Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd3d59a8-db83-3223-b42a-cb8e86e1d78d.roa
File: cd3d59a8-db83-3223-b42a-cb8e86e1d78d.roa (raw, json)
Hash identifier: CIL1DcX/T2tme3Ld4s5mrVVnFpkL080nIDG4/XSOJ9Q=
Subject key identifier: ED:5A:E7:F8:B6:25:75:28:F3:B5:36:2C:1F:2A:AB:76:E4:2E:AD:C3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285845F51A4BB5F02EA8FBFEB22500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd3d59a8-db83-3223-b42a-cb8e86e1d78d.roa
Signing time: Wed 22 May 2024 12:52:06 +0000
ROA not before: Wed 22 May 2024 12:52:06 +0000
ROA not after: Tue 20 Aug 2024 12:52:06 +0000
asID: 16625
IP address blocks: 23.216.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f5:1a:4b:b5:f0:2e:a8:fb:fe:b2:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 22 12:52:06 2024 GMT
Not After : Aug 20 12:52:06 2024 GMT
Subject: CN=cb01b2d8-6ea2-4d30-8b36-4eb8b839defc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:f2:17:ca:58:b6:c0:7b:bb:aa:c6:1d:d7:
cc:92:4d:0b:9b:c0:06:c0:33:99:9b:84:0d:57:59:
d3:e7:23:d7:51:49:0d:1c:12:3b:67:81:0a:7e:a8:
1a:07:b0:4e:23:e8:41:a8:7f:c0:78:bc:da:cb:a4:
22:e3:a1:6e:82:db:e2:2b:89:7b:e1:c5:2e:ee:ab:
a9:a5:4e:3f:0a:90:bc:87:3e:a2:7b:4f:70:12:e4:
43:e9:cf:40:fa:b6:69:34:7f:42:57:50:fe:68:2c:
5b:ef:aa:21:6b:99:fc:34:33:1b:42:da:23:c2:cd:
8c:70:65:33:6a:f8:a1:09:66:a9:93:d3:de:68:46:
e4:78:6e:03:1f:83:c3:60:a4:3e:00:8c:72:7a:62:
3f:24:16:ac:4d:2a:29:f4:02:06:c7:7b:a4:7e:a8:
c9:51:8d:38:a9:96:69:7a:46:15:c5:f2:8b:36:c9:
dd:53:1f:43:1f:de:de:96:07:0b:b1:34:29:23:45:
5f:2e:aa:1a:9b:ed:2e:e3:2b:9e:cf:61:91:c3:e4:
08:84:e6:20:ea:03:2c:92:b7:0c:6f:b5:d7:a5:6e:
ed:95:2a:b6:1a:db:d6:9f:d1:72:8f:dc:c1:15:4d:
db:64:53:57:d4:71:af:bd:0a:20:3d:13:54:81:d4:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5A:E7:F8:B6:25:75:28:F3:B5:36:2C:1F:2A:AB:76:E4:2E:AD:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd3d59a8-db83-3223-b42a-cb8e86e1d78d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.216.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d6:18:57:6d:b5:94:6f:bc:8a:94:49:98:77:62:d7:7f:ea:
87:18:05:e6:21:16:c4:7c:e4:a7:98:eb:c9:b0:29:24:98:30:
52:b3:b3:3c:74:e1:38:fc:74:59:a8:8b:ca:19:13:db:0b:51:
e0:4d:31:8d:b0:e3:21:87:e8:9e:bc:91:9a:f7:b7:de:d2:38:
1a:40:31:73:d7:a4:5b:eb:31:a5:4d:93:7a:8f:a6:3d:1b:53:
1a:3b:e2:eb:74:60:55:b0:11:88:c9:9f:3d:15:b2:0a:77:08:
aa:c0:ff:88:06:2a:e9:05:b4:1a:2e:a7:4b:92:38:95:34:e8:
cd:d9:96:c4:63:32:d2:fa:4d:e9:f5:1b:0c:bd:aa:67:e3:fd:
88:68:54:31:2f:8f:1b:ae:ff:f9:30:0d:9c:65:27:cf:a6:17:
33:4c:5b:74:bd:3e:c2:83:9c:5a:b4:d3:63:ac:d3:04:e5:98:
12:5d:e9:a1:59:d3:71:22:1a:6f:6b:3a:8c:e3:38:d4:89:15:
c7:d0:14:d8:aa:42:50:ee:d1:8b:fe:31:9f:b1:02:00:85:b9:
24:18:14:80:3e:bc:12:66:19:ce:7d:90:d6:1a:9e:b6:26:78:
c2:42:6c:1d:af:4d:4d:50:5a:ea:19:0a:10:63:8a:7e:1f:15:
1d:7d:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:32:43 2025 by rpki-client