Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14dfbe8d-938d-3414-96ca-243e5391bf70.roa
File: 14dfbe8d-938d-3414-96ca-243e5391bf70.roa (raw, json)
Hash identifier: SRbSkRTGgN/1DW/Y9C7lAXMYiwI5My/Vv30t4pMsuXs=
Subject key identifier: 1C:7C:42:86:B5:5A:3A:1D:30:4E:B8:AB:9A:1C:DE:B4:27:E3:A8:38
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584752161B097695B62C662920A1
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14dfbe8d-938d-3414-96ca-243e5391bf70.roa
Signing time: Tue 24 Sep 2024 13:00:40 +0000
ROA not before: Tue 24 Sep 2024 13:00:40 +0000
ROA not after: Mon 23 Dec 2024 14:00:40 +0000
asID: 16625
IP address blocks: 173.223.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:52:16:1b:09:76:95:b6:2c:66:29:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 24 13:00:40 2024 GMT
Not After : Dec 23 14:00:40 2024 GMT
Subject: CN=4c301d1c-a777-4f3f-af17-3c5b72e1df90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:60:54:4f:04:69:01:dc:7b:1f:0d:d8:d8:
b2:d5:cb:33:d1:2c:40:4e:d1:eb:05:e4:0c:b8:3b:
bf:0f:19:5d:7b:11:83:63:f6:4d:3f:49:5d:0e:ec:
a6:a7:37:d6:e3:d2:78:d3:c5:0c:f5:5a:72:39:4e:
e4:7a:3b:72:fc:e1:f8:7f:86:93:e4:18:3f:e1:1d:
60:01:bb:bb:cb:3a:f8:28:ae:b8:96:65:e9:8e:35:
de:9c:e1:70:f5:fe:da:b1:a2:e2:3e:cc:24:78:54:
c4:09:9f:7b:88:03:7a:cc:57:dd:10:72:eb:ee:1d:
f3:c3:b8:83:ae:50:b5:43:e2:1e:6d:e2:a1:98:f1:
c1:02:5c:c1:7c:b3:7f:2a:cd:46:b2:46:3d:c3:e0:
12:65:38:60:8e:d7:b6:2e:77:87:59:01:78:a6:62:
1c:cd:6c:be:96:da:22:8d:16:85:a6:30:9d:26:68:
ef:d3:09:b9:ef:bb:c2:56:6a:1f:3d:56:d6:0d:f3:
38:8f:5d:de:d8:c9:fd:78:84:5d:53:46:31:71:7c:
bb:c2:49:a8:6b:45:dc:3d:d6:31:80:92:cb:fb:c2:
2d:26:fa:a1:c4:4c:da:5e:0d:a2:d7:49:41:1e:83:
d6:a6:c6:73:ab:a6:9f:64:51:01:0c:a3:e7:5e:9d:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7C:42:86:B5:5A:3A:1D:30:4E:B8:AB:9A:1C:DE:B4:27:E3:A8:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14dfbe8d-938d-3414-96ca-243e5391bf70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.223.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:59:ec:1f:dc:03:fd:6d:22:7c:b2:cb:10:d8:75:de:3e:82:
e6:ee:da:c5:83:bc:70:8e:5e:8c:d1:4e:95:e0:62:66:79:88:
ba:34:cb:40:be:13:c7:ae:4c:d1:6e:83:fc:95:1a:48:5e:a2:
ce:e8:f8:8e:bf:24:09:69:fe:eb:78:5a:5e:d8:a4:3e:0d:ab:
ea:e0:2c:76:d8:a0:e2:e6:43:50:04:24:c1:04:36:37:29:c9:
8e:47:59:52:0a:f3:f5:02:14:bb:16:6c:fa:76:30:94:a9:9a:
cc:42:34:4b:43:cc:3c:fe:b5:de:65:35:8c:ae:7b:e6:3e:f7:
5b:ee:6f:ce:7e:7d:3c:54:43:3c:20:5b:0c:d6:23:16:e5:52:
89:66:d5:af:e2:07:c8:a4:69:3e:52:ca:d6:60:8a:f6:39:0b:
a1:84:5d:c5:98:b6:a3:e7:15:ef:94:c8:6a:5b:4f:9b:50:bc:
78:9b:c6:41:ed:4b:fd:0e:42:43:f6:bf:14:a9:21:3b:c2:46:
64:91:c4:7a:07:32:29:8c:ac:aa:a6:f6:10:27:69:bb:5e:dd:
82:c4:b9:3e:f9:f4:6a:00:11:f8:1e:37:6c:07:a1:e1:c9:c8:
1f:c4:52:11:7b:6d:71:df:2d:d7:5f:db:7a:63:7f:01:0f:b6:
fb:2a:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:20:32 2025 by rpki-client