Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e4e8e0c-aa30-30cc-8c5b-4af7d2229d20.roa
File: 2e4e8e0c-aa30-30cc-8c5b-4af7d2229d20.roa (raw, json)
Hash identifier: WQ8SkHIVKSSi8Gp5XP2jOtJn7Wcg4oGTXqpapdGs7lM=
Subject key identifier: E4:58:0A:72:80:13:44:77:F1:DC:DD:D0:D9:0C:7E:10:EC:23:BD:80
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844159D91409E9ADECC219D0C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e4e8e0c-aa30-30cc-8c5b-4af7d2229d20.roa
Signing time: Sat 02 Dec 2023 18:48:35 +0000
ROA not before: Sat 02 Dec 2023 18:48:35 +0000
ROA not after: Fri 01 Mar 2024 18:48:35 +0000
asID: 212238
IP address blocks: 23.26.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:15:9d:91:40:9e:9a:de:cc:21:9d:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 18:48:35 2023 GMT
Not After : Mar 1 18:48:35 2024 GMT
Subject: CN=a9d3a854-670b-4878-8e46-a3877e4046e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:2d:57:56:45:6d:1e:cc:c6:0d:ee:33:5a:
19:30:e2:5b:c9:61:7e:fe:39:cf:c2:84:9b:ba:b5:
6c:0a:d1:3d:dd:1b:8e:d1:cb:d6:83:97:88:da:4f:
ce:e7:c6:a3:b3:56:fc:31:25:a7:a9:06:1e:d9:4b:
29:df:a6:5b:2c:7b:13:d7:cb:1d:c6:b0:18:4f:72:
ec:83:30:66:05:6f:39:64:36:4c:2d:dd:66:c5:db:
fd:fd:3c:e4:da:f2:cb:65:71:5a:93:bf:fe:6c:d0:
41:7b:96:c5:93:2d:ab:9e:8a:17:3b:df:8b:6c:f2:
63:06:3a:e8:f7:22:0d:55:98:96:b3:f5:d5:cd:d0:
a3:3d:ad:5a:13:0b:3b:2e:7f:97:87:7e:19:ed:ee:
cb:60:21:f4:dd:28:07:49:2d:b3:44:4e:fe:6a:32:
f0:3e:0c:41:16:08:f5:00:70:4f:28:04:77:c6:3e:
56:a4:0a:6d:48:56:3a:f6:6a:ca:fd:3c:97:d5:bf:
8e:65:9f:bf:9c:69:cc:e7:3e:fd:fb:93:50:82:93:
81:a6:25:89:94:96:7a:6b:0b:7a:e1:0c:cc:3b:88:
7b:9e:3b:d8:12:0f:8c:f9:43:d8:c5:f9:8a:df:2e:
c4:61:be:8b:8a:43:68:2d:7f:c1:28:a4:8d:6e:75:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:0A:72:80:13:44:77:F1:DC:DD:D0:D9:0C:7E:10:EC:23:BD:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e4e8e0c-aa30-30cc-8c5b-4af7d2229d20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:35:7c:9a:a6:06:26:b9:db:67:0c:2e:af:2b:26:23:f7:a4:
a6:ae:20:49:72:cb:fb:4b:0d:1c:99:22:e4:ef:36:20:6a:fb:
39:ec:55:5e:73:28:93:44:93:c5:3c:23:f1:68:d4:59:0e:8a:
61:fc:ba:c8:3c:8c:e7:65:71:df:c2:5b:63:d5:4d:fe:35:6a:
a3:c6:9c:aa:bb:82:a9:fb:33:5d:14:c4:5a:ba:51:80:6e:04:
d2:cb:46:50:98:79:21:11:be:28:0b:69:9d:d4:d4:eb:b6:54:
51:ef:9c:bd:6e:b1:cc:17:96:39:20:d3:6d:47:42:52:c3:56:
08:22:e1:6b:45:47:fc:53:01:0c:44:ea:cc:39:b4:3f:96:0d:
f4:c8:aa:58:bb:ae:ba:d8:10:e3:ab:ea:68:8f:a5:bd:b9:2d:
67:eb:b5:6c:75:96:db:a1:b6:43:ec:79:50:12:29:15:5d:25:
68:85:15:0b:c8:1f:bd:78:f3:54:c7:f5:82:37:2b:a0:e6:f0:
8d:69:c9:37:2b:bb:84:18:d9:1f:63:d2:72:d4:ce:ab:d6:c7:
42:6a:87:01:7d:94:b0:7a:39:44:05:8a:c7:b8:5b:e1:e6:37:
7b:d7:c7:0b:fb:72:62:8f:ba:bb:3d:49:2e:d0:af:bf:ec:f2:
97:2a:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:55:09 2025 by rpki-client