Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af810759-c833-37d1-b7fb-7aab8cbc6007.roa
File: af810759-c833-37d1-b7fb-7aab8cbc6007.roa (raw, json)
Hash identifier: 2pmTCWffzSHzZntg5SLw/c6TOt2LBrqX7AFAG5+3KsI=
Subject key identifier: BE:8C:69:D8:83:D9:E9:BE:E4:79:BB:46:44:91:84:AF:83:9B:78:36
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847CF7C5E6039E1CB0B9CFF16C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af810759-c833-37d1-b7fb-7aab8cbc6007.roa
Signing time: Fri 08 Nov 2024 11:02:52 +0000
ROA not before: Fri 08 Nov 2024 11:02:52 +0000
ROA not after: Thu 06 Feb 2025 11:02:52 +0000
asID: 16625
IP address blocks: 23.57.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:7c:5e:60:39:e1:cb:0b:9c:ff:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 8 11:02:52 2024 GMT
Not After : Feb 6 11:02:52 2025 GMT
Subject: CN=999ad669-c10c-49ff-ad47-8785f4c9515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:83:36:e0:cf:a8:00:c4:96:0f:2d:66:8c:
51:a2:20:6d:fd:d0:aa:03:75:2b:fa:74:51:cf:51:
ee:38:7e:8b:b1:e9:55:51:d0:93:6d:aa:3b:d1:54:
57:82:47:90:ae:b6:02:56:6c:e5:af:df:91:a8:f8:
61:95:c1:c7:26:ca:b3:de:02:75:7f:59:8b:2e:26:
a2:38:52:8e:3f:15:10:e5:55:69:0e:53:74:6d:d1:
42:08:47:1c:28:02:07:24:89:ec:54:aa:f8:a9:9f:
5e:40:2f:af:2a:46:b4:52:b0:0b:5e:fc:30:ec:cd:
29:cc:e2:b9:f9:e5:e1:77:32:c8:5d:ab:42:88:37:
54:86:90:d1:e3:48:c2:fe:35:14:49:63:97:9e:1d:
20:9c:f7:65:e6:9f:38:3b:69:dd:24:af:86:c1:af:
46:dd:0c:dd:50:e9:11:65:13:b7:11:a7:65:67:b2:
c1:b6:0b:45:ce:74:61:16:d6:de:4d:a7:de:c0:46:
41:42:55:a5:36:b3:05:72:d1:11:f8:f8:2a:09:e2:
09:fe:fa:50:bc:40:ff:36:1d:1b:93:17:65:0f:4b:
06:44:78:c9:50:35:10:1d:b6:1f:a2:18:16:ee:71:
d1:e9:6b:44:73:82:35:2d:21:0f:69:b2:b0:20:ee:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:69:D8:83:D9:E9:BE:E4:79:BB:46:44:91:84:AF:83:9B:78:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af810759-c833-37d1-b7fb-7aab8cbc6007.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.57.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:76:5e:33:1b:07:9a:79:e6:26:b1:d2:ba:52:73:b5:10:78:
ef:65:3a:64:86:7e:e4:46:8c:93:8a:69:0d:aa:18:b7:57:38:
6c:09:07:97:6c:fb:d3:b6:24:38:0b:4e:42:27:84:8d:10:81:
4d:19:a4:f5:92:f1:4d:6c:6e:aa:6e:e6:57:32:71:7f:51:f0:
6c:21:41:c2:1e:ed:12:dc:74:d7:49:10:07:81:42:29:d0:47:
a5:13:6f:ea:eb:39:05:c0:db:bb:73:be:90:65:1c:7f:fc:31:
dc:e0:d7:aa:10:b6:1f:02:4f:7f:08:b9:b9:fe:c7:95:ad:e1:
85:c8:91:63:8d:a4:78:76:df:ca:fa:1e:a9:a4:f2:9c:8d:46:
d2:98:d8:07:24:ad:e1:44:a4:f9:a3:f1:b6:4f:a6:fb:ae:50:
b3:15:78:6c:60:44:7c:67:a9:ad:00:7d:bb:29:cc:55:a5:28:
eb:3d:4e:ad:92:d4:f2:da:9b:e9:79:dd:86:c8:3a:1f:40:01:
ec:b9:1b:3e:eb:51:c4:02:54:ea:60:31:91:80:ee:de:21:40:
97:b3:fa:23:8d:e7:f2:cd:de:6c:12:85:aa:a0:e8:b5:f6:5d:
10:b4:46:c7:78:e1:e1:e8:e9:7e:2a:16:c1:05:77:60:ff:92:
74:f7:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:50:09 2025 by rpki-client