Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a73b90d7-ce50-3548-abe3-21dc035ce362.roa
File: a73b90d7-ce50-3548-abe3-21dc035ce362.roa (raw, json)
Hash identifier: rou+TubpjwBkEmAuPED+N1QLbtEPZjLYTJLpvtGScT0=
Subject key identifier: 79:D4:B2:39:10:A6:01:86:E0:5F:71:BA:CF:24:FA:EB:35:A8:09:DB
Certificate issuer: /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial: 010D0C9F43285843C3FAF78516206841A17F7280
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a73b90d7-ce50-3548-abe3-21dc035ce362.roa
Signing time: Fri 03 Nov 2023 13:00:22 +0000
ROA not before: Fri 03 Nov 2023 13:00:22 +0000
ROA not after: Thu 01 Feb 2024 14:00:22 +0000
asID: 17024
IP address blocks: 23.154.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c3:fa:f7:85:16:20:68:41:a1:7f:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Validity
Not Before: Nov 3 13:00:22 2023 GMT
Not After : Feb 1 14:00:22 2024 GMT
Subject: CN=d18cdff1-8e2c-483b-917c-5e936e7df3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:8b:5b:5a:6c:ab:f0:3d:86:b5:09:eb:48:
40:59:0e:10:48:63:54:32:f9:b4:4c:e1:f0:61:5c:
04:74:ae:3f:29:b8:89:ab:b5:f4:65:7d:72:2c:91:
b7:1c:6a:58:dd:e2:0a:ee:0f:8c:c0:ed:2a:4d:f2:
97:03:b9:ca:64:e7:8b:e2:13:85:18:ac:54:b4:ce:
d8:3c:7c:40:f8:8a:7f:50:8d:37:3e:b6:0e:be:35:
92:ed:24:c8:64:d7:61:27:28:44:b1:4f:30:d6:37:
19:8b:3c:aa:2e:09:aa:77:73:a3:5f:6f:a0:a4:df:
9f:8f:b3:b4:d2:b3:2c:ee:2c:fc:95:0c:be:70:5e:
84:0e:af:50:0f:47:f3:4c:b1:f4:d9:c9:85:4d:67:
76:48:cb:57:2a:03:db:66:1f:33:9b:3a:19:95:3d:
b9:c1:25:78:d3:c1:60:a4:1f:e6:68:d1:62:ce:5a:
9f:44:f6:ce:d0:12:37:74:76:be:18:42:32:85:37:
d0:fa:39:08:18:e6:b1:f7:a2:36:15:dd:9f:1a:c0:
81:76:d3:6f:a0:74:23:66:dd:92:91:81:ac:7c:6d:
13:4b:25:24:36:a5:1b:4a:3c:36:a0:d7:b4:e6:53:
d6:7e:eb:d6:51:e0:7b:c4:af:f3:b3:65:c1:1e:d6:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D4:B2:39:10:A6:01:86:E0:5F:71:BA:CF:24:FA:EB:35:A8:09:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a73b90d7-ce50-3548-abe3-21dc035ce362.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
X509v3 Authority Key Identifier:
keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:21:0b:90:c9:52:cf:bf:20:f2:63:94:0e:63:12:94:b4:27:
39:93:1c:cf:75:d4:30:16:5e:c2:e7:bf:6a:35:af:30:fc:61:
7f:55:14:2f:3f:fe:af:78:1e:ea:96:b0:0e:bc:26:f8:59:2c:
eb:33:30:27:7a:da:2e:64:8d:00:e0:dc:a5:3f:e6:d8:d3:4e:
1c:c1:a6:b9:00:6d:15:73:8c:18:cb:6b:9e:2c:48:97:c8:03:
12:c6:a6:31:2e:1e:6f:fd:76:68:dd:24:64:28:46:bd:7c:f4:
56:37:8f:b6:71:15:29:8b:68:8e:bd:c6:85:09:52:39:99:37:
47:4c:67:13:7b:bd:50:e6:40:96:b5:4b:f1:66:d8:5d:13:de:
4c:6b:a3:b0:2b:ca:de:07:5f:56:1c:c0:e3:b8:f2:a3:ac:87:
5b:16:5b:3c:2a:7a:db:0d:b1:20:c1:4f:e2:91:f8:9f:47:b5:
e1:4b:7c:0e:0c:f4:dc:08:4d:4a:56:ce:1d:95:df:1b:fa:9b:
ec:a1:a6:cc:0f:0a:bc:c6:84:6b:c4:91:9e:b3:df:7b:52:8e:
f0:20:e8:b9:f3:78:1d:61:a7:1a:cd:f1:bb:4d:c9:e5:57:00:
d5:9d:04:60:ab:a9:c3:b6:7b:00:ce:fd:87:d1:16:0b:64:91:
dd:9c:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:09 2024 by rpki-client on console.sobornost.net