Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c94a2a5-ebda-31b1-a2f2-19b3107ef318.roa
File: 8c94a2a5-ebda-31b1-a2f2-19b3107ef318.roa (raw, json)
Hash identifier: 3RZlAy/dWZoj8ffwTewOX4NDMbqpFG1sLcOt9Bgo9bM=
Subject key identifier: 38:27:2E:0A:23:D0:54:BF:29:AB:82:B0:7A:70:7A:04:C1:2F:72:94
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847643B7BF3B8F014B1359F9280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c94a2a5-ebda-31b1-a2f2-19b3107ef318.roa
Signing time: Tue 01 Oct 2024 01:00:31 +0000
ROA not before: Tue 01 Oct 2024 01:00:31 +0000
ROA not after: Mon 30 Dec 2024 02:00:31 +0000
asID: 16625
IP address blocks: 23.12.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:64:3b:7b:f3:b8:f0:14:b1:35:9f:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 1 01:00:31 2024 GMT
Not After : Dec 30 02:00:31 2024 GMT
Subject: CN=dfee525f-392c-47d0-b65e-6ae793823860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:4f:89:5a:0d:bc:38:75:6d:1e:15:92:4b:
8d:16:c4:87:4c:2e:0a:50:00:fd:42:df:bd:b0:47:
d9:04:bb:bc:de:6d:57:d1:6f:b7:65:5f:5a:04:0a:
bc:8f:2c:88:46:40:24:47:fe:3e:46:72:f6:41:13:
51:3c:91:2e:b0:dc:a8:8e:28:8c:cb:c9:46:c8:e1:
d0:bd:6b:d0:6b:82:83:ec:be:df:66:45:58:6f:ff:
96:48:c1:75:0d:c7:7c:3d:19:41:20:29:d3:86:13:
7c:68:4c:3f:40:28:6f:dd:69:29:99:a7:e9:cd:07:
39:eb:5e:16:3e:c8:7b:d7:63:9e:b1:52:ab:74:cf:
a0:8e:1c:6a:b2:40:f4:45:2d:2b:e0:ba:94:3f:b7:
97:1c:01:4f:20:37:c8:55:9f:87:7d:3a:76:50:b7:
f6:7e:a4:fb:46:67:1e:32:09:50:04:0e:06:a9:dd:
e2:5d:62:85:46:62:3e:1b:b5:47:88:86:88:0b:dd:
ef:62:72:55:79:0a:a0:51:5e:ea:1d:7d:87:1c:9b:
6d:22:df:15:f0:31:26:15:5f:5e:01:f1:4d:22:c9:
e9:99:c7:d2:72:47:18:10:dd:ce:2e:a8:3c:72:2b:
fc:f5:19:67:92:7b:23:84:b9:fb:24:aa:dd:38:bd:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:27:2E:0A:23:D0:54:BF:29:AB:82:B0:7A:70:7A:04:C1:2F:72:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c94a2a5-ebda-31b1-a2f2-19b3107ef318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.12.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:19:68:a1:ee:6a:48:64:d4:7d:71:f4:39:37:ce:98:cd:0e:
9d:71:63:7d:12:b7:4c:eb:a6:a0:3b:0e:ed:df:2e:03:f8:46:
89:97:81:4a:ac:70:9b:35:79:3a:28:6a:05:53:23:52:be:fd:
b9:f5:e5:33:21:52:01:bc:44:58:5a:88:75:cd:85:57:4f:34:
7f:16:88:b2:7b:6c:17:7f:af:54:f9:4f:d6:24:14:17:e2:41:
3e:16:df:37:02:52:39:55:4b:1e:4e:99:32:ea:9e:94:ce:3e:
8d:aa:c0:36:fb:c5:b7:82:8a:d5:95:bc:06:70:0b:78:f0:73:
12:a1:2b:4f:e7:18:64:0d:6d:eb:3a:04:27:59:a3:ab:d9:8b:
fb:53:2b:b9:15:9d:54:15:c1:bc:ec:2a:82:38:60:96:68:26:
68:e2:34:2e:bd:22:df:58:2d:99:07:fa:72:3c:35:70:b7:27:
4a:27:6c:71:b4:30:9f:01:b0:51:78:74:46:be:1f:85:fc:d5:
c3:ae:8b:7d:89:e8:be:a5:a2:11:29:b4:f7:e2:3a:c8:59:2d:
63:41:6b:7e:eb:d1:1b:cf:d1:20:d5:38:de:03:f5:1b:40:79:
77:40:84:b6:85:6b:83:1c:2b:65:47:1a:52:08:17:4a:24:fe:
32:fb:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:38 2025 by rpki-client