Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0431124-a4ed-34a4-a638-36a3a9cf3571.roa
File: f0431124-a4ed-34a4-a638-36a3a9cf3571.roa (raw, json)
Hash identifier: JUyYh2ccq5O9YXLLWAt8ur6m13yOlf7fvZoL3M8+Zlw=
Subject key identifier: EE:3C:49:DB:8B:34:3B:61:52:EE:FD:F3:C3:E5:95:F3:15:D6:DA:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584752161BAC22ADAD1B5650E480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0431124-a4ed-34a4-a638-36a3a9cf3571.roa
Signing time: Tue 24 Sep 2024 13:00:40 +0000
ROA not before: Tue 24 Sep 2024 13:00:40 +0000
ROA not after: Mon 23 Dec 2024 14:00:40 +0000
asID: 20940
IP address blocks: 173.223.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:52:16:1b:ac:22:ad:ad:1b:56:50:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 24 13:00:40 2024 GMT
Not After : Dec 23 14:00:40 2024 GMT
Subject: CN=8cc9ec67-3079-4612-b749-94285f62fd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:d7:2b:23:c8:1d:4d:fd:39:bd:3c:4f:18:
db:28:36:1c:de:cb:d2:f5:d8:c7:8a:1a:d9:84:94:
00:62:7d:e0:74:09:e0:00:f1:67:1f:cf:b3:57:f0:
d8:52:f1:75:07:4e:a0:a1:e2:e5:6a:a4:b8:f3:50:
10:3b:f2:6a:ee:1a:e1:ea:d3:32:95:46:20:93:68:
e7:39:45:59:37:21:44:d2:ad:56:2e:10:c2:fb:2e:
06:cb:00:b5:7c:11:7d:bf:4f:68:a2:d8:14:60:e6:
74:a2:a1:0f:bb:e2:b5:41:06:8d:43:02:8f:6f:74:
c6:ee:c7:6b:c6:ce:b0:8a:30:23:a4:1c:68:54:63:
b4:20:b7:0f:92:99:c4:7c:c5:ab:0a:10:82:46:7f:
b5:34:ea:c8:06:93:24:cf:c7:fe:e8:37:68:be:63:
53:93:37:da:d0:de:3a:97:cd:93:9a:e3:6e:ca:56:
4d:b3:37:10:23:c8:a1:0b:87:a8:32:05:30:2b:8c:
4b:cb:e0:11:40:e7:66:8d:c8:2f:bb:fa:6e:7d:cb:
5d:cc:c0:04:cd:fa:37:21:f4:b5:a2:a2:ee:e6:99:
23:4f:a4:7d:bf:09:d7:da:a7:62:ef:29:ef:bd:d3:
3b:d7:82:aa:71:c2:e5:85:92:00:2d:15:a2:c8:e1:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:49:DB:8B:34:3B:61:52:EE:FD:F3:C3:E5:95:F3:15:D6:DA:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0431124-a4ed-34a4-a638-36a3a9cf3571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.223.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:59:44:2f:d8:69:ce:b6:35:11:19:b7:bc:84:d1:b1:00:11:
da:d6:6f:13:6b:47:90:83:25:ee:54:5e:29:d3:73:5f:25:c0:
fa:1c:19:3a:3d:57:fa:f6:82:b0:7d:d5:e3:4a:c6:12:7c:9a:
e5:4c:34:8f:37:a9:fb:8a:b3:52:3e:df:80:3e:ec:10:95:4b:
8f:a6:c7:1c:e8:c0:cc:75:b7:0b:b5:53:70:f2:db:99:e6:fd:
ca:27:68:d0:eb:8c:25:04:7c:20:b3:32:4a:8e:3b:04:17:23:
fd:40:ed:89:48:ac:02:74:31:c4:db:e7:04:08:e1:98:7c:2e:
7e:51:94:3e:a2:b4:8b:b4:70:f1:71:1d:6b:ed:04:08:f7:30:
aa:72:3f:a2:ad:05:cb:23:55:9b:1e:3a:7c:12:b9:13:1b:f2:
61:61:a4:13:40:21:78:54:ed:60:e4:a0:e2:d7:6b:a3:64:a1:
1c:66:72:1a:4b:85:c3:8c:e0:1c:b4:17:e3:54:4b:ea:ac:3f:
28:a8:a0:3c:f0:8d:bb:7b:52:74:ea:bf:ae:12:16:3e:9a:a2:
77:62:34:7d:7d:01:38:0f:56:e3:1e:3c:50:36:fa:e1:1e:97:
75:d5:e3:89:0f:6c:27:55:0b:0f:bf:a7:b2:49:bb:cf:b3:61:
02:a3:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:02 2025 by rpki-client