Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/3819157e-18db-3dc8-ac4b-6a436e88b908.roa
File: 3819157e-18db-3dc8-ac4b-6a436e88b908.roa (raw, json)
Hash identifier: O3SHRhMMF6w3H36wi/AU4TPY59FP5wBgn1n/HQwSMB8=
Subject key identifier: 91:9D:1F:33:AB:16:08:EA:6C:49:50:6B:E3:F5:1D:12:13:A1:8B:24
Certificate issuer: /CN=862a9ade-3d88-4730-8033-1414625d565b
Certificate serial: 010D0C9F432858486324C4FEEDCDABA6AD076800
Authority key identifier: 2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/3819157e-18db-3dc8-ac4b-6a436e88b908.roa
Signing time: Tue 31 Dec 2024 08:26:00 +0000
ROA not before: Tue 31 Dec 2024 08:26:00 +0000
ROA not after: Mon 31 Mar 2025 07:26:00 +0000
asID: 140822
IP address blocks: 23.131.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:24:c4:fe:ed:cd:ab:a6:ad:07:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862a9ade-3d88-4730-8033-1414625d565b
Validity
Not Before: Dec 31 08:26:00 2024 GMT
Not After : Mar 31 07:26:00 2025 GMT
Subject: CN=a8de99ea-c271-4a48-ad38-35887a72b7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:73:c4:21:d1:c9:0d:1d:1c:24:76:49:f6:
14:de:16:b9:71:6d:7d:31:0a:40:04:95:e7:6d:22:
64:b2:50:81:88:04:03:fa:ff:8e:35:a6:cd:e2:ec:
9e:0a:42:4e:e3:8f:e0:32:d6:d7:a1:48:3c:fc:e5:
73:0a:15:04:b3:07:6b:67:60:ae:f9:cb:e7:e4:57:
03:93:85:5b:15:c9:4a:22:cf:3b:5b:a5:e6:63:34:
5b:55:43:6d:5e:0e:c4:e4:22:57:06:c2:d0:6e:ca:
b0:7d:f4:2a:89:68:87:eb:ef:74:b2:01:e9:9c:48:
68:57:8c:fe:59:8c:c3:80:c3:44:1f:9b:ec:1b:d1:
2b:f1:97:36:b1:61:85:65:3f:67:1f:d4:df:80:6d:
00:3d:3e:2d:14:77:cf:1e:9a:36:eb:84:23:53:8a:
15:a7:62:d6:43:ec:d1:fa:ce:3c:bb:83:4a:91:d0:
d7:6c:7d:e4:96:79:90:93:c5:29:6c:6f:67:3c:fb:
2c:40:44:cc:27:74:cf:a6:d8:15:21:3a:19:89:c0:
b4:cc:8f:c2:28:80:3d:4c:ad:55:c4:89:89:05:5d:
2e:ff:bd:e3:44:6d:02:61:57:9d:67:92:91:bd:ec:
fc:ce:13:45:56:6d:23:cd:5c:12:b5:3d:77:2e:08:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9D:1F:33:AB:16:08:EA:6C:49:50:6B:E3:F5:1D:12:13:A1:8B:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/3819157e-18db-3dc8-ac4b-6a436e88b908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl
X509v3 Authority Key Identifier:
keyid:2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:6d:5a:40:0c:ad:21:f0:c5:92:93:0b:6f:21:b8:50:76:aa:
ff:70:62:ce:90:b4:b5:45:1f:bf:63:f4:58:9d:f8:93:60:59:
f1:53:7f:c3:16:d6:35:60:85:2d:98:f5:1a:4a:9c:f1:22:bc:
2b:17:63:4d:0f:9d:8e:8d:72:dd:da:a2:0c:ea:d9:74:20:5a:
06:66:b9:16:2f:85:02:82:75:04:31:d0:7f:89:94:c0:c8:47:
ec:90:56:c4:e3:27:eb:4d:54:cc:65:83:42:f9:30:13:86:67:
99:94:86:87:32:c0:dd:02:cf:5e:a6:a4:b1:04:af:6e:48:0d:
49:5a:88:2d:c7:e4:4a:10:60:d3:ec:62:63:b7:86:c0:40:8a:
62:b9:62:f4:fe:30:b6:ab:a2:97:b2:3c:61:bb:63:fd:ff:41:
db:69:bf:4d:61:78:45:c2:84:28:c3:7f:9d:68:da:39:2f:07:
6c:fe:3a:bd:55:6f:c7:83:de:ec:3f:5c:70:fd:f9:d9:54:ea:
ca:17:14:1e:25:ee:72:73:dd:1e:e4:1f:8b:4d:4f:82:8e:e7:
b0:da:9a:1f:e9:38:e5:4f:97:c2:d1:bf:d2:e9:d7:17:b3:4d:
4a:93:29:49:a8:2d:38:c1:ee:2b:69:e8:43:b1:f6:eb:34:4c:
39:24:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:29:40 2025 by rpki-client