Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3eeb2fd4-22a4-3e5c-adac-4bce676a1242.roa
File: 3eeb2fd4-22a4-3e5c-adac-4bce676a1242.roa (raw, json)
Hash identifier: mnOEf5zhmQc84/ESwexsCmczSfu9xBPlSnOE+FVfx7Y=
Subject key identifier: 4D:0D:C2:2F:32:A9:45:DE:EB:B6:FC:15:B9:A4:02:84:8B:2B:9A:91
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848143A66CA5A24D3FBA2A646C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3eeb2fd4-22a4-3e5c-adac-4bce676a1242.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 16625
IP address blocks: 23.41.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:66:ca:5a:24:d3:fb:a2:a6:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3419111d-16ab-4a9b-acdc-df2b8f302e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:ee:e7:bb:b2:c3:46:c7:52:c8:e9:40:3b:
40:44:50:a7:b7:1c:17:ab:2a:c5:34:e9:7b:e0:5b:
9b:ec:65:d1:1a:38:a2:9c:e2:f2:bd:d8:55:f4:b6:
d0:19:aa:ce:53:90:6a:c6:9d:c1:95:27:ae:78:aa:
68:60:d8:58:8a:b6:d3:f8:4f:7d:bb:8c:1d:bb:d2:
49:2f:18:9a:60:1a:0d:ac:b8:de:4e:24:81:4a:aa:
4b:b7:9f:50:88:7a:67:b7:0d:b2:51:fe:21:83:83:
4f:90:2a:c8:59:d7:fa:83:2a:f6:0f:8f:35:b9:e4:
a9:75:1d:fd:22:fe:3f:ab:ee:88:db:70:b7:24:dd:
ae:d1:2c:39:58:2f:45:62:50:68:a3:8a:a7:ab:3d:
6f:74:fd:e8:3a:c9:da:75:ba:69:e7:11:35:b3:71:
69:fd:cf:ab:7f:cf:ee:18:e4:34:12:58:cc:64:5d:
22:a1:48:24:ae:6b:de:61:be:6a:54:8b:fc:bb:61:
3a:70:94:4f:5a:df:c6:f5:a2:e7:26:a9:ef:fa:5c:
2d:32:0a:4d:8c:da:a1:a1:1d:6b:9a:65:7c:e5:ec:
07:44:cd:d6:55:6d:61:0f:00:31:33:93:05:af:f0:
28:3c:ef:74:6a:0c:69:e1:a1:96:66:99:9f:c4:85:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0D:C2:2F:32:A9:45:DE:EB:B6:FC:15:B9:A4:02:84:8B:2B:9A:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3eeb2fd4-22a4-3e5c-adac-4bce676a1242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.41.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:33:b6:5b:6d:3e:df:6f:1f:12:d3:77:00:00:f6:9c:b1:20:
1f:2e:5b:d9:75:33:c9:cd:87:f7:5a:08:b7:65:63:3a:d4:d5:
f8:79:47:7e:a2:b9:46:e6:f6:66:4d:71:45:09:93:2b:de:a4:
9d:22:0a:e7:1a:76:b6:ff:ce:b4:e6:41:ff:4a:da:16:47:ed:
e9:71:5a:60:08:f3:07:61:b8:2a:f0:90:56:b1:18:5d:dd:58:
60:a9:ae:22:59:c3:7f:76:6d:5c:a1:7c:26:2d:00:9a:ca:fe:
02:cf:5e:02:05:8d:61:fe:d3:92:32:1b:31:2b:87:ae:b4:8d:
4d:9b:b4:0e:09:64:a5:ea:60:71:f9:02:0e:64:e9:81:05:b4:
cb:79:36:26:6b:9f:47:f1:a8:e3:b1:21:dc:fd:f4:00:78:dd:
e0:83:cd:9a:d1:f1:2a:fc:62:8d:cc:4e:80:14:1c:e1:fc:ba:
ed:cd:9f:72:4e:e1:f4:cd:67:4f:23:78:83:1d:2a:68:e0:26:
25:d9:0b:a4:71:b8:02:23:80:04:e3:2d:57:66:79:a6:18:cf:
80:88:5b:f9:78:94:50:e0:1d:6a:de:86:68:82:43:be:f4:48:
e1:09:37:32:44:f0:3d:96:73:b3:94:cf:81:98:53:7f:e5:9b:
0d:16:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:37:47 2025 by rpki-client