Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/062fb4da-9cdb-323c-92fb-b4d6885867ab.roa
File: 062fb4da-9cdb-323c-92fb-b4d6885867ab.roa (raw, json)
Hash identifier: +QMdxDmQNxG7ApVDk6aR6+R9c63faqGvBbL/bpIlbD8=
Subject key identifier: AD:23:3E:9C:9E:77:D6:E5:CC:D7:16:3A:85:B9:03:B1:94:99:69:48
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A6065D0A8243A61505900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/062fb4da-9cdb-323c-92fb-b4d6885867ab.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 212238
IP address blocks: 23.26.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:60:65:d0:a8:24:3a:61:50:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=ac2b2bc7-2e20-4e53-a2cc-c40328ecb40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:a6:1e:b2:a8:a5:d4:c7:58:fd:d1:d3:06:
fb:71:92:8b:cb:86:0a:54:17:f0:f7:03:ac:39:b6:
77:d8:4d:e0:74:fd:19:8b:d1:d8:87:fc:4e:7e:a7:
41:61:f4:dd:35:4f:17:e1:57:39:88:ea:a4:f1:33:
15:b9:f5:bf:07:4b:8b:51:1c:07:70:70:82:9c:a4:
1e:ee:82:e2:5c:db:14:b7:9a:0f:97:0a:8b:8b:ba:
07:d2:8a:f7:16:e3:9b:6d:c5:00:b5:b1:71:7b:52:
4a:40:ec:cc:84:a0:b1:d6:f9:cc:aa:a1:25:ec:8d:
f3:7a:b9:0d:70:d9:a7:53:29:08:60:14:44:61:c5:
f9:68:cd:cf:fc:f1:ad:94:cd:c8:76:c3:57:64:ad:
46:a1:4b:eb:69:fa:e6:16:e7:41:ff:06:73:51:52:
52:b2:1c:b6:1d:43:01:21:7c:32:b9:57:df:73:a9:
77:22:51:52:5f:cb:8c:53:2b:ea:b0:ec:5c:a8:bc:
44:9e:b9:d9:3a:df:f7:d5:7f:79:43:00:be:05:57:
57:cf:6d:1b:f2:19:c0:f9:d5:e9:56:50:e1:22:d6:
c7:ec:64:5d:e3:ca:2a:e3:41:21:27:6a:0e:47:62:
94:c1:70:a9:63:a1:c0:c1:ed:c3:da:dd:b3:55:d0:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:3E:9C:9E:77:D6:E5:CC:D7:16:3A:85:B9:03:B1:94:99:69:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/062fb4da-9cdb-323c-92fb-b4d6885867ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:8a:c8:51:26:32:e3:56:68:f4:5a:67:4d:04:65:7e:7a:d1:
20:b1:0f:b5:76:e2:d2:af:03:d2:ba:63:10:7b:a3:1d:4f:92:
bd:57:10:c2:ea:9b:6c:10:8a:40:10:8a:bf:ee:3c:ab:f1:e6:
02:14:6b:c3:6e:5d:c6:37:31:6c:62:ab:4c:19:98:9c:0a:e0:
c1:fb:12:56:18:e2:04:1c:17:11:57:7e:44:2f:03:8b:6f:5e:
34:82:6b:e8:2c:ef:ab:2a:a8:49:79:a8:ad:98:61:69:a9:4f:
a7:c8:f5:12:0f:56:ce:26:02:2f:95:ec:b1:f7:2b:14:b3:c0:
a4:a7:4d:cf:4a:03:67:9b:ef:07:a6:e7:6f:69:f5:65:a9:88:
4d:90:0b:d4:83:78:cb:bb:eb:24:d3:bd:67:9c:f0:18:79:88:
81:e1:0a:2f:ee:82:71:d4:4c:26:06:2b:7c:84:bf:e8:bb:9c:
97:57:2f:da:31:79:e8:bc:2e:76:48:86:eb:f6:1c:f2:66:6c:
bb:1c:52:26:55:6a:a5:75:50:91:ef:4f:45:de:8c:a6:84:c8:
39:c8:df:1a:e5:ff:c1:86:6b:16:d3:5c:1f:0b:de:4b:dc:08:
0a:c3:ce:e6:68:7c:b2:86:24:ce:c8:61:77:6f:c5:3b:bd:5f:
ff:84:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:33:17 2025 by rpki-client