Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afffbb37-8acd-3e75-b0c7-5383cd010fa6.roa
File: afffbb37-8acd-3e75-b0c7-5383cd010fa6.roa (raw, json)
Hash identifier: ujbHTybSq5FqQ49ID4NWM96O30gedMFMTEE2mr0YPvI=
Subject key identifier: 4A:11:21:BD:C4:36:CE:4F:9E:66:9B:21:AE:82:74:EC:67:04:07:57
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846CEDFF77042C8DD628AF6E320
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afffbb37-8acd-3e75-b0c7-5383cd010fa6.roa
Signing time: Thu 08 Aug 2024 13:00:38 +0000
ROA not before: Thu 08 Aug 2024 13:00:38 +0000
ROA not after: Wed 06 Nov 2024 14:00:38 +0000
asID: 42961
IP address blocks: 23.56.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:ce:df:f7:70:42:c8:dd:62:8a:f6:e3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 8 13:00:38 2024 GMT
Not After : Nov 6 14:00:38 2024 GMT
Subject: CN=8e4ee8e8-ab9a-4eb5-8f77-cbacb36b37db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:02:93:57:c6:c5:6c:7e:4d:56:4a:6f:b6:
c8:54:66:1b:f7:10:03:01:94:ce:44:71:93:1b:e5:
ff:d8:17:c4:5b:db:cb:44:99:f5:7d:22:b0:f7:71:
13:be:08:c3:22:1b:21:5d:94:1c:87:23:47:79:03:
8d:43:a0:13:20:65:72:4e:ff:85:5e:04:51:f2:a7:
d1:d0:ee:64:4c:06:4b:78:5a:d3:47:63:45:45:d8:
c6:ee:0b:50:9a:9a:cb:e2:6d:38:81:3e:8b:74:c9:
26:9b:d2:07:a4:8e:ca:ab:64:9b:06:a6:02:60:f0:
32:85:28:5f:1a:02:0d:94:89:2f:e7:f5:b9:06:94:
57:a8:df:31:d9:e3:e5:2d:f6:06:1e:cd:6f:65:c8:
f7:b2:db:1d:0e:df:f4:41:bd:3e:af:0a:4d:cb:2c:
bb:d1:8e:55:dd:c8:3e:80:7c:23:7d:06:99:25:79:
72:65:a1:75:f5:ab:b3:75:ac:dd:54:c8:29:a6:21:
4e:dc:83:05:3f:3a:b7:8e:8f:3f:15:5f:a0:55:09:
c4:55:60:5d:ee:15:57:d0:43:c6:77:62:63:13:de:
f9:e4:f3:6f:33:ea:68:04:5c:7f:b6:28:8b:85:a3:
00:b2:bf:a8:a6:00:87:f9:8f:a8:cf:18:da:61:43:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:11:21:BD:C4:36:CE:4F:9E:66:9B:21:AE:82:74:EC:67:04:07:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afffbb37-8acd-3e75-b0c7-5383cd010fa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.56.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:05:94:19:87:7a:62:3d:53:2c:0b:6e:5e:8d:a8:d0:2d:26:
f6:e3:e4:94:05:a3:a0:85:6c:11:cf:88:c5:8e:2a:91:c9:65:
b4:d7:d6:4c:29:dd:b8:0f:0e:a9:3a:10:55:61:e2:b3:a5:7b:
7b:66:83:dc:94:68:e2:1b:99:3d:29:87:f0:a9:df:2f:04:4f:
ad:42:67:f1:e7:3a:c6:de:3c:d1:40:aa:8c:53:49:ff:b4:84:
8e:17:b1:af:ab:76:07:58:d8:f8:e3:08:bf:c8:07:10:71:66:
47:b4:84:e4:0a:22:f6:ae:99:60:34:b1:e5:9b:03:dc:c6:26:
43:ec:6a:fe:1a:6e:3b:b9:3a:8d:17:ae:29:b9:d2:48:73:8d:
4e:8e:9e:5f:80:a4:f5:2c:c3:0a:50:32:1e:c2:87:00:98:f8:
f2:1a:42:1b:50:fb:a5:4a:63:0d:cd:17:f2:ba:37:7e:03:02:
63:91:94:50:0b:dd:9b:f2:c5:1d:b8:df:eb:56:4d:48:3f:03:
a6:7d:bf:df:70:81:39:31:24:53:a0:84:de:74:4e:94:8e:87:
e6:aa:03:6c:d3:d2:ee:36:a2:dd:d5:a1:f4:f9:ff:89:2b:e5:
40:fd:db:e0:c5:49:46:1d:dd:44:75:f6:bf:10:20:d3:78:a7:
31:23:e9:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbO3/dwQsjdYor24yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDgwODEzMDAzOFoXDTI0MTEwNjE0MDAzOFowLzEtMCsGA1UEAxMk
OGU0ZWU4ZTgtYWI5YS00ZWI1LThmNzctY2JhY2IzNmIzN2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBECk1fGxWx+TVZKb7bIVGYb9xADAZTORHGT
G+X/2BfEW9vLRJn1fSKw93ETvgjDIhshXZQchyNHeQONQ6ATIGVyTv+FXgRR8qfR
0O5kTAZLeFrTR2NFRdjG7gtQmprL4m04gT6LdMkmm9IHpI7Kq2SbBqYCYPAyhShf
GgINlIkv5/W5BpRXqN8x2ePlLfYGHs1vZcj3stsdDt/0Qb0+rwpNyyy70Y5V3cg+
gHwjfQaZJXlyZaF19auzdazdVMgppiFO3IMFPzq3jo8/FV+gVQnEVWBd7hVX0EPG
d2JjE9755PNvM+poBFx/tiiLhaMAsr+opgCH+Y+ozxjaYUMfPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEoRIb3ENs5PnmabIa6CdOxnBAdXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZmZmJiMzctOGFjZC0z
ZTc1LWIwYzctNTM4M2NkMDEwZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzjwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwFlBmHemI9UywLbl6NqNAtJvbj5JQFo6CFbBHPiMWOKpHJZbTX1kwp
3bgPDqk6EFVh4rOle3tmg9yUaOIbmT0ph/Cp3y8ET61CZ/HnOsbePNFAqoxTSf+0
hI4Xsa+rdgdY2PjjCL/IBxBxZke0hOQKIvaumWA0seWbA9zGJkPsav4abju5Oo0X
rim50khzjU6Onl+ApPUswwpQMh7ChwCY+PIaQhtQ+6VKYw3NF/K6N34DAmORlFAL
3ZvyxR243+tWTUg/A6Z9v99wgTkxJFOghN50TpSOh+aqA2zT0u42ot3VofT5/4kr
5UD92+DFSUYd3UR19r8QINN4pzEj6fs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:44 2025 by rpki-client