Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66bbc980-c5aa-3cd9-a34f-976393be9e24.roa
File: 66bbc980-c5aa-3cd9-a34f-976393be9e24.roa (raw, json)
Hash identifier: 0+sbuafYxxoMIWhFP7R7ArK2HJ2h1sMnd0J94KnZLBM=
Subject key identifier: C9:6F:7A:0F:82:20:C8:08:7E:0B:7D:2C:D6:FB:CE:5F:1F:95:88:72
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285845F2195EE147CE6AAE3C806F08
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66bbc980-c5aa-3cd9-a34f-976393be9e24.roa
Signing time: Tue 21 May 2024 11:02:49 +0000
ROA not before: Tue 21 May 2024 11:02:49 +0000
ROA not after: Mon 19 Aug 2024 11:02:49 +0000
asID: 20940
IP address blocks: 23.193.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f2:19:5e:e1:47:ce:6a:ae:3c:80:6f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 21 11:02:49 2024 GMT
Not After : Aug 19 11:02:49 2024 GMT
Subject: CN=25ba57cc-d1c3-472a-a6f6-31dcd81a96ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fb:04:d4:56:ce:6e:7d:65:a4:57:f4:dc:81:
0c:f4:5e:1e:4e:32:1f:48:59:42:0c:d4:e2:cf:df:
89:82:fd:66:ad:12:02:1d:1a:cb:b7:3c:e8:18:bc:
7e:9f:f6:9c:dc:6c:34:c4:31:d7:21:7c:5a:d7:80:
e7:5b:a9:94:a6:57:dc:a9:3e:62:91:4e:3a:3c:53:
6f:60:ee:63:dd:77:72:3c:92:4e:13:73:c9:db:53:
7b:9f:b0:64:14:8b:43:65:06:5c:c6:8a:a8:ec:06:
88:97:a4:fd:ab:ff:71:23:a0:cd:11:c7:a4:86:b0:
95:aa:ce:f6:98:8f:0c:af:54:6a:5c:46:ed:81:07:
82:90:41:17:83:50:36:f9:fb:7a:92:a8:67:f0:1e:
63:c7:5f:ca:39:c5:33:b8:b2:22:c0:84:65:75:f4:
77:90:5c:1e:f3:ca:13:d5:0f:11:9d:41:a8:e3:ad:
e1:57:e1:16:42:b4:33:62:03:3a:f1:54:16:48:37:
b7:c7:ef:03:5d:5d:16:dd:e4:28:f5:e7:26:02:59:
37:05:c9:2d:dc:e5:d3:d2:e8:ee:b2:c0:54:22:48:
60:c6:34:41:33:6c:57:f4:19:6d:28:66:f4:6a:4e:
ea:dc:0a:e9:8d:b0:77:e5:f2:11:6d:ac:cf:12:23:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6F:7A:0F:82:20:C8:08:7E:0B:7D:2C:D6:FB:CE:5F:1F:95:88:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66bbc980-c5aa-3cd9-a34f-976393be9e24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:40:f0:1a:60:df:44:37:2e:29:60:91:aa:26:63:2e:ed:b8:
1e:d1:f9:f8:87:62:67:a5:8a:b8:21:18:cc:65:80:2a:97:04:
be:6a:47:4b:b8:e9:6f:c5:e8:9c:0d:f1:0b:b9:c5:48:99:55:
f7:3e:90:56:b8:25:e7:4a:c6:8d:c1:0b:46:3f:06:b1:ec:3d:
8b:af:fc:a9:fc:e5:cc:7c:05:77:3a:ba:6f:92:d4:cb:22:64:
59:95:54:be:ec:4c:ef:cd:b9:b4:95:da:11:30:7a:7b:3b:2c:
5f:cc:ac:f3:05:06:0e:14:25:2b:3c:57:d1:39:0f:8d:41:62:
7b:cc:38:2a:9a:54:4d:9d:a8:c6:7a:b0:92:3e:5c:dd:9b:d0:
56:0b:9d:92:24:ae:a1:2b:56:e3:15:0a:46:cd:7a:87:42:41:
5a:49:0b:17:d6:46:59:66:74:35:a9:06:0e:ba:95:51:eb:3a:
d3:f0:5d:20:50:21:e0:f4:0c:65:7f:24:3d:7e:a2:e7:ac:35:
53:b7:3b:2b:78:56:8e:84:7b:e6:88:3d:77:b7:3e:72:7a:00:
0f:92:eb:82:74:4f:85:95:69:15:8c:a9:91:94:15:2a:3c:76:
4d:97:48:c5:90:9e:5d:e0:b3:87:8e:c9:fb:20:e6:93:6f:48:
f8:32:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:20:46 2025 by rpki-client