Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/38a07d35-0e11-4e86-805d-3569c848446a/40d1261c-6f2d-33c0-8d0f-e2eed0fc7c5c.roa
File: 40d1261c-6f2d-33c0-8d0f-e2eed0fc7c5c.roa (raw, json)
Hash identifier: Z82aCW20bdNbouIhCXoh8kjtw9MT7jFuexv/i/l+UNM=
Subject key identifier: 0D:EA:CC:C1:B4:CE:15:C0:B9:86:7F:0A:44:85:C5:E0:89:D5:1B:8B
Certificate issuer: /CN=38a07d35-0e11-4e86-805d-3569c848446a
Certificate serial: 010D0C9F43285847B1FE8782FF80CA946BF22E80
Authority key identifier: 8D:0F:DD:1D:39:E2:93:3D:5C:86:04:DC:AC:2D:3C:39:52:4C:EA:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/38a07d35-0e11-4e86-805d-3569c848446a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/38a07d35-0e11-4e86-805d-3569c848446a/40d1261c-6f2d-33c0-8d0f-e2eed0fc7c5c.roa
Signing time: Mon 28 Oct 2024 21:30:52 +0000
ROA not before: Mon 28 Oct 2024 21:30:52 +0000
ROA not after: Sun 26 Jan 2025 22:30:52 +0000
asID: 401357
IP address blocks: 23.191.104.0/24 maxlen: 24
2602:f7e9::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:b1:fe:87:82:ff:80:ca:94:6b:f2:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a07d35-0e11-4e86-805d-3569c848446a
Validity
Not Before: Oct 28 21:30:52 2024 GMT
Not After : Jan 26 22:30:52 2025 GMT
Subject: CN=d816ec39-1fee-4926-8c88-ce1402b177d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:a5:c6:66:54:b7:e4:74:13:0c:18:34:f5:
85:93:97:d1:55:93:6f:76:1c:c6:53:c9:fd:fb:ba:
08:d9:82:bb:e9:de:30:ea:45:a6:42:46:05:e0:61:
44:cb:9e:27:d9:f6:74:43:fe:7d:f4:fc:f0:85:a3:
c6:ed:d7:5b:55:60:ad:d8:8d:86:e8:09:39:92:0f:
ca:ae:89:00:ef:dd:59:b6:ff:3f:d5:a7:05:c2:ef:
da:4a:fb:af:fa:8c:b2:19:74:d3:1c:09:c6:d3:7f:
27:e1:48:3a:a0:3a:14:3a:2a:2f:f5:ff:8e:21:f8:
5a:dd:ab:c2:61:56:b1:22:18:bf:be:65:97:93:8e:
cf:8f:de:a5:f7:37:56:7e:53:2f:e4:83:21:7c:bb:
ac:f8:9f:0d:72:9d:51:e2:87:7b:37:8f:63:53:9b:
df:f7:7e:89:40:f1:37:1c:5c:86:52:cd:a2:49:0c:
59:9f:3f:02:5b:5e:cb:a8:cb:e6:2b:cd:5a:d6:02:
c7:14:02:8f:dc:e7:d2:49:9e:7a:73:67:8f:a8:56:
f6:61:f6:34:af:d1:e9:c3:04:22:82:db:22:ed:38:
fc:2c:26:7f:67:88:63:00:15:a2:40:b6:d4:d1:da:
43:d2:ed:6c:63:23:ed:b1:cc:4d:4a:f3:31:ac:b6:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:CC:C1:B4:CE:15:C0:B9:86:7F:0A:44:85:C5:E0:89:D5:1B:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/38a07d35-0e11-4e86-805d-3569c848446a/40d1261c-6f2d-33c0-8d0f-e2eed0fc7c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/38a07d35-0e11-4e86-805d-3569c848446a/38a07d35-0e11-4e86-805d-3569c848446a.crl
X509v3 Authority Key Identifier:
keyid:8D:0F:DD:1D:39:E2:93:3D:5C:86:04:DC:AC:2D:3C:39:52:4C:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/38a07d35-0e11-4e86-805d-3569c848446a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.104.0/24
IPv6:
2602:f7e9::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:90:e8:b8:0e:0b:6e:2a:f4:13:6a:51:59:fc:2e:ad:a4:02:
3e:f3:bb:f1:5f:9b:dd:c2:6a:21:89:cf:06:8d:38:73:9f:bd:
e6:c1:7a:61:b7:34:3c:09:b0:17:9d:95:6a:0f:42:38:f7:5e:
db:6a:0c:d7:3f:db:10:01:7f:c0:e4:09:d9:0c:13:79:d3:e6:
6e:83:78:4b:c3:c6:14:3e:27:94:51:56:27:fd:b6:1d:e6:a7:
d7:94:84:9d:ee:58:ac:08:33:a8:bf:f7:d7:84:35:1b:43:94:
cc:95:54:a9:ea:85:10:f1:de:26:27:8d:3a:50:f9:b4:69:ea:
a9:bb:69:97:47:06:d5:7c:fd:74:51:7d:38:c8:05:1c:d8:11:
ed:33:c6:8e:a3:dc:3f:07:8c:fd:3a:58:52:f8:87:a3:e0:1f:
c7:27:b1:f6:fd:c2:90:3c:9b:1e:3e:b8:84:51:a8:e5:5c:49:
da:e2:0d:ab:6e:fd:2b:4b:f0:02:50:17:74:7c:77:16:70:f1:
1d:72:45:73:f6:22:5c:9d:85:c3:f7:66:93:4d:11:b0:33:a5:
43:97:df:ef:e9:d5:19:83:3b:0e:9e:38:01:28:c1:32:34:64:
b7:79:3b:1f:1b:0f:cd:71:8c:f2:f6:c6:82:a2:e3:65:67:ae:
78:8b:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:51:06 2025 by rpki-client