Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7451b311-ca17-3913-b56c-e41d607b75ee.roa
File: 7451b311-ca17-3913-b56c-e41d607b75ee.roa (raw, json)
Hash identifier: ApciQ2d/2yjg13DiIoE7Lef95ghhEA9lL6TOp6tKx44=
Subject key identifier: D0:24:73:03:2D:45:B8:E7:D2:BC:F5:79:71:2F:B6:2B:81:8B:4D:5C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858470C4B056E5F5943862CEB6940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7451b311-ca17-3913-b56c-e41d607b75ee.roa
Signing time: Fri 30 Aug 2024 13:00:41 +0000
ROA not before: Fri 30 Aug 2024 13:00:41 +0000
ROA not after: Thu 28 Nov 2024 14:00:41 +0000
asID: 16625
IP address blocks: 23.222.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:0c:4b:05:6e:5f:59:43:86:2c:eb:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 30 13:00:41 2024 GMT
Not After : Nov 28 14:00:41 2024 GMT
Subject: CN=49974c5c-e832-4035-a150-3e521dc0c037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:87:e3:72:32:77:fe:aa:ff:3d:84:a9:15:
88:a9:e5:d2:a1:d2:c3:42:13:58:cd:84:10:f0:bc:
df:19:92:96:de:23:e7:f8:c5:da:b2:09:68:77:25:
fb:69:6a:c1:1f:66:0e:d2:84:6a:2b:47:98:62:1a:
47:f7:67:bc:e0:12:0d:94:13:65:13:d0:95:72:65:
7b:66:ec:c1:54:2b:eb:36:59:af:a3:b6:40:25:ef:
7d:9c:80:53:f1:17:a9:99:5a:3a:f7:81:6f:f3:40:
e6:df:7a:94:31:92:96:a0:91:a0:e5:f7:c9:57:02:
73:05:97:1c:c4:12:44:34:9c:fa:93:4f:66:c9:9e:
df:92:01:e1:05:56:55:dc:05:5a:7a:8e:06:3c:11:
d0:b8:05:6b:8c:c8:98:47:5e:6a:1e:6c:68:87:41:
1f:0e:0f:9a:d4:74:f2:ed:e4:42:db:01:0d:e9:e9:
d3:91:2a:3c:8b:ea:79:4e:b5:1a:41:be:8d:c5:ac:
a8:d7:8a:74:0b:d0:85:b7:2c:22:a3:15:09:82:2e:
7d:43:63:44:d6:99:cf:7b:03:34:2b:97:b5:33:c4:
de:21:5a:ee:a7:ec:27:a9:bc:f9:8b:31:43:1c:57:
b6:53:16:c5:eb:dc:ce:5a:c7:9e:73:07:8b:1c:ec:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:24:73:03:2D:45:B8:E7:D2:BC:F5:79:71:2F:B6:2B:81:8B:4D:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7451b311-ca17-3913-b56c-e41d607b75ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e6:1d:e5:86:6b:8b:09:02:ba:c3:fd:e2:db:1b:b6:c1:45:
2f:cc:c8:01:b0:f9:41:31:c9:25:a3:33:a4:58:a9:a0:1e:0b:
a3:41:25:b1:0e:12:e8:24:0a:22:cf:f7:04:61:da:13:34:38:
ac:38:17:a5:d0:7f:c1:19:8c:24:68:ed:cc:e9:e1:28:a9:91:
c5:b1:38:7d:38:22:0e:b7:45:19:7c:55:be:a4:db:99:45:d7:
8a:b2:59:91:f6:a8:24:84:10:13:3d:3f:51:67:30:39:ec:c9:
fb:1b:83:4b:a3:f6:e3:5f:6e:7a:f8:83:01:ce:80:22:e2:46:
74:ab:52:50:d0:79:3c:84:6e:0c:26:cb:86:c4:dc:8c:fc:df:
64:ea:d9:c4:1d:da:31:56:3b:96:c2:07:1b:43:a2:64:e9:3e:
de:bc:85:f1:fa:a7:54:7e:1a:30:ba:53:a7:56:ca:8b:20:e8:
06:a9:28:fe:6c:31:5f:5a:fb:30:1e:d1:10:db:29:64:ce:cd:
73:11:8a:7d:5c:95:a5:d7:33:b8:4c:e4:7d:91:6d:13:6d:9b:
82:ce:97:97:0b:4b:d5:99:72:70:49:10:ed:0c:9c:b6:62:62:
22:9f:82:17:47:c2:37:69:d4:5c:2f:4c:a7:8e:98:77:7b:52:
81:3f:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:56:13 2025 by rpki-client