Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6403edd-be54-3cdb-9994-759bc73dce7e.roa
File: c6403edd-be54-3cdb-9994-759bc73dce7e.roa (raw, json)
Hash identifier: NbPQ5jmZQDGOqHJC94aAT9kz1lT+whts4xdRcRUjdtw=
Subject key identifier: 1E:D8:58:7C:03:6C:B2:0E:B5:CA:7A:37:0E:87:1A:D9:15:46:41:B6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847643B7C39A7792B86CC25BF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6403edd-be54-3cdb-9994-759bc73dce7e.roa
Signing time: Tue 01 Oct 2024 01:00:31 +0000
ROA not before: Tue 01 Oct 2024 01:00:31 +0000
ROA not after: Mon 30 Dec 2024 02:00:31 +0000
asID: 16625
IP address blocks: 23.12.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:64:3b:7c:39:a7:79:2b:86:cc:25:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 1 01:00:31 2024 GMT
Not After : Dec 30 02:00:31 2024 GMT
Subject: CN=2af17e6c-9306-4464-a059-5ec3202a39e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:12:e7:01:a1:a2:f9:4c:af:67:03:ce:dd:
e7:6b:67:7c:4a:f9:ce:46:9d:be:fc:ba:85:41:65:
b6:c0:75:e3:18:80:59:6a:f5:1e:5f:bc:b5:52:0c:
f7:7b:bf:2a:d7:7b:dd:9d:1c:c7:23:b8:ff:85:50:
03:3c:01:b0:46:6b:b6:2d:6d:60:25:c0:57:10:71:
e4:42:1d:94:e0:bd:04:eb:da:47:ed:cb:75:ef:e9:
30:23:62:65:f9:71:44:3e:97:65:82:f8:8d:40:2c:
0e:71:ed:0f:53:8c:7e:58:48:47:6c:f0:fc:e7:d0:
29:c8:81:c1:fc:38:6c:b2:4a:f3:6e:1e:55:3e:26:
ab:73:68:41:07:6e:a5:12:2b:16:71:48:f5:8f:b8:
c9:42:69:99:22:d6:ce:d0:06:1a:ce:e5:09:9b:14:
52:8b:d8:a0:cf:b5:6b:a5:ca:93:d6:3f:8a:95:f5:
c4:09:ca:34:f1:cb:09:af:81:a7:c1:af:33:3a:a7:
c8:4d:29:ec:a7:38:32:6b:96:65:b3:2e:a8:68:cf:
8c:91:65:da:9e:33:ad:e7:41:23:e8:c0:60:78:ca:
cc:bd:df:2c:71:94:d3:ce:62:53:77:04:12:02:72:
e3:8f:5f:f4:00:ef:7b:5d:90:ae:ae:c5:09:ac:29:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:58:7C:03:6C:B2:0E:B5:CA:7A:37:0E:87:1A:D9:15:46:41:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6403edd-be54-3cdb-9994-759bc73dce7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.12.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:5b:8d:5e:8f:99:38:ec:43:25:30:3f:ae:21:f6:62:36:71:
c1:73:eb:82:97:7a:2f:99:87:d9:0d:ad:36:2d:84:97:dc:93:
fb:ff:8c:d9:f4:ac:28:2c:e2:8a:e2:e3:f2:02:2d:04:07:6f:
31:d9:d8:aa:ca:85:69:4c:5f:e8:ce:41:ea:3d:2f:fe:1d:20:
30:05:f9:52:cf:92:3e:c5:44:71:15:e7:ae:ec:ad:f3:33:46:
19:ca:aa:e4:3c:4d:d4:9e:ad:df:0a:f6:b6:ef:9d:c8:44:1d:
70:82:27:42:71:33:11:8f:e4:2d:5b:7e:2e:90:70:7e:35:cc:
f2:45:77:72:80:7b:b2:81:2d:28:66:d6:14:14:73:08:c6:fe:
0f:43:c6:1e:5b:fe:9d:30:3f:97:39:59:13:83:1a:a2:83:ad:
9b:5f:e2:42:30:a1:59:fb:be:44:6b:75:67:d9:bc:a6:61:eb:
8f:04:5d:45:11:42:c8:56:89:11:00:e3:d2:50:73:07:6c:98:
f1:18:0b:01:6d:c1:51:66:8d:f6:56:39:dc:e1:b2:cb:2e:fa:
fa:31:9b:d7:df:95:11:66:f1:6d:a5:81:bb:d5:57:25:1a:84:
da:bc:5d:77:ff:d0:f2:0e:b3:c6:98:94:43:b8:69:00:f7:9c:
3b:88:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:03:24 2025 by rpki-client