Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/542c8272-503f-3cf0-a9c7-a0226f2a81bb.roa
File: 542c8272-503f-3cf0-a9c7-a0226f2a81bb.roa (raw, json)
Hash identifier: 8ZFbcsWTnamJVkl82TYqlqSURTSmIWzK26PaedCih7g=
Subject key identifier: 8B:DD:E6:C8:41:9E:3E:87:72:F7:11:EC:9E:49:0C:C4:CD:BD:5D:61
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858475216187AA768E3EABD305A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/542c8272-503f-3cf0-a9c7-a0226f2a81bb.roa
Signing time: Tue 24 Sep 2024 13:00:40 +0000
ROA not before: Tue 24 Sep 2024 13:00:40 +0000
ROA not after: Mon 23 Dec 2024 14:00:40 +0000
asID: 20940
IP address blocks: 173.222.46.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:52:16:18:7a:a7:68:e3:ea:bd:30:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 24 13:00:40 2024 GMT
Not After : Dec 23 14:00:40 2024 GMT
Subject: CN=891f3003-da56-4d42-90f1-0471b4ecf2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:ab:c0:f6:17:1e:cb:23:2b:3b:11:26:41:
46:63:49:ea:2d:16:de:b8:4f:53:e7:00:c4:e3:f1:
8a:a1:63:33:a1:b4:3f:ed:14:a2:b0:f6:a1:ac:6e:
d1:93:ec:65:2e:86:0f:3a:45:2b:6e:ed:7e:62:2b:
37:f5:60:5b:18:99:76:7d:62:48:95:f9:e8:6a:b2:
9c:51:bc:98:23:c4:c1:a7:26:f0:ae:54:30:fe:16:
3c:0f:b4:8a:cd:2f:c4:25:ae:31:0a:29:dc:a8:11:
bc:fc:f7:88:e7:ca:32:55:5e:78:e3:f4:86:cc:56:
21:29:34:26:cf:11:d6:36:56:5b:df:7e:ad:c7:9d:
10:8e:17:bd:17:51:51:9d:36:b0:b9:b4:da:23:53:
09:5d:b3:a3:9d:e0:3d:b2:f1:66:04:7e:8a:eb:92:
c1:bf:c1:8f:cb:71:26:4b:98:ba:06:50:b6:cf:a6:
11:1d:be:db:de:82:ee:9b:ff:eb:e7:2e:6e:5c:14:
d5:da:94:05:d9:4b:3e:f3:af:90:7d:91:ea:a6:e3:
ba:4d:74:5b:09:1d:fb:2e:c0:b0:77:6e:d0:a4:bc:
3c:50:ac:bd:77:7b:85:24:86:94:97:da:3d:a3:d3:
1f:b3:24:56:90:7f:2f:c7:19:6c:68:04:ca:e7:79:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DD:E6:C8:41:9E:3E:87:72:F7:11:EC:9E:49:0C:C4:CD:BD:5D:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/542c8272-503f-3cf0-a9c7-a0226f2a81bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.46.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:15:cc:de:5f:07:75:a4:3c:05:83:d7:16:4d:d0:01:82:03:
1c:7d:b8:8a:ee:5a:b4:d5:2b:ae:19:a1:4d:62:89:33:5e:75:
9d:c7:10:4b:a7:8d:4b:eb:cd:cf:51:53:cc:d9:60:5a:35:b8:
56:bb:95:94:a9:53:94:b1:a4:66:01:51:08:2d:ac:2d:59:da:
78:77:10:ec:e5:40:05:ff:01:42:89:4b:2f:98:44:11:99:95:
cb:a6:4d:20:f7:17:c1:7c:95:0d:0a:cb:73:7c:25:9c:70:c1:
4e:8a:96:81:fa:21:34:02:c5:b5:db:93:fc:2f:ad:88:5e:67:
cf:f0:44:93:35:37:56:74:31:5c:74:cc:86:d4:0c:69:88:5d:
82:f6:07:57:39:26:9c:e8:7e:f9:58:7f:6e:61:2c:21:4e:0d:
9f:8a:01:e4:fd:5f:e4:8d:bd:bf:99:d2:5f:62:7d:9c:a7:d7:
4d:86:e2:19:f8:63:9f:64:83:92:e0:fe:09:a1:68:1e:9b:75:
e1:6e:d2:f8:a0:a9:2f:d1:e2:94:66:08:93:7e:ed:40:cd:35:
45:bc:05:00:0b:cb:84:db:db:08:01:9a:e3:5e:23:db:c2:16:
c9:8e:f3:57:4f:53:34:20:83:8b:25:3c:2b:bd:da:e7:8a:b8:
b1:95:16:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:28:25 2025 by rpki-client