Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cc73131-1349-3ab6-a9dd-c13ae8aaf062.roa
File: 3cc73131-1349-3ab6-a9dd-c13ae8aaf062.roa (raw, json)
Hash identifier: oAXEIqugRb4M5OhKcyOaZ4l8SsnyfA0s1WYmb+AFXlY=
Subject key identifier: A8:96:97:B2:B3:59:A4:8A:20:96:A5:DC:B8:05:A6:68:D5:36:96:0F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584620644B8B7F3AF9AA666D3300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cc73131-1349-3ab6-a9dd-c13ae8aaf062.roa
Signing time: Fri 07 Jun 2024 01:00:24 +0000
ROA not before: Fri 07 Jun 2024 01:00:24 +0000
ROA not after: Thu 05 Sep 2024 01:00:24 +0000
asID: 396026
IP address blocks: 23.26.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:20:64:4b:8b:7f:3a:f9:aa:66:6d:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 7 01:00:24 2024 GMT
Not After : Sep 5 01:00:24 2024 GMT
Subject: CN=16dbef84-db59-48d7-b8ba-1785332572de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:86:00:16:9d:1b:32:9d:3f:b4:94:2c:6b:
43:a8:2e:dd:2d:76:ff:e8:c2:47:72:a3:f7:92:f8:
95:cb:7d:ba:49:dc:9b:bb:ba:98:59:c1:42:29:27:
b5:e1:a8:b6:93:ad:84:20:7b:78:f3:fe:c4:3a:fc:
7d:97:b0:b4:a4:71:3d:87:8f:33:85:00:c1:e5:aa:
56:bc:e3:b7:c1:d1:64:1e:dc:29:ca:af:25:52:60:
f3:00:71:c9:96:fd:da:24:86:dd:11:5f:df:76:f8:
bb:64:df:7f:11:32:7f:db:d5:93:06:4b:20:3a:8f:
49:f8:f0:77:ce:e1:ec:8e:09:6d:31:fb:2f:a7:05:
13:a8:0c:87:b6:fa:cd:6e:ec:4e:cf:e1:e2:a1:1f:
20:b9:44:04:cf:2e:84:89:a2:a4:bf:79:aa:aa:78:
c9:db:2d:0e:b5:93:e9:fc:c8:6b:61:da:b7:cf:cf:
d5:bb:20:fb:9f:84:9d:9e:2a:c8:52:15:3e:99:36:
da:ae:19:e3:c4:40:0e:23:2b:ae:7a:d1:85:12:db:
bf:e4:5f:1b:41:fe:e6:47:fc:de:ff:9d:3d:ec:a7:
f3:2d:e3:48:c7:79:34:cf:bc:aa:83:ec:fe:66:d5:
32:b7:b7:1e:ae:94:e4:c0:dc:46:2b:a8:9d:fc:41:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:97:B2:B3:59:A4:8A:20:96:A5:DC:B8:05:A6:68:D5:36:96:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cc73131-1349-3ab6-a9dd-c13ae8aaf062.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:06:51:f2:c8:d2:b0:f3:57:54:5d:fa:48:ec:80:57:28:73:
95:35:de:cf:f6:16:c6:a4:81:59:55:22:6d:5e:47:e0:8b:c0:
3b:e0:48:68:0f:9a:1f:a1:94:9c:c1:6a:27:90:7e:89:78:1b:
f0:cd:43:1f:d3:f8:8b:d6:92:e2:07:e0:e6:7f:59:a4:00:59:
77:32:ad:0a:12:0f:46:a4:5b:00:33:80:85:d0:81:92:4a:3b:
99:6d:51:d9:6c:b9:eb:ba:f7:86:90:b0:06:cc:d2:48:29:e4:
dd:e4:b2:0b:f6:0c:6a:0f:5b:96:8c:ab:00:d6:32:8b:04:14:
9a:55:60:da:d5:5d:d2:49:59:7f:36:02:f0:1b:d6:b2:f1:da:
39:99:8b:a8:aa:12:b9:2b:22:ea:c1:bb:22:26:c6:51:ed:4c:
01:c5:39:d3:5e:2b:21:4d:72:f2:5b:e0:2a:cb:49:27:be:dc:
14:3a:8b:31:6e:0e:9e:0c:c4:92:f2:59:68:5c:08:56:d6:bc:
80:66:65:42:e4:20:60:af:b3:6b:5a:01:39:92:91:ac:4b:e7:
74:dc:62:39:1a:b6:99:0f:fd:58:7f:28:3b:08:3c:80:9b:d0:
4c:bb:ee:ae:95:74:a6:52:4e:0d:95:f9:90:d8:1a:ec:cc:76:
df:63:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 16:03:20 2025 by rpki-client