Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7944ca4-cae9-3961-8d30-371d4682b78c.roa
File: b7944ca4-cae9-3961-8d30-371d4682b78c.roa (raw, json)
Hash identifier: dE7RvFk13Elu0pjQjZTYmawq0CLUec8f7/Up3RKAdBQ=
Subject key identifier: 43:45:75:75:FB:8C:DB:8C:FB:8D:CD:92:97:3F:19:6F:34:CE:49:A0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584762D6715D9A32204B5E29E3F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7944ca4-cae9-3961-8d30-371d4682b78c.roa
Signing time: Mon 30 Sep 2024 13:00:42 +0000
ROA not before: Mon 30 Sep 2024 13:00:42 +0000
ROA not after: Sun 29 Dec 2024 14:00:42 +0000
asID: 45899
IP address blocks: 23.79.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:62:d6:71:5d:9a:32:20:4b:5e:29:e3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 30 13:00:42 2024 GMT
Not After : Dec 29 14:00:42 2024 GMT
Subject: CN=972ea31a-123f-4749-8758-d72878c425b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:48:68:6c:f1:7c:e8:d9:a1:9e:6e:af:0f:
1d:62:b0:83:50:57:ea:d1:a1:93:54:83:9c:4b:35:
21:b8:8b:a3:a4:ae:96:8f:03:a7:4b:40:d7:b0:a8:
7e:75:14:51:b1:0f:b2:81:8e:b0:86:5f:2a:3f:61:
3a:32:ee:b4:24:83:78:72:e9:0f:65:46:22:a8:21:
66:27:44:e9:27:07:9a:c2:44:45:9a:94:ea:94:6d:
05:7d:a1:5f:74:d7:52:24:ae:78:ab:a4:23:80:32:
d7:cc:54:86:9c:41:71:ed:7c:7f:3b:10:a5:63:04:
50:f5:1b:a3:8c:84:11:12:17:f7:6f:a3:c9:7b:1b:
7a:76:5e:87:33:55:7a:1e:b7:aa:64:4a:de:a1:d5:
77:37:63:28:5d:56:30:b0:38:a3:c0:d8:0a:c9:d6:
ce:1e:d5:7e:fe:8f:3c:46:2f:b3:f8:24:94:1d:0e:
9b:52:45:45:2a:1b:11:bd:85:77:b2:49:d4:1c:21:
b0:5a:2b:4b:f4:3b:de:f4:f5:9a:a8:a7:a6:94:c2:
5e:b7:f5:77:7a:6d:16:6e:97:16:bb:38:68:79:3a:
85:d6:02:25:ce:6f:46:ce:93:0f:d3:c5:ef:1e:c7:
18:68:fa:f6:4b:6d:26:e4:6a:53:4a:fc:48:d8:ba:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:45:75:75:FB:8C:DB:8C:FB:8D:CD:92:97:3F:19:6F:34:CE:49:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7944ca4-cae9-3961-8d30-371d4682b78c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.79.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:2a:9d:6a:55:e0:aa:f0:aa:29:ae:3f:93:22:f1:cb:59:8b:
6e:4e:cf:0a:20:b9:c7:0e:79:af:88:60:46:1e:4a:8a:96:97:
fd:db:6f:06:bd:87:25:c7:40:de:53:3b:56:48:39:22:0d:cf:
d9:b2:ab:47:a2:66:03:7d:65:96:9c:9b:9c:71:2c:5d:a3:a9:
d9:40:83:40:47:01:72:1b:c8:de:de:70:ea:91:c8:a9:d2:c1:
75:0d:90:90:c3:a2:a1:33:ed:9f:65:84:56:92:60:ec:ba:a9:
53:74:56:d5:d5:7d:de:fd:81:3b:b0:7b:13:b8:88:20:45:03:
32:73:36:64:35:64:3b:c6:e7:b2:a7:d6:1a:52:7f:d1:ff:d0:
7f:5b:33:a1:60:26:03:bc:f0:21:88:cd:e3:80:db:d6:3d:d4:
e5:8c:08:d9:f9:bb:06:83:bd:90:91:79:70:bb:c0:d2:e2:b7:
12:bf:ad:05:f4:15:9a:92:08:af:7e:b3:93:90:d8:37:02:25:
d5:ca:51:91:17:a7:8b:77:dc:af:0f:ba:1e:a8:d8:31:ed:62:
06:bc:f7:93:15:fe:43:80:63:95:cf:bb:72:18:0e:2d:0a:a1:
b4:67:8c:22:ff:92:de:9f:09:29:17:a8:14:c8:e2:4e:da:c5:
cf:e6:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:45 2025 by rpki-client