Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb9e313a-c566-3f36-9f88-e2739be15d34.roa
File: cb9e313a-c566-3f36-9f88-e2739be15d34.roa (raw, json)
Hash identifier: cpn2JbA1shr+15Y+04rZYxz/us0BGNcXDxJoSno5nxY=
Subject key identifier: FE:94:48:60:B2:5D:32:27:2A:50:86:8A:BC:55:C2:0E:FB:BE:AC:6E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846BB551A2262C0BB51FE661F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb9e313a-c566-3f36-9f88-e2739be15d34.roa
Signing time: Thu 01 Aug 2024 13:00:37 +0000
ROA not before: Thu 01 Aug 2024 13:00:37 +0000
ROA not after: Wed 30 Oct 2024 13:00:37 +0000
asID: 16625
IP address blocks: 23.36.36.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:bb:55:1a:22:62:c0:bb:51:fe:66:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 1 13:00:37 2024 GMT
Not After : Oct 30 13:00:37 2024 GMT
Subject: CN=98f3e476-44b1-4df1-8525-15e8e8e829b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:b1:bd:65:c0:b4:4a:00:4a:5c:87:79:b9:
cd:83:5a:6a:79:69:0a:bc:1f:5c:18:9d:6d:8f:1f:
60:ad:36:2a:01:b2:43:94:4c:5d:a5:84:75:36:da:
78:01:8e:22:fc:a1:62:d7:e6:a2:5e:51:f1:98:ad:
28:14:d3:fd:87:e1:96:05:3d:cf:d2:b3:c7:6d:e3:
c7:bd:07:87:60:05:87:76:5d:a6:13:52:13:34:2b:
b4:76:f2:12:3a:cb:ae:f1:12:f5:98:3b:8a:18:a8:
8d:5e:3e:48:41:51:16:a3:5f:22:cd:c4:9f:91:ff:
d5:1a:07:77:11:a9:5b:79:90:11:f1:63:87:43:20:
b1:df:d5:f2:3c:a8:66:0e:c7:10:b3:e3:01:75:73:
c2:29:3c:7d:0e:1c:28:ee:ba:8b:e5:e5:68:98:a9:
c4:d5:b9:04:32:ea:05:c8:4b:87:1a:44:d5:86:4c:
1c:b0:7f:81:58:71:15:74:a3:c9:8d:03:e2:84:69:
69:21:75:fc:3a:7c:37:ef:82:77:41:fa:5b:f2:64:
fb:66:12:64:3b:4c:ed:a1:aa:3a:c3:ae:8c:5c:ca:
34:ee:b1:92:a4:3a:e0:72:02:7c:ac:0b:99:18:18:
53:e7:cf:26:02:07:05:72:04:03:5a:a5:47:2b:c9:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:48:60:B2:5D:32:27:2A:50:86:8A:BC:55:C2:0E:FB:BE:AC:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb9e313a-c566-3f36-9f88-e2739be15d34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:bc:ae:c1:99:ea:c8:2c:a5:7d:8a:3c:ae:5b:40:08:f8:52:
fb:77:c6:0d:c8:d8:d8:76:e5:36:6e:38:c7:5a:2f:35:c6:86:
20:99:11:d7:0d:e0:c3:5e:5a:a0:38:9f:c0:5f:ee:99:9f:17:
b4:0b:02:36:17:4b:84:dc:3d:2b:e0:62:87:e2:df:c3:08:6e:
16:77:e1:b7:cc:1d:0a:26:90:87:4e:79:d1:12:57:db:bc:3f:
1d:01:88:30:a7:2f:8c:cd:2b:15:43:49:9c:fc:87:8a:41:82:
ad:8d:41:03:cc:2a:69:7b:3b:9f:ca:b5:28:6b:3f:82:ea:89:
7c:97:99:32:98:85:38:69:e5:70:87:44:05:96:c2:26:74:79:
c0:63:31:39:c3:00:39:f4:96:24:30:29:f1:eb:48:3a:ce:29:
81:7c:3d:40:0c:e0:13:18:50:df:de:b2:06:de:d5:fa:a1:1b:
a2:c7:51:b5:40:99:30:43:dc:ce:ec:fd:fd:de:68:3c:ab:ef:
0f:33:1d:7b:5d:bb:b2:eb:ab:7d:29:ee:f4:87:69:19:6e:56:
6c:4e:07:80:5d:37:01:d3:ac:26:1d:ac:a7:f4:33:40:09:e0:
99:bb:93:e5:ca:5f:b5:19:8d:af:66:89:87:6d:f9:61:78:cd:
e8:cf:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:20:23 2025 by rpki-client