Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/6b3de8df-e245-3e07-984b-580e49e27073.roa
File: 6b3de8df-e245-3e07-984b-580e49e27073.roa (raw, json)
Hash identifier: YJc2kt019F5BqUzmHHcIrTetLa759wbn/gXGSpG3j/I=
Subject key identifier: 1F:DF:9B:98:19:09:EF:FD:14:88:FF:A2:BC:7C:8C:EC:0A:EB:47:18
Certificate issuer: /CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Certificate serial: 010D0C9F4328584880BC52E79B7F151D489550A0
Authority key identifier: 4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/6b3de8df-e245-3e07-984b-580e49e27073.roa
Signing time: Fri 10 Jan 2025 22:49:48 +0000
ROA not before: Fri 10 Jan 2025 22:49:48 +0000
ROA not after: Thu 10 Apr 2025 21:49:48 +0000
asID: 20473
IP address blocks: 23.132.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:bc:52:e7:9b:7f:15:1d:48:95:50:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Validity
Not Before: Jan 10 22:49:48 2025 GMT
Not After : Apr 10 21:49:48 2025 GMT
Subject: CN=4023d304-4a95-480d-a41b-c3ce876adf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:06:f6:54:34:ba:a0:32:fe:22:6f:2d:34:
62:53:49:74:fd:ad:ba:a0:3a:ab:66:a7:80:7f:ed:
5c:04:c9:b3:84:a1:65:40:73:78:96:80:c4:74:77:
7d:4d:cd:e8:ed:71:df:f1:33:3d:ac:7b:04:d4:e1:
2b:6e:de:d3:20:fb:5a:81:a9:36:a1:94:6d:b7:5b:
fe:b2:cc:39:2a:24:ff:0a:e8:d2:5d:78:4a:8a:60:
62:50:d3:68:d0:07:6f:f7:d7:5b:c2:e5:3e:5c:29:
87:1e:99:59:81:da:d2:d0:c2:3d:96:86:1b:81:34:
41:24:10:d2:ab:e0:1b:64:a2:f9:b7:b3:5e:69:42:
24:54:f7:29:d8:51:34:bb:d4:35:a0:de:d8:6f:39:
81:3f:b3:b5:30:9d:67:a6:08:7e:37:a9:d7:70:f3:
d1:8e:4c:e1:7d:e9:3b:8f:21:10:25:95:ce:c1:ab:
d1:7f:09:cf:35:2a:20:50:fd:85:ed:3d:8c:42:c2:
7b:b0:97:76:0a:76:68:a0:0c:97:cc:42:db:0d:43:
fa:8b:88:75:7c:8c:16:6d:fc:62:34:0a:be:86:a6:
32:fa:e2:dd:4b:20:63:d1:16:95:ad:46:a0:cd:d9:
19:b5:32:ac:49:f1:30:15:bb:12:66:29:62:e2:cf:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:9B:98:19:09:EF:FD:14:88:FF:A2:BC:7C:8C:EC:0A:EB:47:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/6b3de8df-e245-3e07-984b-580e49e27073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl
X509v3 Authority Key Identifier:
keyid:4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:9d:f0:0c:1d:f9:55:9e:4c:12:9c:bd:98:06:b0:bd:4f:36:
08:f1:2b:28:25:83:4b:6f:06:bd:e7:33:fa:6a:76:47:8b:2a:
33:25:5a:bd:59:8d:7d:75:6e:2c:99:d6:91:24:8a:79:52:a0:
f6:67:33:f3:ee:3b:cc:43:dd:09:bb:03:b6:02:7c:03:b6:4c:
c1:da:dc:c9:91:24:ad:f3:f7:b5:27:b9:9a:44:28:bc:63:50:
27:50:e4:c6:79:87:45:cc:ad:a0:be:8f:04:11:65:2d:dc:b9:
c1:ed:e4:ed:8b:28:50:62:3f:6f:8c:52:5c:5d:68:7a:16:a0:
d0:4c:a1:b6:af:ad:f3:e8:e4:7d:bd:ce:af:2c:5d:42:6c:63:
a7:45:3f:13:8d:d0:ef:25:15:da:b9:a0:c8:ed:78:f8:cb:57:
20:a4:b9:c8:02:0a:4a:cb:8d:33:3e:b9:b2:19:6f:c0:a9:18:
63:5a:56:e9:63:a2:a8:9a:41:11:14:86:43:b2:b1:21:92:c1:
26:06:9f:8d:b4:0c:4f:64:c6:eb:e7:54:53:37:86:ac:b0:db:
86:c9:e3:e0:5b:41:09:88:84:b0:92:9a:81:9d:29:da:24:52:
9f:48:e8:b8:f3:e4:51:47:20:30:3e:73:3f:c7:c8:e9:a2:90:
37:bf:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:14:20 2025 by rpki-client