Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fb88ad8-5854-3346-8002-b400b08d3ec4.roa
File: 1fb88ad8-5854-3346-8002-b400b08d3ec4.roa (raw, json)
Hash identifier: WoYOIj5oP9//1bS8M6c76wMjM9d0jjvfvIQflbA0kwA=
Subject key identifier: B6:C0:64:D6:86:FD:ED:59:0A:31:4C:0F:15:DE:C5:6F:E1:EE:83:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846864A1A03B55C7BB87A354000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fb88ad8-5854-3346-8002-b400b08d3ec4.roa
Signing time: Sat 13 Jul 2024 13:00:33 +0000
ROA not before: Sat 13 Jul 2024 13:00:33 +0000
ROA not after: Fri 11 Oct 2024 13:00:33 +0000
asID: 16625
IP address blocks: 23.2.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:86:4a:1a:03:b5:5c:7b:b8:7a:35:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 13 13:00:33 2024 GMT
Not After : Oct 11 13:00:33 2024 GMT
Subject: CN=151bfaa6-ceee-4cc8-823d-dca7a22db099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:60:c8:79:0b:f0:c9:71:6c:2a:be:40:7c:
80:a0:91:71:39:27:8e:de:d5:bf:97:92:fa:b4:a3:
da:8d:50:91:37:1d:92:a1:4e:8f:f1:0f:ec:94:45:
e1:aa:c8:a5:0c:c5:3e:2c:2c:ce:d8:0b:42:5e:91:
79:1c:dc:24:16:45:b5:fb:7a:6d:13:db:c5:a3:1d:
0e:31:91:23:f7:7c:6e:73:12:18:59:5c:fe:cb:07:
06:df:85:35:49:97:b5:b3:d3:e8:cb:e6:3d:d6:b6:
59:87:ad:a2:e3:e1:a8:e2:fe:dc:9c:31:b0:fa:50:
6c:a2:bc:23:32:f8:e3:d0:6f:3a:11:ff:11:8a:3c:
df:14:15:a7:5c:8f:24:8f:e7:ed:1f:8f:6f:85:08:
a2:de:1e:6d:af:8e:53:97:0d:17:10:57:05:7e:ab:
67:46:98:68:04:0b:cd:29:3f:67:8e:65:44:5d:62:
eb:17:dc:2f:ce:27:9d:a9:81:b3:27:79:e2:8c:1a:
cc:94:e5:2f:3f:84:e4:b1:8c:71:83:62:4a:1a:b5:
99:d1:2d:52:38:3c:2b:0c:56:a8:47:9b:0c:b4:7a:
e0:e5:e6:91:b7:39:05:d5:a7:47:36:90:dc:e0:42:
ab:22:bd:65:54:d9:6f:af:cd:b6:36:b4:76:6a:07:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C0:64:D6:86:FD:ED:59:0A:31:4C:0F:15:DE:C5:6F:E1:EE:83:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fb88ad8-5854-3346-8002-b400b08d3ec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.2.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:c6:3e:87:d4:cd:a8:ef:a7:e6:5b:4c:7e:77:70:06:97:6d:
11:cf:8b:35:d0:4d:ed:dd:6b:56:ad:a1:4a:7e:20:ee:10:aa:
f2:fe:d4:ec:a3:dc:b0:04:74:33:55:73:d7:88:9c:53:f9:7d:
df:72:2b:90:79:11:fd:d1:d8:4d:06:b2:62:a2:22:ff:89:d8:
99:fe:e5:22:b0:c9:29:87:83:6e:3a:da:c0:30:72:ab:e3:c5:
42:98:eb:8f:a9:cf:43:72:aa:da:be:05:06:c8:1a:4e:b2:a5:
50:13:a2:b7:52:9e:b6:b7:bb:a8:7f:e5:d1:dc:55:35:f4:0b:
74:78:91:9e:1d:56:08:02:dd:40:b9:63:c5:e7:b1:7e:b2:e2:
24:e5:10:4f:0b:6a:ac:5c:04:82:69:07:68:4e:28:51:5d:a7:
bf:ed:96:8b:96:97:34:e5:15:63:e9:2d:2b:19:b8:b2:ad:79:
6f:ce:1a:93:32:a0:a2:4c:25:1b:6c:d4:e5:82:05:4c:5e:78:
58:8e:a8:d4:02:2d:e1:83:82:82:38:02:9e:fd:7f:fd:3a:d3:
94:42:67:df:b8:c5:dd:1b:3e:f4:3c:1a:b6:02:c7:51:8f:14:
25:ea:a5:08:2e:50:c8:8c:8c:43:33:82:1e:a3:c6:08:52:8a:
be:69:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:51:39 2025 by rpki-client