Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a1198ce-281c-32ee-8695-e7e1d4229550.roa
File: 3a1198ce-281c-32ee-8695-e7e1d4229550.roa (raw, json)
Hash identifier: pdqch73ssmGOUU1QpjEWWnWOugjoq7tY+Ay95Ta6nKY=
Subject key identifier: 4A:C9:3B:69:C2:8D:22:C6:D2:C5:48:FB:FB:5B:A0:4D:D9:7D:B6:3C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446EE6BBFA1345DA28FB5E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a1198ce-281c-32ee-8695-e7e1d4229550.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Fri 07 Jul 2023 07:27:50 +0000
asID: 996
IP address blocks: 23.26.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:ee:6b:bf:a1:34:5d:a2:8f:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Jul 7 07:27:50 2023 GMT
Subject: CN=6b07fdba-2f58-485e-9a50-49aa1a2070aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:0b:72:05:72:28:b2:fc:cf:f0:0f:74:51:
e3:11:24:2c:0b:f1:bd:8a:16:7b:df:81:89:f7:b7:
34:cf:54:a5:cf:34:6a:21:9b:06:2a:c2:5e:ee:ab:
3b:b1:0f:43:eb:60:21:ff:7b:00:dc:25:07:73:d4:
9b:ab:69:ae:a1:48:77:28:1c:63:be:50:0a:38:64:
49:07:a1:d1:3f:1a:cd:ff:b0:e0:c2:c4:9a:e4:7e:
13:5d:7e:9e:5a:3d:8e:72:d3:6b:8b:cc:ae:25:f5:
76:68:23:f6:67:c8:cb:c5:44:da:be:e1:99:19:1b:
9f:80:7b:36:08:70:84:91:aa:7d:a6:53:32:67:14:
43:d2:db:42:f6:8a:b7:c1:2e:ea:75:13:75:61:4f:
62:71:95:56:1b:2d:e0:75:2e:23:35:84:7e:80:fb:
d8:f4:15:83:57:b7:0f:c9:08:b8:67:13:fe:28:42:
0a:94:de:3b:0b:ed:0a:61:4b:38:7f:0c:96:33:26:
05:28:6b:6a:21:3a:1d:f9:c4:91:03:45:6c:f6:e1:
ab:26:b1:59:12:a4:e5:ae:91:a4:87:60:64:5a:82:
05:7a:ef:fd:e1:32:c9:14:19:7b:ff:03:75:66:db:
50:ed:5c:83:b6:50:42:4a:bf:c3:8c:6e:93:6d:52:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C9:3B:69:C2:8D:22:C6:D2:C5:48:FB:FB:5B:A0:4D:D9:7D:B6:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a1198ce-281c-32ee-8695-e7e1d4229550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:35:74:05:33:ea:70:da:fa:85:03:f4:2f:32:61:cb:e4:9f:
ef:15:62:7d:15:fa:37:47:1b:bf:69:c1:9b:e8:7a:f4:08:99:
53:1a:cb:20:14:1d:72:b7:fc:62:e6:d3:2d:70:67:65:f0:5b:
9d:eb:df:9b:6c:11:f0:4c:31:7f:7c:9e:c3:81:43:12:a0:5f:
7b:c5:c3:85:dc:0b:f9:bb:26:11:d1:b9:95:9c:50:b6:4f:7e:
91:39:f7:6b:9f:85:ab:b7:e2:58:6b:68:bc:58:49:ff:78:31:
4a:45:e2:89:28:c4:25:23:96:de:8a:62:d6:92:f5:a7:cc:8a:
ea:90:7c:f7:eb:c3:e2:bd:44:83:6a:f0:2f:3b:b4:17:a0:d6:
ed:b3:6d:7c:70:d7:5b:6c:60:48:55:83:bf:e3:e3:72:eb:2d:
3d:2a:ba:34:f2:b9:14:08:ac:aa:b9:87:5a:55:97:d4:ff:0e:
17:23:7a:fc:8b:68:53:63:9c:c8:44:07:cc:e0:2e:e3:0b:09:
76:76:bd:a6:37:db:b6:c0:cc:f6:2c:81:39:0e:81:07:70:11:
24:48:ab:7a:64:2a:89:fa:7a:80:bb:b0:01:3e:06:c4:4f:7f:
8a:20:2a:2f:9a:01:8e:70:19:19:62:83:d2:87:0a:ce:73:83:
55:9b:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:25 2023 by rpki-client on console-fra.rpki-client.org