:c8:a2:40:70:51:0a:eb:fc:93:7e:da:
9a:3a:fb:20:0c:a4:52:b6:20:09:f1:44:c3:78:a1:72:b9:7d:
e0:f9:90:ab:52:0d:1d:72:69:a1:8b:af:87:96:9c:dc:d7:3a:
28:45:d7:e3:cc:88:08:06:44:fd:a1:ad:84:90:b3:94:91:dd:
9c:28:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:17 2025 by rpki-client