Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28f3368a-d774-3fc4-a61c-a0370e1cebce.roa
File: 28f3368a-d774-3fc4-a61c-a0370e1cebce.roa (raw, json)
Hash identifier: svlbKPH+L21/wYfv88Qoln+1cenAwEx46ixl/JmSjLc=
Subject key identifier: 4C:D3:7A:EE:2A:4B:44:93:8A:76:39:59:FB:08:24:A7:EF:AC:BB:63
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285845EF628410D3CF03568465B0D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28f3368a-d774-3fc4-a61c-a0370e1cebce.roa
Signing time: Mon 20 May 2024 11:42:46 +0000
ROA not before: Mon 20 May 2024 11:42:46 +0000
ROA not after: Sun 18 Aug 2024 11:42:46 +0000
asID: 20940
IP address blocks: 23.59.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ef:62:84:10:d3:cf:03:56:84:65:b0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 20 11:42:46 2024 GMT
Not After : Aug 18 11:42:46 2024 GMT
Subject: CN=8c679f5b-14b7-4b9c-a6fa-e8bd22581f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:14:1f:56:c3:91:a1:74:4b:30:91:4b:cb:
7f:07:1c:42:a6:2b:1c:1f:9b:7b:46:04:75:46:82:
75:92:54:90:97:57:29:61:08:76:c8:78:7b:4d:62:
36:ce:54:68:ff:8d:40:2b:f7:7f:34:f5:9c:62:7b:
5b:7b:3d:3d:bf:a8:ea:f4:7b:78:4c:3e:84:02:ff:
11:42:6c:70:eb:53:e1:60:7e:81:29:89:88:e8:d9:
34:85:dd:0e:32:87:e2:d3:dc:0d:5f:86:a2:fe:85:
43:74:2b:a6:a0:3d:03:6f:4a:54:db:03:52:e6:d7:
f6:d3:a0:1f:4b:b2:8c:55:17:2e:87:09:87:1d:07:
5f:74:88:31:68:59:6b:58:ca:cb:04:a3:7b:7c:72:
b0:05:33:5f:ea:83:51:4c:f2:70:6b:b7:47:0d:d5:
74:72:77:fd:25:d3:1f:1c:36:a0:51:54:30:d9:8a:
2e:ae:00:a7:6e:50:0f:2d:b7:3b:11:10:bc:08:10:
98:91:6b:f6:98:96:74:58:9f:ee:99:0e:c9:2b:c3:
2f:19:f8:94:7d:87:dc:e2:a3:c8:3f:32:52:66:a6:
e1:fc:0b:f7:a6:9d:de:6d:91:8b:5b:f3:a9:29:dc:
ea:3d:56:2b:50:7a:0c:9b:e3:b8:19:62:d6:5d:6d:
39:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D3:7A:EE:2A:4B:44:93:8A:76:39:59:FB:08:24:A7:EF:AC:BB:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28f3368a-d774-3fc4-a61c-a0370e1cebce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.59.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c2:40:67:2b:21:cd:22:b7:22:0c:94:8a:34:c8:cb:2a:6e:
3c:e3:cf:32:fd:7b:b3:1d:a7:d1:90:10:53:8e:3f:f8:27:54:
a0:db:80:da:6c:90:66:9e:e1:0e:51:67:8b:8e:6d:2b:4d:8e:
78:f3:79:32:13:a4:1e:69:2f:71:66:5d:1b:ed:e3:d8:4a:28:
63:c3:e5:21:8b:cb:83:a0:c9:5b:52:a6:8c:29:d1:4d:d1:9a:
a8:f1:91:6a:61:44:e1:38:1e:df:26:f0:85:f0:9f:8d:e6:1a:
ca:d3:94:d5:7b:b8:57:31:de:4a:92:f9:e1:94:2a:62:69:d1:
74:90:66:ea:92:a1:f4:99:45:e1:22:22:62:d2:ac:31:1b:4b:
e9:cc:f1:92:62:5e:72:fa:d3:24:96:8c:44:7f:21:2f:26:7f:
8f:25:fc:79:4c:81:96:73:9e:c7:c2:59:c1:ae:78:04:bd:88:
fe:05:81:a1:e1:99:2a:86:c2:ad:41:f6:0d:f6:fe:ca:a6:18:
b7:de:d3:7f:a4:83:0d:07:ec:49:8b:b6:47:ac:a1:db:a3:10:
d8:9d:3a:28:42:f2:54:d9:f9:07:5c:b2:5e:22:4e:5a:ce:5f:
9a:04:9c:0c:d7:36:b4:e2:2e:5a:7a:4f:9d:a8:f3:6d:f1:7d:
13:9f:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:31:15 2025 by rpki-client