Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/826e7343-4b51-31b3-be55-90211c4ba611.roa
File: 826e7343-4b51-31b3-be55-90211c4ba611.roa (raw, json)
Hash identifier: M41Sg04WwulPUZGf4A++AebYHO1UCtkracaF0iOymko=
Subject key identifier: C0:A6:15:E9:E5:A4:FB:FE:AB:C0:89:54:CA:63:86:38:A3:17:EF:99
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285846B3F996A3657A1ACF50B2E840
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/826e7343-4b51-31b3-be55-90211c4ba611.roa
Signing time: Mon 29 Jul 2024 21:45:36 +0000
ROA not before: Mon 29 Jul 2024 21:45:36 +0000
ROA not after: Sun 27 Oct 2024 21:45:36 +0000
asID: 7922
IP address blocks: 23.237.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b3:f9:96:a3:65:7a:1a:cf:50:b2:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Jul 29 21:45:36 2024 GMT
Not After : Oct 27 21:45:36 2024 GMT
Subject: CN=b1a1f568-ce68-4650-83d6-43f2f08ec78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:92:e0:88:f1:33:ca:08:8d:3f:04:02:e3:
a9:b4:91:76:e9:9a:87:4e:cd:8e:1f:29:ec:1f:9d:
b7:94:91:b9:de:40:45:0b:c6:36:4c:c1:25:ca:c3:
09:b1:e4:6f:0d:1e:df:2b:f0:42:62:0f:29:7a:d5:
fb:23:55:5a:7f:85:09:aa:5b:3d:42:11:61:54:0d:
10:21:6d:f9:d6:71:e7:f0:2a:1a:1c:79:8b:b7:fd:
09:16:32:c6:60:3d:fd:8c:8a:fa:31:17:c3:7a:3f:
69:a0:86:be:ad:cb:e6:cb:a3:11:11:4d:e8:05:a1:
d4:98:0f:23:f5:cb:ac:08:46:ec:08:8b:6a:1d:f3:
e4:a8:23:62:6c:de:6c:c6:0f:55:79:c0:8f:d4:86:
22:94:7c:7a:83:95:ba:1d:05:0b:00:27:3f:6b:0b:
f5:7f:f5:14:89:a5:f5:4d:04:0a:b2:9d:a7:31:14:
ed:2a:69:0b:8d:30:49:93:14:ba:2c:fe:1b:ad:15:
df:f6:25:2d:22:9e:05:62:bc:6d:32:55:44:0c:77:
5a:b7:24:d5:06:5a:e2:91:94:e6:ce:62:e9:e1:4a:
8f:9b:c9:91:d4:b1:50:bd:ab:1c:20:40:2f:55:e7:
47:df:15:b3:09:02:ef:01:bb:49:4e:ca:cb:5d:d3:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A6:15:E9:E5:A4:FB:FE:AB:C0:89:54:CA:63:86:38:A3:17:EF:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/826e7343-4b51-31b3-be55-90211c4ba611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:94:a4:a6:2f:ae:da:a7:f9:03:ab:71:0c:9c:ad:5d:d0:02:
bd:26:9e:a2:9d:e8:35:63:50:e8:c1:f8:65:cc:9b:95:24:68:
3c:c1:be:59:86:eb:5b:18:1f:f3:11:7f:ab:89:dd:83:39:02:
40:3c:2d:db:13:39:bc:ad:82:35:cc:7e:0e:a3:2b:8b:40:86:
5f:b7:c6:f3:e4:44:5a:59:64:2d:94:cb:c9:50:f9:88:43:53:
0d:df:20:59:43:5e:5d:d2:9f:49:bf:8c:d6:22:e3:cf:0e:b2:
aa:dc:8a:bd:0e:f7:71:f5:a4:14:f3:65:e2:f2:ad:58:36:e8:
2f:d5:cb:49:17:61:c5:3c:83:81:08:4a:e1:1b:f2:f5:d3:82:
19:c3:fa:a4:0a:74:dc:1b:cd:d5:47:e5:a2:8a:28:41:2e:5f:
b6:56:db:4c:50:bf:62:58:8f:dc:7f:b2:08:1f:d8:b9:50:5c:
a3:d9:ea:e0:dc:ef:2f:a1:16:44:9e:10:53:e1:0e:e9:d9:e3:
d9:65:5d:b5:78:c4:48:9d:18:d6:63:ff:83:2c:b8:f6:85:70:
c7:6f:e8:e8:e8:77:11:0f:37:fb:a7:c3:84:cd:af:70:3a:1d:
41:03:cb:5e:1e:47:82:ab:4c:b0:e4:0c:68:5a:9e:e3:55:64:
bd:24:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:42:46 2025 by rpki-client