Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0a6588c-262b-36ea-bd2c-dd3061a57fc3.roa
File: f0a6588c-262b-36ea-bd2c-dd3061a57fc3.roa (raw, json)
Hash identifier: nZC2ADH9WVJAm2/8hrdlaIYZeyeHOVk9YFMEZbdKQss=
Subject key identifier: F4:E8:BE:1B:FE:99:1C:26:41:55:5B:3E:D1:96:62:1D:F9:5C:FC:62
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584632AACBA4026C94E0FFF216C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0a6588c-262b-36ea-bd2c-dd3061a57fc3.roa
Signing time: Thu 13 Jun 2024 14:07:34 +0000
ROA not before: Thu 13 Jun 2024 14:07:34 +0000
ROA not after: Wed 11 Sep 2024 14:07:34 +0000
asID: 20940
IP address blocks: 23.42.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:aa:cb:a4:02:6c:94:e0:ff:f2:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 13 14:07:34 2024 GMT
Not After : Sep 11 14:07:34 2024 GMT
Subject: CN=94947aeb-099b-4cb4-9cc6-d34fb4a4cf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:a9:f9:40:be:62:2d:9b:62:06:20:82:a8:
d2:c9:90:90:fe:04:f5:11:d8:ed:40:42:b8:6b:0f:
57:93:23:fb:07:de:ec:e8:ce:16:b3:3b:11:44:76:
b2:47:ad:28:64:ae:b1:68:6e:70:83:d2:e4:b0:23:
0c:67:9c:99:79:15:da:f1:24:f3:95:fe:3e:fe:ff:
f9:35:fe:21:94:37:78:38:bf:d5:94:62:36:3c:28:
ec:bc:72:2d:45:ba:19:5f:d9:50:41:67:19:45:89:
74:a2:e8:a8:e5:2a:d0:45:d7:fd:1a:03:95:0e:cf:
55:91:19:8d:f9:b9:da:b1:37:f0:1b:21:68:e9:ed:
18:09:61:46:8c:89:30:17:0d:38:1a:56:4f:7e:31:
07:52:2a:7a:f0:c1:11:14:92:d5:18:9a:34:9f:2e:
2f:0f:ae:c2:05:fa:73:a8:aa:90:2e:66:2f:50:2e:
dc:6a:ce:47:a2:a2:a8:f4:8f:17:5e:a8:ff:c7:20:
b8:9e:db:67:46:66:f0:42:4f:d0:1b:ea:22:e7:20:
6f:23:e2:80:54:22:cf:0b:df:5f:87:0d:28:94:dc:
74:f3:43:fb:98:8c:f1:d2:5d:80:c4:c5:0e:34:ab:
2e:bc:6e:fb:a2:2e:ff:e0:0a:f3:ce:71:d1:da:8f:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:BE:1B:FE:99:1C:26:41:55:5B:3E:D1:96:62:1D:F9:5C:FC:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0a6588c-262b-36ea-bd2c-dd3061a57fc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.42.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:ea:af:62:df:66:df:c2:f6:85:a8:d7:a3:85:ad:5e:42:96:
80:8c:82:ea:17:c0:79:0f:09:bf:63:85:28:5c:2f:ad:f8:e6:
fc:06:91:d9:ce:9c:8c:b4:0c:e7:91:55:57:c4:72:cf:17:79:
96:f8:33:74:fa:3a:54:69:04:5b:51:33:69:42:81:ce:37:47:
d4:19:9e:fd:b4:9a:d6:5d:64:cd:ca:27:7d:9f:ef:10:b1:6c:
83:d2:28:27:55:63:aa:eb:fa:ec:91:2a:29:06:1e:8c:79:9a:
d6:21:95:f7:a9:df:e9:0a:47:c7:9d:f2:65:00:2c:32:f5:e7:
18:f8:07:16:80:1b:75:96:c6:ad:4a:0a:ed:92:ce:dc:8c:06:
bf:a0:b7:91:e4:ac:a4:1f:d7:57:35:c0:50:2e:6a:4b:95:4d:
03:57:b1:da:64:93:4a:d3:26:cf:09:6d:67:e5:f1:66:08:e3:
5a:89:3f:0e:9f:15:06:b1:fd:05:1f:f5:21:ae:b3:43:2f:c2:
a5:f8:b3:58:06:9c:a2:0f:29:29:89:f7:be:9c:4f:64:2f:2d:
24:20:b2:84:a2:9f:0c:48:40:f7:ad:b4:0d:df:54:bc:60:fc:
2d:2e:dd:23:18:30:8b:91:f4:68:92:f9:94:72:83:46:d8:84:
ae:f7:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:32:39 2025 by rpki-client