Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081dd398-cddb-3d8e-8060-5dedc6142614.roa
File: 081dd398-cddb-3d8e-8060-5dedc6142614.roa (raw, json)
Hash identifier: vwKQ6HJHQI3Ow7zlJBLT7erHu3d2mv+q3Q7+PvusYww=
Subject key identifier: C5:70:40:39:B8:D3:B9:20:5A:6D:2F:D9:E8:D6:BA:0F:0B:39:E5:88
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858484EDAD21DA358D3404B60D300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081dd398-cddb-3d8e-8060-5dedc6142614.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 210542
IP address blocks: 23.26.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:d2:1d:a3:58:d3:40:4b:60:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=3736478d-db25-4f57-bf8c-854fd1b3e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:7e:a2:fe:d4:33:0e:2e:cc:ea:ae:1b:8b:
0f:e8:74:d6:e6:99:69:bf:be:89:df:71:8d:c8:48:
28:bc:d4:eb:3b:bf:92:0a:63:49:6b:26:49:29:ff:
ba:af:fc:03:c9:4b:2e:02:7e:83:b1:eb:5d:f1:a8:
58:6f:3c:d4:0b:97:60:b4:e5:c4:54:c1:a4:24:c1:
00:cf:30:8f:13:9b:09:c9:88:b6:42:1c:74:bf:41:
28:32:da:e1:88:1b:77:1e:6c:b4:6d:2e:d2:9c:38:
63:f0:12:cf:4e:5a:53:2d:2d:7f:2d:20:73:f9:d1:
d8:8c:82:f4:af:65:33:d0:f7:ac:3d:5a:8b:e7:43:
30:7f:fb:34:3e:24:8e:98:cd:1e:59:b5:3c:1a:6f:
6c:93:3b:12:62:02:cb:57:c3:81:f9:07:5d:71:07:
ed:8e:d4:d0:4c:22:22:1d:b2:29:95:1b:9f:a2:ee:
cc:e8:98:0e:23:13:51:df:d9:3c:23:1b:d6:f8:71:
c0:3b:f1:ad:50:0b:ef:f6:c4:d1:f3:66:2d:04:20:
e4:36:50:3e:9b:c6:f2:d0:d7:bb:21:70:06:8a:7e:
2b:63:b8:f1:c0:16:03:a8:eb:1c:a2:c1:d3:2b:31:
4d:a7:16:d9:78:49:66:6e:65:eb:c7:07:2f:0e:7e:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:70:40:39:B8:D3:B9:20:5A:6D:2F:D9:E8:D6:BA:0F:0B:39:E5:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081dd398-cddb-3d8e-8060-5dedc6142614.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:4b:11:20:f2:50:00:f6:c7:e1:6f:0a:b1:7b:06:eb:f0:cd:
f6:2f:b9:72:89:bf:13:af:4e:be:da:c3:7e:23:99:99:17:d9:
1a:5b:55:71:1f:11:4a:70:da:d7:6d:1c:91:c3:5f:c8:e9:49:
93:92:41:6e:d7:bd:17:b8:26:f2:f0:07:d9:2d:a7:ed:93:23:
0c:6d:e2:5c:35:5f:e3:33:ab:65:87:92:30:39:fb:f0:40:e6:
34:3a:2d:0c:35:b2:64:a3:55:8a:9a:5f:84:30:73:fe:ee:5e:
58:64:0e:85:4d:1e:ef:b1:18:30:2c:fd:8b:e6:75:60:b1:e7:
ae:ab:d9:92:43:0a:bd:3e:c6:08:86:52:a8:9d:71:d2:a2:ae:
eb:88:a8:7d:ba:c7:5b:03:be:0b:47:39:3f:55:c7:94:83:d3:
e2:c7:da:35:d4:3e:e4:36:f4:ea:14:36:a1:4a:8e:4a:df:de:
33:9d:d3:e3:87:2b:5e:31:d3:a7:e6:0e:c9:6b:e2:ad:f6:bf:
17:ab:f2:32:89:57:ed:84:c1:b6:54:8f:d4:0c:96:2d:e5:45:
1e:b9:75:a4:ff:dc:db:2c:84:89:20:80:1a:23:12:b8:73:95:
8c:ec:8c:fc:b4:9c:93:4e:51:77:e1:3d:9f:62:ba:80:df:01:
af:7b:24:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:19 2025 by rpki-client