Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/534ab7f8-f267-3ccc-a166-13936ca791ba.roa
File: 534ab7f8-f267-3ccc-a166-13936ca791ba.roa (raw, json)
Hash identifier: 5cqUI2+RNTdovDDE/xqWvIML1xRSfitesJnIpR+64Jo=
Subject key identifier: 3D:5E:A4:07:7B:62:E9:B9:A2:C4:11:DE:69:46:28:B3:D8:DC:9F:A9
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F432858468D5BB4FFAC1654F097FF1C80
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/534ab7f8-f267-3ccc-a166-13936ca791ba.roa
Signing time: Tue 16 Jul 2024 01:46:46 +0000
ROA not before: Tue 16 Jul 2024 01:46:46 +0000
ROA not after: Mon 14 Oct 2024 01:46:46 +0000
asID: 140096
IP address blocks: 23.150.32.0/24 maxlen: 24
23.150.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8d:5b:b4:ff:ac:16:54:f0:97:ff:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Jul 16 01:46:46 2024 GMT
Not After : Oct 14 01:46:46 2024 GMT
Subject: CN=b8132b36-ae16-49a8-8e3a-3b7e2354e6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:79:01:a3:62:27:2c:35:a5:f8:5e:56:82:
f2:39:2f:81:aa:42:0f:12:77:e9:e0:51:ac:88:f0:
10:3e:a0:96:23:54:41:de:75:f6:3e:37:30:53:7a:
36:28:b6:37:88:24:03:ae:25:e3:a9:8d:a3:d9:b3:
4d:6c:3a:3a:65:b4:dc:6b:93:72:cf:db:d3:20:b3:
da:89:0e:4d:c9:be:ec:6b:4e:bb:18:c9:25:19:0c:
89:61:b5:6c:b5:28:14:78:1b:f4:b2:6d:44:06:a5:
54:e3:ac:1a:11:38:d2:fe:17:b4:96:63:00:ec:be:
e1:f6:96:df:d1:fa:76:eb:0d:43:11:67:d1:ff:d5:
ef:e7:e9:08:55:37:74:1c:a6:d9:a6:7a:e9:90:4c:
4d:6c:f5:47:9d:11:e6:51:69:52:7d:10:ec:cb:e9:
2b:e3:68:b6:35:e9:c0:2d:69:91:a1:b3:f7:32:56:
71:5e:77:1b:75:af:16:ad:fe:1f:8f:4b:75:e8:2b:
f6:00:a7:6e:7f:65:ca:f2:eb:b1:b1:84:72:7a:99:
16:b8:e9:55:78:55:33:b2:57:28:23:6f:9f:fd:8a:
4e:20:52:dc:0a:10:b6:45:aa:5d:18:be:5a:43:f7:
20:86:ae:40:e4:37:8d:3c:34:cd:de:08:36:d2:b2:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5E:A4:07:7B:62:E9:B9:A2:C4:11:DE:69:46:28:B3:D8:DC:9F:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/534ab7f8-f267-3ccc-a166-13936ca791ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:6f:01:bf:37:0f:5a:1c:8b:a1:de:60:fe:0f:0c:79:eb:d2:
00:13:38:1f:a0:25:09:f3:b0:e9:0b:3f:4e:55:99:ad:67:ed:
60:5d:63:6c:2d:60:8b:c2:fc:48:54:2f:84:4f:7e:8a:05:ca:
1b:40:ca:78:86:65:f5:f2:a8:0c:dc:d4:f2:aa:9e:da:9c:03:
04:f3:cc:9d:29:1a:21:9f:1d:8d:73:1c:62:7d:c4:56:90:1e:
cc:9a:98:b2:92:10:d1:b7:0a:9c:8f:35:45:91:ed:50:39:48:
b3:50:7a:c5:90:0a:e9:5c:c4:3c:d0:d1:3b:74:b9:ac:60:bc:
1c:28:aa:09:35:15:67:97:16:79:07:a5:79:13:28:e9:9f:ad:
24:27:21:77:cd:ad:5b:a6:ae:06:e4:c7:a6:9e:d1:5b:f8:95:
24:2a:02:fc:37:bb:ff:ba:9b:3c:44:0c:2a:c0:25:a2:35:0c:
cf:11:fa:b3:d1:cb:a0:32:ff:cd:e8:46:d6:19:06:77:96:3c:
43:74:e0:7c:13:4a:7b:19:be:76:f6:dd:d3:aa:8d:81:45:ec:
e3:a5:7b:ee:5e:23:d2:ca:3a:ea:97:b0:86:10:e3:a9:62:c5:
d6:0f:29:18:30:5f:ad:74:f4:a0:49:f4:e8:8b:b8:c1:7c:63:
76:13:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:15:57 2025 by rpki-client