Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/124e846c-980a-346e-8386-f8a7296da272.roa
File: 124e846c-980a-346e-8386-f8a7296da272.roa (raw, json)
Hash identifier: 5nXsE+F/42D+bGQ77/B8WFWL8HBWt+4fW13ORgPgR4o=
Subject key identifier: AA:0E:B9:A4:40:27:6F:25:1F:CA:3C:15:01:4C:36:E2:E8:04:43:7F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846C51A6E197B0A9440ADF3CF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/124e846c-980a-346e-8386-f8a7296da272.roa
Signing time: Mon 05 Aug 2024 01:00:29 +0000
ROA not before: Mon 05 Aug 2024 01:00:29 +0000
ROA not after: Sun 03 Nov 2024 01:00:29 +0000
asID: 16625
IP address blocks: 23.50.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c5:1a:6e:19:7b:0a:94:40:ad:f3:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 5 01:00:29 2024 GMT
Not After : Nov 3 01:00:29 2024 GMT
Subject: CN=a5f6a53f-70a7-4dae-8896-f51edfaa263b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:a1:c2:56:88:20:6f:0c:55:db:f7:5f:5d:
2f:13:5a:28:45:c6:97:ee:17:11:b9:8d:1b:de:69:
38:d1:b9:6f:de:6e:39:2d:0d:a5:94:c0:b6:b8:b9:
5e:4a:ab:f3:bc:64:d5:d7:f2:8f:51:a4:42:85:86:
33:8e:51:bb:ad:00:32:3e:bf:ab:5b:df:e2:69:48:
b2:a8:0f:d7:09:dc:a8:b2:95:cc:c5:59:bc:60:8d:
3e:c7:d6:37:a3:5d:1b:62:ea:9a:f6:35:1d:e7:3a:
d4:3b:e0:36:23:bf:83:6b:ab:51:15:7b:fe:b0:c2:
45:35:d5:65:42:33:8d:51:21:49:c7:7e:e8:6a:28:
bb:ba:f6:b9:6d:fc:c3:e3:01:a0:68:69:c9:ea:5e:
51:1e:b3:76:91:19:16:9d:ae:f9:e8:ef:be:7e:ff:
95:ec:16:39:62:4a:6f:ac:15:a7:d8:ed:b9:93:81:
a7:cf:3d:db:c0:bd:5f:7d:c7:f8:f3:e7:b2:dd:8b:
96:31:cd:30:35:57:42:6f:78:f5:71:b6:db:c8:84:
5c:42:fb:4e:4f:ff:72:2f:19:30:91:d4:55:d1:87:
dc:d0:68:3f:3e:54:54:ed:c0:3f:c7:76:b1:32:21:
c5:90:4e:28:96:a9:85:8b:4c:36:ab:e1:96:c8:f3:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0E:B9:A4:40:27:6F:25:1F:CA:3C:15:01:4C:36:E2:E8:04:43:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/124e846c-980a-346e-8386-f8a7296da272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.50.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:31:57:02:e8:1a:e9:11:71:61:0d:65:35:41:53:a8:5e:88:
fb:ef:2e:0a:d7:af:0d:f1:35:ea:f9:ea:67:86:d8:4e:4f:a6:
78:08:a2:b0:19:eb:93:23:5c:3c:eb:ef:c4:79:df:69:41:22:
cf:a5:ca:01:0f:23:8f:15:72:d5:3f:60:ca:98:a2:06:bf:9e:
ac:8f:da:b1:10:ed:27:f7:78:f8:ed:95:dc:e8:00:54:93:85:
f2:e4:57:d2:06:05:00:ce:e2:e8:5d:be:89:21:6a:14:43:d7:
3e:7b:e2:38:97:ee:5b:b2:e9:cc:1e:9e:50:7d:06:06:a9:e4:
6c:05:0d:b8:03:be:81:42:cc:4c:71:cc:7d:86:6e:2d:13:f9:
e2:6c:b8:b2:1e:a4:49:15:32:9d:10:42:27:a1:0e:4a:ab:93:
43:f6:9e:13:a1:ae:be:fd:74:41:26:0f:5d:35:ec:82:e8:2c:
4b:c8:ac:ce:4f:4d:2c:ba:7a:3c:d6:74:cd:4d:14:12:bf:a3:
9d:e7:54:b0:72:f5:4a:8a:bb:93:2e:2f:83:d9:68:4b:ae:c7:
df:a8:ea:6f:0f:a6:09:22:e1:37:09:39:23:c0:3a:73:b8:56:
0b:d1:81:34:ef:85:e7:ca:21:64:80:85:0e:c5:bf:79:b4:5f:
93:e7:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:50 2025 by rpki-client