Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/355a3382-ed87-39af-94d7-40d060c7bd2e.roa
File: 355a3382-ed87-39af-94d7-40d060c7bd2e.roa (raw, json)
Hash identifier: Yv1StX7gfxrm1RTtjJMZGj1EYqK6yq2uzCrXJxwrfls=
Subject key identifier: 14:FA:05:7E:81:F3:A9:2A:98:54:E7:3D:D8:A1:68:93:76:5C:03:72
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846C51A6F020F3FB8508CEBBE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/355a3382-ed87-39af-94d7-40d060c7bd2e.roa
Signing time: Mon 05 Aug 2024 01:00:29 +0000
ROA not before: Mon 05 Aug 2024 01:00:29 +0000
ROA not after: Sun 03 Nov 2024 01:00:29 +0000
asID: 16625
IP address blocks: 23.50.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c5:1a:6f:02:0f:3f:b8:50:8c:eb:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 5 01:00:29 2024 GMT
Not After : Nov 3 01:00:29 2024 GMT
Subject: CN=557f4bcd-983a-4a3a-bd5d-4001fa071b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:63:ef:a8:3d:12:0d:71:01:ee:75:60:32:
50:3e:ba:ee:e6:c6:63:6b:13:39:0c:ef:55:0d:d5:
61:0b:ae:23:83:1f:fb:15:e4:a0:2f:a2:7c:98:e9:
04:78:a5:07:74:ed:f2:1b:18:41:a3:72:6c:30:83:
ed:5d:49:f1:b2:c6:0c:55:7a:48:35:e2:90:b8:f5:
d7:87:fb:f2:d6:19:df:b2:5c:65:69:3d:60:fa:f1:
90:03:58:04:9d:bf:58:fc:0c:b3:cb:3d:8e:ac:81:
2f:97:63:1a:fb:28:8e:ca:37:e6:6b:cf:57:9b:ab:
4b:01:89:b3:1e:73:c7:d6:77:25:b0:03:45:13:5a:
72:49:29:f9:e1:b9:48:a9:09:ea:7d:42:7e:c3:ef:
72:97:60:b8:24:95:92:97:7a:91:94:5f:01:4d:74:
7b:31:79:49:3d:ab:8d:ab:68:7b:3f:28:b5:fb:86:
b4:b2:74:9e:96:7a:0a:5a:6f:c4:38:36:55:ed:c2:
8a:10:8b:e9:2e:65:b3:b9:95:e3:03:30:56:d1:8e:
8b:66:e4:f8:0f:f1:2d:57:9e:b9:fb:57:66:1a:02:
32:18:07:58:06:d4:8c:50:7e:8a:71:f4:cc:87:26:
77:b5:76:6b:94:46:f8:09:d9:3c:1c:aa:19:a4:5c:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:05:7E:81:F3:A9:2A:98:54:E7:3D:D8:A1:68:93:76:5C:03:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/355a3382-ed87-39af-94d7-40d060c7bd2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.50.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:26:5f:fe:4d:68:c3:bc:00:24:84:e2:11:df:f4:fa:c2:e3:
0e:cc:fb:a7:8b:9a:df:9a:d1:23:f3:03:0f:33:32:a3:0e:b7:
aa:93:b9:32:95:d0:26:11:5c:5f:62:64:4f:7c:23:42:40:13:
99:33:c7:12:86:03:42:61:0a:12:b8:f3:1d:f9:31:f4:c8:07:
d8:ab:a6:5e:77:bd:6d:14:7c:5a:6f:dd:db:f8:46:39:c9:66:
22:7f:96:ca:ed:f1:57:8b:cc:58:37:ac:29:d3:11:dd:df:28:
06:6e:e0:09:16:ed:e6:ef:15:11:53:4f:07:37:b1:1e:7c:f0:
2f:4b:05:52:3d:99:b9:4a:68:36:be:16:ea:cf:58:2d:2a:ca:
d7:9b:a8:51:15:97:40:fb:76:28:3d:bf:3b:9b:46:31:86:cd:
6e:20:a1:ce:10:42:29:3b:02:3f:3d:f0:43:48:61:b5:5d:ff:
c4:59:0b:a9:89:78:fa:c9:fb:84:f0:28:f3:5f:8e:ae:30:42:
88:c9:b4:0a:ed:1f:af:ab:6d:e6:6a:6c:ab:2c:1a:ef:90:d2:
a0:31:c1:d3:70:6e:72:26:19:0d:87:ed:f5:51:80:ea:2a:c2:
c3:3b:81:1c:03:e9:8d:3a:b3:f0:98:80:78:a2:9f:36:dc:e4:
87:27:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:48:11 2025 by rpki-client