Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39fe15f-bfcd-37f2-9b9b-259b79d0e168.roa
File: f39fe15f-bfcd-37f2-9b9b-259b79d0e168.roa (raw, json)
Hash identifier: wfONc6ixdw9b9MxTiINHl1fRukfCrfymFFcpKEKSMhQ=
Subject key identifier: F0:88:3B:B0:9C:E5:99:A2:86:98:36:B1:CE:9A:FC:B1:C6:CF:92:CE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846864A1D10DF2DA645E93D7DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39fe15f-bfcd-37f2-9b9b-259b79d0e168.roa
Signing time: Sat 13 Jul 2024 13:00:33 +0000
ROA not before: Sat 13 Jul 2024 13:00:33 +0000
ROA not after: Fri 11 Oct 2024 13:00:33 +0000
asID: 16625
IP address blocks: 23.4.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:86:4a:1d:10:df:2d:a6:45:e9:3d:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 13 13:00:33 2024 GMT
Not After : Oct 11 13:00:33 2024 GMT
Subject: CN=c8b36b55-2282-4cd2-bb9a-9d7f0ec9b471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:3b:0c:18:44:70:8d:25:d5:01:b5:8e:c7:
41:72:e3:e7:1a:9b:eb:a9:f8:b0:77:79:82:fe:cd:
c3:1c:40:d4:54:b3:da:e6:49:7c:55:6c:bb:9a:3b:
e3:d5:72:3e:bf:66:b2:ec:92:69:33:96:d6:08:05:
45:75:e0:f3:52:64:46:0f:23:ae:2a:8e:eb:5d:4a:
5d:3b:12:cf:6c:92:21:59:fe:f6:12:9e:e8:c4:9a:
77:79:63:78:83:38:dc:0d:6d:3e:6d:6a:e2:ce:5e:
31:73:30:09:83:27:b2:c4:b4:63:64:51:6a:18:af:
38:72:7b:93:26:df:34:0e:26:b7:98:42:4e:80:bf:
ba:2b:59:67:b7:b7:93:b4:2f:90:b1:01:20:33:78:
ad:48:43:63:48:dd:81:4f:5b:50:99:67:0e:35:f2:
de:5b:2d:d1:c9:10:ba:62:27:0c:f1:31:49:28:f5:
75:3d:b9:f6:97:4b:b1:d8:6f:69:4d:8d:83:dd:10:
b3:a5:bc:15:b1:d0:4b:e8:d9:61:81:94:08:40:82:
c6:44:d8:05:84:84:3a:b3:20:71:31:00:2d:be:33:
27:f2:3e:9c:e6:2e:34:9b:da:3e:df:e8:b9:4f:00:
cb:5f:1c:0f:9f:52:cd:5e:cf:32:e6:b1:ab:44:30:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:88:3B:B0:9C:E5:99:A2:86:98:36:B1:CE:9A:FC:B1:C6:CF:92:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39fe15f-bfcd-37f2-9b9b-259b79d0e168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.4.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:f5:4c:8e:4e:8c:8d:81:12:6a:cf:69:61:0a:a7:69:7b:1b:
c8:f4:97:82:cb:66:86:c6:0e:cc:7d:95:b7:b4:01:2d:5e:da:
61:c1:7f:a3:ef:68:31:ac:5a:e5:78:27:33:7e:c6:14:0e:77:
21:99:25:7c:a6:68:48:f0:7b:8a:82:a6:d8:92:27:27:ae:b9:
42:9b:70:23:33:59:e7:16:8f:f7:8d:44:b9:3e:b0:49:42:c1:
1b:ed:48:44:07:6c:ef:0d:fe:b1:c6:56:3c:71:55:60:38:a9:
b4:4d:7e:72:bf:33:b4:03:08:d1:e7:b1:ff:ac:01:44:bb:20:
86:2a:07:78:52:78:ae:48:ed:c7:50:99:ab:de:d8:bc:64:30:
60:55:ce:0c:e5:d8:6d:3f:7c:cb:c6:b8:71:62:8e:ba:56:74:
8a:a6:e5:78:b6:85:f4:81:f4:81:64:d7:96:32:66:ab:42:46:
5c:40:51:56:c2:01:9b:ea:db:f0:0a:70:da:2f:18:93:66:8d:
06:27:5d:35:94:e1:d2:b1:bb:39:98:3b:01:ff:23:6c:81:2e:
a5:be:06:73:b5:50:46:ea:07:a1:8e:04:b3:10:40:11:e6:eb:
6b:3e:cb:40:92:65:b2:b9:aa:5a:16:e6:17:f7:b5:86:d8:a9:
43:3b:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:04 2025 by rpki-client