Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b895725d-1940-3d59-87a7-b3e52e2c1a3a.roa
File: b895725d-1940-3d59-87a7-b3e52e2c1a3a.roa (raw, json)
Hash identifier: vzN11HZM5fm+G/aF3UPaQgR7qo+r7tj7IO6S9dKtgs4=
Subject key identifier: F6:D1:05:C2:AA:9E:8A:5F:28:7E:29:DE:83:4F:81:F5:99:E9:D7:89
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584713459B0F081833C6CA418A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b895725d-1940-3d59-87a7-b3e52e2c1a3a.roa
Signing time: Mon 02 Sep 2024 01:00:31 +0000
ROA not before: Mon 02 Sep 2024 01:00:31 +0000
ROA not after: Sun 01 Dec 2024 02:00:31 +0000
asID: 16625
IP address blocks: 23.39.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:13:45:9b:0f:08:18:33:c6:ca:41:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 2 01:00:31 2024 GMT
Not After : Dec 1 02:00:31 2024 GMT
Subject: CN=df6d59ab-11d7-4869-bba8-e11dd079ce91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:b3:92:99:27:f7:6b:9b:3a:f8:e5:a1:d3:
93:c3:10:cd:e5:9e:11:0b:a7:85:10:fe:5e:3d:69:
35:b3:0c:ba:4f:d9:b0:24:f0:26:f8:05:8c:72:11:
cb:78:b8:73:27:1c:20:33:34:b3:6f:d1:18:be:65:
7d:c0:ae:bc:a5:53:bb:fe:06:3c:8a:48:ef:f4:0e:
33:ab:c2:71:3c:b9:d1:a4:5d:90:ea:9b:eb:d0:04:
18:44:03:7d:48:cb:49:e9:db:91:1d:60:16:df:4c:
71:5b:d0:fe:a5:06:63:06:bb:bd:55:7e:ae:3a:7e:
d2:e1:97:2b:fe:bf:57:de:65:0a:20:a0:81:96:f0:
34:bd:e4:4a:ce:7e:bf:29:8d:53:72:3d:c4:67:d5:
36:85:34:de:22:cd:7c:58:58:ab:1f:a0:a7:e8:29:
7d:c9:a0:ba:ff:3d:d7:dc:36:99:16:13:02:a1:68:
29:1c:7d:f0:38:da:19:0f:5e:54:ad:b6:2a:7c:75:
d9:58:df:7b:40:8c:44:c2:45:0d:b3:ca:e0:4d:3d:
b0:32:4c:0f:2d:6f:9e:ff:ba:85:2a:33:2c:74:51:
c2:9d:a6:3d:09:22:91:51:b5:11:95:d9:4d:91:cf:
16:f2:1a:68:4c:5b:eb:3b:f9:f1:8f:52:06:5b:08:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:05:C2:AA:9E:8A:5F:28:7E:29:DE:83:4F:81:F5:99:E9:D7:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b895725d-1940-3d59-87a7-b3e52e2c1a3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a6:f8:05:2b:96:61:56:94:40:83:56:0d:f4:8e:d1:77:a7:
4a:13:85:84:6e:e2:12:0c:e7:13:43:91:09:f1:ee:89:01:fc:
0f:95:62:02:19:76:2b:1a:6c:fa:09:d2:d7:98:ba:df:6f:2d:
2e:d2:8f:84:30:ad:49:ba:0b:40:f9:78:cc:c2:31:7f:f4:4d:
ac:63:a1:b8:cb:08:3c:60:51:a9:af:4b:77:31:77:59:72:98:
69:80:61:81:b4:a6:20:8c:94:2c:59:53:30:dd:c7:4b:47:9f:
b6:07:06:5c:dd:62:13:3b:a4:55:c9:cf:0b:15:0d:10:d5:08:
63:70:21:a4:e7:71:af:84:08:ca:5f:96:aa:5b:c5:a8:99:e6:
fb:fe:f1:ec:81:89:33:64:0d:6d:42:6f:25:90:88:fd:c9:61:
32:9e:5a:0d:76:3b:5b:2d:58:2f:6f:df:b6:2a:80:57:9f:c5:
96:a5:f8:fb:ae:8c:a8:14:12:f4:23:ff:19:b9:47:6d:89:d1:
4c:69:58:2f:31:79:bf:51:49:ee:aa:16:a7:78:ec:00:fa:e9:
99:84:e9:06:ce:3c:0b:d8:00:ac:a0:8c:21:3b:14:a0:df:b5:
4c:f9:c1:5b:85:4a:e6:72:24:0c:8c:6d:63:96:97:34:40:09:
b2:1b:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:31:01 2025 by rpki-client