Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb43cdf7-51f6-35a5-8d2a-a76c27d84a42.roa
File: bb43cdf7-51f6-35a5-8d2a-a76c27d84a42.roa (raw, json)
Hash identifier: BLhwXxwhx7FXpTd+Si0V2NefjEAKG7scr2HFXlojAq0=
Subject key identifier: 54:05:5E:77:1E:57:C4:74:AC:CD:B3:40:37:9E:42:3E:D2:57:30:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487B85C02DA129D4E2A93E01C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb43cdf7-51f6-35a5-8d2a-a76c27d84a42.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.42.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:c0:2d:a1:29:d4:e2:a9:3e:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=26e5f778-9274-416d-bff6-2c5856ad7a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:be:b5:ca:f5:7c:7e:81:8e:ce:d1:f0:65:
d5:d4:6e:aa:3b:6c:b8:8c:d8:34:46:64:cb:97:9c:
c8:1a:6a:c2:f4:e0:68:af:66:91:fa:27:db:4a:5f:
6c:51:4d:24:10:c1:54:19:98:ac:8f:52:8a:58:66:
c9:d3:1e:ab:70:78:f7:45:11:26:45:1e:a4:8d:4d:
dd:f6:f7:f1:9c:0a:87:e9:6b:e0:de:e5:78:9f:e8:
ab:76:ce:f4:f1:62:47:9a:7c:7f:aa:af:33:61:77:
ac:91:b7:27:88:8a:c4:c7:27:a8:67:e9:ac:c5:2a:
f3:e2:98:38:83:28:8b:ed:74:2e:eb:5f:6a:0b:dc:
cb:78:cd:c6:b5:31:e1:cb:f5:fb:35:bb:4b:c0:68:
60:ed:ed:51:19:b3:5a:28:fa:17:f3:cd:33:50:9c:
11:3f:85:76:c4:ec:47:15:4f:52:ca:a3:0b:b9:48:
4f:d1:03:21:52:6d:8b:6e:cd:21:31:49:0d:56:e4:
23:fe:09:f4:a2:68:2d:cc:c2:e4:c8:02:a2:43:02:
47:9d:b6:9a:89:44:f2:5f:3d:a7:f1:e3:10:98:c0:
a6:44:9e:76:2b:03:fb:71:6e:09:c3:55:e5:c9:49:
83:6b:a2:91:17:2b:1a:1a:26:24:c0:28:0d:cb:b0:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:5E:77:1E:57:C4:74:AC:CD:B3:40:37:9E:42:3E:D2:57:30:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb43cdf7-51f6-35a5-8d2a-a76c27d84a42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.42.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:0e:81:bb:5c:ec:97:68:02:3c:40:07:63:76:1c:eb:a3:2f:
72:52:02:16:c9:7d:a3:49:63:b1:36:14:d8:cc:c4:97:a4:e8:
a2:be:b1:ab:52:a4:59:67:b2:cb:86:39:2f:e8:61:30:f7:5b:
3e:65:af:02:a4:7c:65:b7:8f:b9:4c:cb:24:9f:d0:2b:85:c3:
12:87:cd:d7:7e:30:a4:c6:90:e0:2a:28:2c:7d:2e:f3:ad:0f:
40:24:c2:1c:55:df:6c:46:dc:d3:fb:bd:a4:8a:9d:0a:8b:7c:
b3:2f:68:43:e2:0f:87:6a:24:94:24:59:db:55:d1:23:70:b3:
5c:6b:8a:21:fa:80:9a:d5:fb:c3:bf:b8:05:74:b0:55:4b:c0:
0b:bb:da:8e:3c:68:4f:e0:85:9f:26:22:0b:3f:fb:3b:8e:54:
fd:ec:02:37:b0:2e:f0:0a:15:06:8d:2d:f3:21:58:4d:0b:ae:
52:fd:13:57:5c:00:c2:14:21:5d:86:7b:ce:61:a9:39:b7:6e:
aa:b8:fe:98:a3:90:58:64:71:87:3a:9d:88:85:3e:2a:84:60:
fe:15:5b:43:82:e6:f5:43:c3:df:53:30:eb:05:8f:2d:5b:97:
53:fe:c2:67:b0:f9:3d:69:6a:1c:b5:36:85:87:4d:9a:d3:27:
06:3e:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:08:41 2025 by rpki-client