Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a07377e-2c3a-369c-85f4-989c3b0e9b7f.roa
File: 1a07377e-2c3a-369c-85f4-989c3b0e9b7f.roa (raw, json)
Hash identifier: +R60xGusFjgvYWM+REoEt7ylGwHdsnrJPSKHJjVBQ2A=
Subject key identifier: B1:50:B2:03:02:7E:B8:07:81:B5:CB:EC:86:F6:16:63:2C:D4:99:5F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285845A433D26872BCE9E4998C6A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a07377e-2c3a-369c-85f4-989c3b0e9b7f.roa
Signing time: Tue 23 Apr 2024 13:23:04 +0000
ROA not before: Tue 23 Apr 2024 13:23:04 +0000
ROA not after: Mon 22 Jul 2024 13:23:04 +0000
asID: 33905
IP address blocks: 23.11.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:a4:33:d2:68:72:bc:e9:e4:99:8c:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 23 13:23:04 2024 GMT
Not After : Jul 22 13:23:04 2024 GMT
Subject: CN=11106b12-aec0-4da4-9fd5-bf944217b53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:d9:2f:c9:9c:cc:da:3e:78:6e:c1:d2:1e:
f4:d5:d7:6d:44:ce:30:9e:68:00:70:c1:7d:73:f5:
f3:73:55:40:7f:ea:ff:e5:b1:e2:62:e6:2e:24:56:
08:20:cd:d7:b8:4a:1a:8c:ab:94:50:20:8c:e0:d1:
9c:e3:87:25:53:04:2c:ab:95:57:ca:5c:13:e4:fc:
95:01:3b:d5:66:5f:fd:50:bd:22:23:3f:bc:d5:3d:
b6:3f:e4:69:f2:51:cf:4b:ff:b5:cf:ea:70:76:4f:
fd:c8:b4:c9:cf:fa:bf:41:ce:fd:69:d6:3f:24:ac:
b0:8d:83:a8:e7:ec:2d:c4:94:39:ef:49:ac:5c:86:
61:7a:aa:2a:2a:47:e3:59:14:2b:41:91:01:ec:70:
43:41:fc:71:9e:d5:46:ed:48:a5:db:e3:dd:06:ba:
9c:8b:6e:98:ef:7e:cb:f6:76:1f:5e:0d:04:42:9b:
3c:96:b5:8c:ce:35:0f:ea:0a:2f:11:06:98:42:92:
51:e7:52:7d:ac:6d:6e:84:1f:a2:84:13:06:37:2b:
a7:e4:cd:0b:c9:3b:11:a4:76:01:e2:6a:a3:dd:da:
b2:10:a7:4b:87:71:20:9d:63:5b:fc:fd:c6:82:44:
88:87:63:dc:6a:58:73:5f:36:ed:f6:57:60:af:9f:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:B2:03:02:7E:B8:07:81:B5:CB:EC:86:F6:16:63:2C:D4:99:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a07377e-2c3a-369c-85f4-989c3b0e9b7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.11.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:ab:dd:1d:42:ad:b9:81:8c:68:02:d0:46:48:7a:85:e9:14:
12:92:ec:9e:c1:a1:24:cc:27:0d:0e:17:10:35:64:13:0b:9e:
aa:97:ed:9b:54:31:85:0a:d2:bf:93:f0:5b:49:9b:d9:a1:22:
08:6a:6d:f0:36:cb:44:8c:27:6a:29:c3:2a:32:cd:84:63:79:
0f:74:31:9b:7d:5f:78:8a:1d:aa:95:15:76:eb:6a:78:4c:6d:
c3:65:47:d1:84:ec:19:12:ae:04:f7:81:fc:c2:ab:2f:2c:00:
87:45:76:b7:c4:a1:14:fd:99:e8:80:d2:bb:02:59:3f:fd:16:
57:bf:aa:7e:5e:8b:ab:89:b6:3e:12:ab:bf:96:0f:a5:89:63:
cd:0b:8b:ff:35:11:fb:fb:ef:be:bd:7c:b1:b3:5f:28:3f:74:
5e:20:b0:b3:9c:2c:0a:40:85:2d:d0:45:e0:b9:96:37:99:dd:
e7:96:13:85:67:ff:63:53:16:c2:3b:94:77:e1:ca:0a:81:84:
5a:db:d7:1b:f4:77:4f:02:be:66:36:28:28:75:ab:ae:21:bb:
8c:a9:6e:0e:53:6a:0a:be:f2:ae:a6:66:2d:1b:c9:7d:bf:59:
84:2f:a8:60:44:4f:ba:ea:75:38:1f:63:87:90:f3:cb:82:d3:
c4:e0:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:13:51 2025 by rpki-client