Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df3ba9b0-66be-3103-8f7b-27462803ec36.roa
File: df3ba9b0-66be-3103-8f7b-27462803ec36.roa (raw, json)
Hash identifier: vUUZS+SgMESvk0dsJvpQm7lACMwx6cqqVA2KU4d8T3A=
Subject key identifier: A9:4F:58:F6:15:AE:16:14:91:C8:63:5D:0B:FF:E3:8A:4D:DB:26:7A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846D4754FC528A67C6DFD968280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df3ba9b0-66be-3103-8f7b-27462803ec36.roa
Signing time: Sat 10 Aug 2024 13:00:39 +0000
ROA not before: Sat 10 Aug 2024 13:00:39 +0000
ROA not after: Fri 08 Nov 2024 14:00:39 +0000
asID: 20940
IP address blocks: 23.215.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d4:75:4f:c5:28:a6:7c:6d:fd:96:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 10 13:00:39 2024 GMT
Not After : Nov 8 14:00:39 2024 GMT
Subject: CN=21b0e0bb-d67c-48e3-9897-10adb8f730f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:00:cd:f6:c4:a4:df:43:2c:79:5a:d8:b7:
25:89:77:24:a6:21:98:a4:57:65:d6:f3:97:a0:86:
a7:d6:95:61:4a:fd:e8:87:bb:4d:be:1d:9f:7e:3b:
5a:dc:58:69:71:d4:25:27:d4:06:f7:09:94:99:9d:
e5:79:0b:73:97:e1:37:43:a5:95:c3:61:ba:99:ed:
77:e3:f0:83:f6:6e:0b:23:5b:3d:7f:45:70:c9:a9:
54:32:4d:d1:c1:fe:18:3b:24:f4:41:3c:65:8d:70:
a9:a6:65:11:b9:be:26:d0:ab:55:56:89:f8:ba:d9:
1b:24:10:40:98:48:3f:05:7b:5c:9a:34:49:4a:1e:
da:ba:2c:57:2a:38:86:a1:e9:af:16:48:e9:30:54:
00:ff:6b:9b:05:3a:c3:1a:b7:ef:3d:c9:a4:f3:9b:
27:9a:be:10:17:ad:89:f6:98:a5:e2:6a:69:5d:64:
e0:c6:90:54:76:64:3b:9e:2b:98:02:80:a7:99:32:
7a:b6:95:e8:1e:dc:f1:77:c9:34:9a:4a:c1:89:d1:
ad:a3:9c:dc:81:c2:60:06:5f:0a:b4:71:a7:2f:f4:
3d:1b:ab:7f:99:0e:06:49:e0:03:ce:28:34:dd:71:
11:0d:7c:a5:02:b0:7d:24:42:4e:a7:69:98:f6:76:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4F:58:F6:15:AE:16:14:91:C8:63:5D:0B:FF:E3:8A:4D:DB:26:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df3ba9b0-66be-3103-8f7b-27462803ec36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.215.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:df:4f:67:b3:b4:70:46:e8:67:9d:72:fe:e3:4e:5e:e5:27:
52:73:9a:c1:76:42:c5:67:e2:61:64:b5:fb:8f:4a:2a:df:9a:
58:5f:c5:2f:cf:9a:c4:2b:cf:f8:4b:c2:a4:e9:ac:9a:72:37:
53:8a:47:d6:56:58:54:4d:f7:f3:2a:f4:bf:31:6c:81:96:69:
07:50:08:ee:a9:95:60:4e:8a:a6:db:bf:09:0d:2e:fc:29:85:
27:fc:85:15:2d:98:fc:58:34:68:ab:63:c3:7d:26:5e:a3:9b:
50:e8:e2:a4:54:4d:dd:fa:7e:f5:63:fe:78:04:06:08:73:77:
72:88:1d:50:7d:8e:a2:62:95:4d:54:d8:c0:37:af:c8:54:d5:
3f:4a:e4:92:de:c3:d9:91:5b:82:94:a0:b0:5e:0b:98:ec:6f:
a6:14:a0:06:35:ef:57:cd:89:28:ec:1c:05:0d:da:fe:be:e6:
42:36:ea:0e:f6:ca:42:ad:44:fc:65:f8:74:d0:91:6c:bb:be:
2c:2a:a2:b1:86:41:85:b0:99:6a:0a:a1:04:be:00:d8:f4:6b:
10:50:fd:8f:8e:e3:1b:9f:c7:8e:2d:2e:d3:4c:e9:2f:33:e3:
ce:b5:fc:19:78:8d:a9:a5:8b:e2:c4:a1:80:2b:fe:1d:68:72:
46:54:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:18:49 2025 by rpki-client