Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3362061-9383-3606-90ee-afd1defb4834.roa
File: b3362061-9383-3606-90ee-afd1defb4834.roa (raw, json)
Hash identifier: RH5bbpiBZ8W/aht3G1CE0uKJ+urP7I4IAa4GY9buuI0=
Subject key identifier: 2F:CC:16:16:C1:9F:02:0A:72:88:34:1C:AD:AA:E9:AF:4A:C5:53:C7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5417C70C757CAF6A6F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3362061-9383-3606-90ee-afd1defb4834.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 23.236.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:54:17:c7:0c:75:7c:af:6a:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=779b3158-6116-4e8a-a08b-1000dab5b98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:27:c5:7c:dc:21:37:f4:80:51:34:9d:cd:34:
6a:bb:c3:62:ea:9d:c1:e0:f2:33:28:2b:f7:f8:a7:
bf:9d:f9:19:ac:4e:89:d8:b2:bb:77:56:c3:59:cc:
92:5a:e2:f7:c6:f7:97:10:1e:52:83:ce:53:11:63:
28:1d:18:18:70:b6:fa:0c:65:5c:50:6c:9c:86:c4:
ea:30:a2:aa:cb:00:cd:53:b5:dc:dd:f2:a1:c2:2d:
5e:3b:86:f2:fc:bb:ce:72:0d:2f:e9:98:9c:60:db:
3f:f5:84:cf:bf:dc:0e:69:99:33:d9:a9:f1:3c:c7:
d0:26:16:d1:dc:9b:7c:fb:a4:26:0c:5d:40:21:20:
ba:84:0f:5f:8f:5c:35:ec:8a:10:9d:47:34:2d:f5:
11:3c:6e:4d:9d:41:64:e9:cb:16:28:d7:07:b0:e0:
63:bb:6c:61:1e:a8:26:1c:e9:cc:6b:74:46:96:f4:
53:e1:22:ee:be:be:93:36:af:68:39:1c:b2:2d:97:
83:8c:de:4d:1b:19:a3:7d:f0:ad:f1:2f:35:ef:37:
00:b1:30:25:19:ee:21:37:8e:8d:6e:05:d4:27:f4:
ed:20:68:e7:34:3d:83:b8:e9:5e:ef:17:26:79:68:
f7:a6:b6:5f:d7:91:c6:1e:3d:46:2a:c4:90:f4:50:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:16:16:C1:9F:02:0A:72:88:34:1C:AD:AA:E9:AF:4A:C5:53:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3362061-9383-3606-90ee-afd1defb4834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.236.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:57:5e:1d:c7:a2:47:e1:a0:9a:de:fd:35:c1:19:8d:46:ed:
44:8c:42:e6:dc:a2:97:17:a0:79:ac:20:b9:e5:49:6d:0e:a3:
dd:69:73:79:40:c5:c2:6e:6b:ab:15:46:c0:64:eb:65:4a:50:
c5:76:bb:9e:d3:ea:c4:95:bc:b9:a2:38:e8:51:9c:16:75:40:
b0:9d:ff:a5:f2:0a:ce:ce:61:31:35:be:ed:92:02:16:4b:45:
c5:39:95:e3:40:a4:2d:11:f6:77:4c:f2:07:97:44:15:25:c2:
df:fe:5b:0b:70:32:4f:0b:2d:51:87:37:49:f3:22:f1:c2:4c:
79:51:99:fe:ef:f9:6c:fe:2c:7e:36:9f:f5:c1:22:18:de:5c:
46:a0:4c:22:4f:ee:b0:41:e6:2c:41:dc:17:3e:49:67:fb:ca:
fb:39:5c:70:9d:eb:0b:7b:67:66:bf:10:c4:b1:eb:3b:cc:08:
9e:88:23:14:06:4f:5c:72:8a:21:6a:0f:ca:d7:80:ed:bd:78:
77:81:8e:2d:dd:c4:cb:6f:74:fa:da:cb:47:ac:e3:5f:0b:e3:
c1:ec:b6:c7:be:6d:6f:04:25:74:a0:71:9d:96:c9:9b:2d:0a:
53:94:fd:6d:2e:c8:b4:1e:4a:f5:72:81:81:3a:9d:c7:aa:bb:
66:b7:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:30:15 2025 by rpki-client