Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c6643ae-a63b-344d-82e9-fe2ef293e320.roa
File: 3c6643ae-a63b-344d-82e9-fe2ef293e320.roa (raw, json)
Hash identifier: tN6gSXctpnCLZcRdaOaU9EM0BxwlWHNoXZwkObo5RIs=
Subject key identifier: 98:14:20:29:81:8D:7B:84:94:1E:E3:A7:B5:42:ED:A3:B9:EF:1B:46
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584754E0ECAB09CF001FE7410180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c6643ae-a63b-344d-82e9-fe2ef293e320.roa
Signing time: Wed 25 Sep 2024 13:00:41 +0000
ROA not before: Wed 25 Sep 2024 13:00:41 +0000
ROA not after: Tue 24 Dec 2024 14:00:41 +0000
asID: 20940
IP address blocks: 23.64.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:54:e0:ec:ab:09:cf:00:1f:e7:41:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 13:00:41 2024 GMT
Not After : Dec 24 14:00:41 2024 GMT
Subject: CN=9154297a-a51b-48e4-a112-9c3211207216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:bf:38:ea:18:04:e1:77:3d:0e:5d:8b:08:
6b:bc:bb:54:5a:3d:91:17:a1:c9:a8:ff:49:37:7c:
43:a2:78:52:c7:71:c1:80:25:46:0c:ec:ca:28:c6:
8e:f3:c7:eb:69:1c:7c:f4:28:d7:2e:9e:18:41:3e:
e3:35:6c:d1:2c:0a:df:99:be:46:19:c4:aa:58:bf:
9a:c3:70:7b:8e:18:33:ad:19:f3:35:09:80:b6:75:
96:99:c6:a2:93:d3:87:66:b4:9c:ad:80:48:c6:be:
ee:7c:75:f2:11:dc:05:91:9b:bf:84:fd:ad:53:bd:
50:87:f6:fc:4c:ad:f4:1c:e0:f1:3a:6b:d8:e5:2c:
00:53:a0:9d:65:1a:30:cf:3f:d9:19:b3:13:fc:d1:
fc:83:d3:6d:59:07:8a:a3:61:24:b6:90:0d:91:cc:
40:aa:0e:44:39:23:cd:5c:02:36:57:0f:92:83:03:
41:80:5a:15:66:2c:a7:cc:84:40:03:1f:2b:76:1c:
b9:9c:85:a0:60:eb:5f:ba:fa:4e:01:87:b7:58:76:
c9:6b:9c:7d:a5:fe:a6:48:1d:08:e2:53:26:a6:41:
c2:43:6d:c2:a8:ee:c3:0d:47:f3:b1:60:f9:e9:c9:
b3:61:ee:19:61:4d:76:82:60:0c:20:14:f9:64:03:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:14:20:29:81:8D:7B:84:94:1E:E3:A7:B5:42:ED:A3:B9:EF:1B:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c6643ae-a63b-344d-82e9-fe2ef293e320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.64.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ce:84:fc:09:b9:fd:6e:6b:dc:6f:89:e3:54:82:a0:b9:c9:
a5:fc:c2:c7:0c:f9:c0:62:d6:0e:7d:f1:ee:f0:f4:78:c1:d8:
ed:df:a5:79:29:5f:07:96:d4:68:e8:20:76:c5:b5:0e:68:2f:
5f:d6:9d:ef:22:9f:0c:e8:d5:3b:a7:e2:47:c0:2a:d2:94:7c:
ee:2d:c7:5b:e4:96:80:fc:a6:f7:7c:91:35:f0:29:be:fe:6e:
62:98:f5:13:5f:0d:2b:17:6e:d4:6b:4c:3b:b3:6d:58:51:4e:
90:49:fb:ee:5f:f3:d7:77:44:63:06:31:67:8c:6a:df:0e:bf:
57:98:bc:4f:90:d2:ef:39:6b:ae:57:9a:3d:b0:62:ff:2d:78:
6f:ce:5a:59:8a:d9:41:9a:cd:89:a3:5b:36:f6:6c:bd:f6:18:
7b:d6:d7:6c:c9:64:6d:98:ae:2b:5d:21:8d:bc:5d:4d:cd:97:
ab:91:fe:9d:ae:90:93:34:7b:d6:32:f5:ab:64:d7:a3:82:51:
c9:16:84:c6:59:bd:e3:ec:68:0a:0d:96:f6:2a:f9:1e:f6:cd:
c0:bc:13:79:77:c8:a5:af:b0:27:a1:33:ab:5b:29:33:90:f2:
2e:c1:93:09:85:09:d2:bf:b6:c7:cc:bc:48:fd:08:93:f7:27:
9a:de:aa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:04 2025 by rpki-client