Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d32150c-6d53-3e11-a766-13256244ba6f.roa
File: 8d32150c-6d53-3e11-a766-13256244ba6f.roa (raw, json)
Hash identifier: 3qWpf6zGMGtOKe3kUxfyKDEfjcfY4sTM1sI4ZWys3/g=
Subject key identifier: 97:A0:63:5D:09:5F:C8:80:6B:67:D7:E9:DF:5C:12:DE:6B:69:69:DC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846BE1FDC49B1186AF9387B59C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d32150c-6d53-3e11-a766-13256244ba6f.roa
Signing time: Fri 02 Aug 2024 13:00:39 +0000
ROA not before: Fri 02 Aug 2024 13:00:39 +0000
ROA not after: Thu 31 Oct 2024 13:00:39 +0000
asID: 20940
IP address blocks: 23.45.170.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:be:1f:dc:49:b1:18:6a:f9:38:7b:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 2 13:00:39 2024 GMT
Not After : Oct 31 13:00:39 2024 GMT
Subject: CN=5ec468b3-f72a-4cb1-9a42-862d51aaa471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:cb:30:53:e7:9a:ab:2a:9f:d9:be:1f:eb:
42:5a:10:60:27:fe:92:e6:aa:38:43:ee:7e:04:8c:
7a:28:c0:f9:75:25:c1:bd:f9:8b:ee:66:35:eb:f9:
65:93:39:7e:94:cf:16:f5:b5:99:67:e1:f5:b6:1b:
2e:64:54:11:9d:76:52:97:2a:a7:90:98:ac:20:2a:
d8:63:f9:c9:c0:14:ed:56:0c:c6:bb:9e:5f:22:9a:
a5:b2:d8:ae:51:64:4c:45:5d:46:e8:a4:08:fe:88:
8a:cb:86:b0:22:f0:80:99:60:1a:93:bd:04:ff:61:
c0:9b:ba:91:7f:43:ae:7e:04:f0:7c:ac:77:3d:96:
1e:b8:77:9a:74:40:6c:bb:2c:0f:f8:98:35:b2:0e:
27:6c:17:1b:83:ab:18:05:6d:6c:ec:5c:b0:5a:d3:
52:d2:5a:67:9b:75:b6:24:8a:76:32:51:97:b8:8e:
0b:60:69:2e:99:62:92:9d:82:2a:c8:d6:00:08:d6:
b3:88:e9:77:c9:5c:ea:82:fa:ee:a2:59:ea:17:07:
7e:eb:d9:b9:48:e4:89:de:b8:05:44:1d:a7:2e:1b:
22:5d:4a:34:aa:3e:54:c2:e4:94:ba:d9:17:e9:05:
30:85:f2:7a:0e:f0:7b:9f:f0:0b:45:22:0e:61:7a:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A0:63:5D:09:5F:C8:80:6B:67:D7:E9:DF:5C:12:DE:6B:69:69:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d32150c-6d53-3e11-a766-13256244ba6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:0c:83:bb:4f:41:43:24:3c:4e:1d:c6:22:91:a8:26:3c:a3:
5e:78:29:fa:c5:1c:b0:ea:0a:17:f6:f9:e7:e6:9d:73:7f:cc:
63:1f:e9:ac:36:57:0b:e3:85:97:ab:23:64:d6:9e:90:af:5a:
93:fa:9e:54:86:24:c2:ea:10:ed:db:34:74:5c:c5:fb:f8:cb:
f5:cc:1a:1b:9e:43:ce:fa:67:85:f7:88:66:13:c6:de:a0:ac:
6b:5a:94:5d:32:75:cc:85:ec:18:2a:6e:a1:94:1e:81:45:a0:
42:72:52:53:98:19:28:25:bf:ad:33:4f:97:c8:38:17:88:c3:
29:3a:38:5c:f8:a0:e0:21:5a:72:8c:4f:b3:81:4d:3c:ae:57:
85:ab:59:ca:12:92:04:27:85:0c:1f:40:cc:fc:da:3a:49:4a:
c6:46:39:58:da:f1:a1:f5:70:76:e0:c3:11:2d:ff:38:ee:e6:
fd:fb:04:36:69:d5:0b:d1:e9:1e:dd:5d:69:80:d5:77:1c:da:
1c:f4:4c:18:d5:fa:6a:a5:4b:9a:9e:ad:6a:b8:91:a7:d1:35:
cb:f6:fc:9c:0c:18:e1:48:7e:1a:38:70:d8:51:16:57:17:4c:
d5:d3:5b:13:1d:eb:d4:b9:b7:35:72:08:d7:00:81:d6:70:e2:
62:2c:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:52:57 2025 by rpki-client