Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/9d2df2d8-2baa-3ade-ba43-0f563ad12ea8.roa
File: 9d2df2d8-2baa-3ade-ba43-0f563ad12ea8.roa (raw, json)
Hash identifier: k6kmNGHATO/IilVo8u2XOvdUZhpORDcnQfsYLxUL/aI=
Subject key identifier: 59:A4:79:79:C9:02:1E:51:6F:56:16:2E:7F:BA:37:5C:8B:99:7C:FB
Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial: 010D0C9F43285847FAC8D8EF2F110663117E4100
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/9d2df2d8-2baa-3ade-ba43-0f563ad12ea8.roa
Signing time: Sat 23 Nov 2024 23:16:43 +0000
ROA not before: Sat 23 Nov 2024 23:16:43 +0000
ROA not after: Fri 21 Feb 2025 23:16:43 +0000
asID: 397270
IP address blocks: 23.151.16.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fa:c8:d8:ef:2f:11:06:63:11:7e:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Validity
Not Before: Nov 23 23:16:43 2024 GMT
Not After : Feb 21 23:16:43 2025 GMT
Subject: CN=d6164817-5369-4304-ad42-8184ca01ae2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:91:6c:9d:a5:2a:46:d7:fc:b0:24:3a:96:
81:e6:56:f9:ff:f5:ce:73:25:19:17:dc:19:c1:ef:
d4:87:ae:c2:9f:df:d2:77:f2:75:51:a0:e7:08:3c:
e3:c8:0d:36:17:87:58:7f:f8:75:db:34:28:b7:fa:
79:fa:27:ab:ff:5a:54:f0:c9:1e:3c:93:26:42:24:
57:c9:33:9f:6b:9c:43:d5:da:85:4c:2c:b3:76:aa:
a1:f3:65:e6:fa:89:ad:a9:41:02:3e:ad:8c:f7:92:
0a:5d:19:14:80:5c:74:cf:f7:48:33:1f:cf:cb:5c:
45:85:b2:45:ed:f0:09:c1:8f:79:3b:2e:6a:55:fd:
ac:cb:1a:96:90:9e:f6:55:5a:fc:6f:d4:92:76:3f:
6d:80:35:5d:40:14:e2:ef:9e:b0:20:cb:25:2b:54:
5e:b2:42:ad:ce:03:53:67:20:a9:71:4c:a5:f8:10:
29:7e:6c:25:78:df:c4:26:52:76:01:31:36:5a:54:
2e:ab:ec:7d:59:ff:92:03:c4:56:fd:7f:e9:fb:7b:
46:6e:ca:76:43:57:a0:77:e3:84:00:c6:3f:d6:fe:
77:1a:b8:d1:fb:7f:c7:5f:7d:d7:66:8a:1b:50:e4:
3a:67:eb:f6:10:e5:2d:42:20:84:e2:77:53:2e:5b:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A4:79:79:C9:02:1E:51:6F:56:16:2E:7F:BA:37:5C:8B:99:7C:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/9d2df2d8-2baa-3ade-ba43-0f563ad12ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
X509v3 Authority Key Identifier:
keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:95:d4:91:26:69:0b:bf:7f:ed:b9:fc:73:c9:d7:99:24:3c:
20:f8:e4:ac:d5:85:1e:e3:6d:2b:7a:2b:f9:30:3b:f7:99:ac:
50:9d:5f:7e:7a:e3:94:56:cf:a8:5e:4d:3c:5f:7d:87:4f:48:
22:95:07:35:8e:6c:a3:e3:da:52:70:8f:3c:7c:3a:21:d1:90:
56:ed:cb:16:b8:c8:86:6a:24:95:10:55:17:0f:29:7b:1d:ad:
81:c5:67:e4:1b:d0:f2:17:71:d5:42:1c:96:6c:3f:41:74:ac:
fa:be:b2:54:0f:04:3a:60:72:eb:a3:8d:73:ed:5e:53:12:2e:
60:04:f2:40:af:99:6d:ed:37:68:3a:da:39:50:38:95:b6:13:
45:4e:de:b5:53:38:b5:dd:56:da:d7:6e:6a:2f:a6:b4:9d:f5:
b6:66:e5:a0:e8:d4:c6:90:fe:93:b3:fa:cc:70:b1:a9:05:dc:
a2:2b:40:84:52:ae:72:38:ed:e1:72:70:17:ed:27:47:98:8b:
07:d4:aa:d9:b9:72:29:33:cf:5a:c7:5c:f7:85:d5:fe:a7:6e:
1d:ce:5c:d0:11:e7:49:ca:67:be:d6:fd:45:ee:89:52:4e:6b:
1d:93:47:62:d1:9d:64:40:02:13:b9:eb:d3:c2:d8:9e:55:78:
09:71:c3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:15:47 2025 by rpki-client