Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c53391c9-f8bc-33eb-baa4-60bf7672ee3b.roa
File: c53391c9-f8bc-33eb-baa4-60bf7672ee3b.roa (raw, json)
Hash identifier: 7y6kESAm4EfQIf7bIpGWqBB2gz/qZwZMgwWcQb7cPAg=
Subject key identifier: 6C:EC:F6:53:AC:49:7B:F1:7E:53:B8:BE:8E:89:FC:C8:08:43:7C:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483455884E1D9CF7756CD17980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c53391c9-f8bc-33eb-baa4-60bf7672ee3b.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.67.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:88:4e:1d:9c:f7:75:6c:d1:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=aacf4496-7477-4ff3-b190-bf437cce4883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:26:be:51:bf:5e:b3:a4:4e:22:e1:77:a5:
9f:8b:b7:72:f1:ed:8c:a6:ad:38:29:3f:12:8f:09:
01:6e:a9:28:ac:cd:69:76:ca:9f:40:93:5a:e3:be:
3d:b9:0e:e8:f6:51:87:7f:18:ec:2e:eb:e4:cf:77:
03:14:e5:e5:0a:0d:28:e3:7c:da:ee:c9:67:58:39:
4c:10:51:ac:81:41:8f:17:a8:dd:de:81:60:e0:41:
80:b9:01:22:9a:fc:1b:c6:31:86:f0:bc:8c:50:a1:
29:22:9f:d8:67:5c:73:78:0d:2a:79:de:28:f7:2b:
86:e0:13:e9:b3:4c:d4:38:20:ac:72:2b:1c:38:f5:
3b:2e:50:28:91:be:b0:00:95:68:d0:f8:36:f7:bc:
09:b1:12:23:2c:81:24:66:3e:11:d1:35:9b:45:49:
72:2e:38:a7:ff:89:a1:7c:10:0c:a1:c9:28:4b:36:
75:fa:f2:e3:a2:22:f6:50:6e:89:e3:86:f4:c0:ec:
20:d8:5f:68:72:7e:09:ca:4f:48:55:2c:3e:a5:b3:
5c:e9:6d:7a:d0:10:33:19:19:b3:7f:0c:a9:7f:1a:
c0:fb:e3:97:27:94:7d:a1:cf:9d:da:ac:0c:03:4a:
e0:9f:0f:05:34:56:da:a1:cd:c8:63:9c:1f:5b:cc:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EC:F6:53:AC:49:7B:F1:7E:53:B8:BE:8E:89:FC:C8:08:43:7C:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c53391c9-f8bc-33eb-baa4-60bf7672ee3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.67.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:c1:9c:ac:83:d4:4b:49:d4:b7:16:51:fc:bd:38:0a:16:8f:
54:db:dd:c7:5b:19:e6:26:5b:a7:e6:ca:08:48:86:d7:d0:31:
ae:87:13:f9:85:b5:53:c2:aa:cf:d5:ed:b9:5c:e9:53:97:3a:
17:74:70:c0:5c:74:ec:df:c3:3f:20:91:a1:fe:fe:aa:79:83:
93:ac:d3:05:59:9c:b3:90:c5:52:7a:9c:83:b0:6c:76:a0:e9:
c1:d3:49:ed:1c:cf:6f:af:1e:dd:b6:dc:e8:23:51:b0:8d:a5:
fb:b2:64:b0:76:89:b1:e5:54:30:ae:5d:20:26:33:49:43:6a:
e0:11:e5:8a:66:6c:4a:41:03:39:fd:a7:04:e1:da:85:c8:dc:
25:ce:d8:a9:64:c7:65:3d:24:d5:a3:49:37:3d:7c:17:51:ea:
94:69:c8:0e:91:ff:ce:2a:40:40:d1:07:a5:aa:61:db:23:95:
47:1e:27:0f:1d:f7:21:f7:06:3b:f9:b8:c6:27:b4:87:45:19:
ec:77:29:e1:94:e2:7c:73:91:f7:af:09:fb:e7:20:a2:6d:4f:
b7:77:45:bc:b2:7f:69:fd:35:2a:ae:28:65:48:94:75:d3:7c:
1a:59:39:27:c0:83:33:d4:e6:82:81:de:7a:11:da:9a:7f:bd:
6b:67:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:57:10 2025 by rpki-client