Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c379df4-0615-316b-88a8-d3f5e6a0671a.roa
File: 5c379df4-0615-316b-88a8-d3f5e6a0671a.roa (raw, json)
Hash identifier: rnvDMsYxiIrMOs408ccF2rindW8AwcLrHFjh5RvBAjo=
Subject key identifier: 36:39:5F:CA:E9:3A:85:9D:FE:19:EC:79:FA:B1:49:A6:05:EA:AC:CD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847643B79F50D7C9E132C427780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c379df4-0615-316b-88a8-d3f5e6a0671a.roa
Signing time: Tue 01 Oct 2024 01:00:31 +0000
ROA not before: Tue 01 Oct 2024 01:00:31 +0000
ROA not after: Mon 30 Dec 2024 02:00:31 +0000
asID: 16625
IP address blocks: 23.12.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:64:3b:79:f5:0d:7c:9e:13:2c:42:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 1 01:00:31 2024 GMT
Not After : Dec 30 02:00:31 2024 GMT
Subject: CN=f92e9e31-68bd-4479-b2ab-d691549f3d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:01:f9:4a:9a:b3:7f:39:87:fb:5d:aa:fc:
25:99:85:e0:e1:89:b1:99:da:68:e3:77:8a:58:a5:
c1:2a:f6:63:62:7b:2b:90:47:7d:60:e8:5a:60:1b:
37:37:5d:17:09:65:f1:2b:1d:5a:78:e4:cb:9d:93:
4a:b1:d0:3a:89:11:55:d3:48:c6:2d:77:10:71:2f:
24:3b:f3:6c:9f:91:d8:f6:a3:b8:0c:95:95:40:23:
92:8f:e4:7c:ac:56:ca:59:36:06:a1:38:a5:11:8c:
43:5f:dd:d1:ac:fd:a1:49:9d:af:36:d0:ec:7f:87:
20:3b:24:e8:22:e0:32:29:74:e5:2a:04:cf:8b:48:
04:cb:01:d6:ef:d1:62:ad:4d:24:0a:25:0e:99:f4:
4f:c9:d2:43:90:d9:6f:10:b4:99:dc:1a:30:eb:27:
17:d1:5e:7d:bd:69:fc:59:f1:99:47:62:5d:22:df:
d4:f5:ba:0a:9a:e6:ef:1d:94:2f:f6:d7:38:f3:12:
a6:7d:20:ec:10:4f:88:9a:28:89:77:b0:1f:4b:f4:
a8:ff:f2:fa:2f:25:8e:18:90:3e:08:36:79:91:a8:
5b:03:ba:a2:cd:ab:6c:90:5c:d0:17:87:6d:2b:c1:
59:aa:b2:16:eb:27:d7:23:97:67:f1:6e:0a:6d:3a:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:39:5F:CA:E9:3A:85:9D:FE:19:EC:79:FA:B1:49:A6:05:EA:AC:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c379df4-0615-316b-88a8-d3f5e6a0671a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.12.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:92:32:fe:45:7d:97:cf:9f:f3:9c:93:c2:55:4c:fc:20:db:
34:1d:3e:cd:6f:94:8a:db:df:cb:20:ce:6c:23:19:fa:17:b7:
25:04:2e:9b:a1:bc:39:87:0c:e1:39:ba:6c:f6:be:48:6b:e5:
cf:49:8e:93:4d:92:9c:00:1f:f6:21:53:a6:cf:ce:83:19:14:
c2:30:db:37:ab:b6:3e:0d:7f:ed:aa:ab:de:7a:07:3b:2e:99:
bf:37:91:03:c9:7b:a1:66:0e:02:a4:ef:3a:c6:6e:51:3a:07:
03:57:1a:6b:25:4e:a2:d9:7a:30:29:0c:9f:e5:4a:5a:98:96:
c4:b2:ad:5a:44:f7:d5:b4:c9:2f:2c:1b:13:6a:78:1d:18:cd:
fc:e9:64:93:b7:30:ae:31:bf:a8:21:a4:03:05:eb:01:c7:bc:
9c:51:72:f4:d6:a5:a0:07:ce:81:7d:f1:34:0d:65:95:29:1d:
d6:64:2b:76:47:01:67:d3:41:61:b6:ab:b1:f6:21:c4:e9:02:
8e:3d:10:42:46:e9:cb:36:e8:5a:df:8b:bf:17:36:73:28:1f:
83:09:6f:d1:41:e6:15:8b:ae:19:b2:95:c4:07:34:9c:b1:e1:
60:7b:c0:7b:2e:8d:98:8e:84:4a:93:64:de:e9:17:94:59:d9:
86:45:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:37:55 2025 by rpki-client