Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47e0a6eb-9f61-3e10-a182-90b63da14da7.roa
File: 47e0a6eb-9f61-3e10-a182-90b63da14da7.roa (raw, json)
Hash identifier: ju8lfdie+CkagvGOHhHHUr3czMj8Gccu6VROR0KEy8s=
Subject key identifier: 82:D0:D9:6F:73:6F:99:70:41:90:A7:72:6F:C6:17:0D:B3:65:DB:EB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446FFD4F19399AF028F3600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47e0a6eb-9f61-3e10-a182-90b63da14da7.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Tue 08 Aug 2023 19:55:39 +0000
asID: 1018
IP address blocks: 23.26.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:ff:d4:f1:93:99:af:02:8f:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 8 19:55:39 2023 GMT
Subject: CN=fa316445-94ad-4408-b766-f3d538dfba04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:72:a6:a8:4d:2e:cd:5e:05:95:b6:b1:17:
fa:77:e2:b5:8b:f3:3d:e7:72:76:8c:bc:c3:c1:0f:
09:1d:c6:05:4f:98:6f:23:e4:cb:86:f3:01:10:31:
3a:f1:12:13:4c:2f:bd:2f:c3:b9:5c:4d:89:98:7e:
44:86:ad:e0:ae:7c:b6:9c:10:10:47:d0:04:8b:68:
77:57:f4:ad:b7:2f:52:e0:c0:3a:96:3d:b1:21:24:
f5:a5:e3:ab:c7:2d:f5:86:64:c6:ea:84:61:cb:cb:
9c:11:2e:0b:16:c3:24:3d:41:81:40:e3:6c:00:f9:
ef:a9:9a:f6:ed:de:b7:be:2b:ae:a1:e0:f5:25:f3:
0e:24:a2:8d:9a:c9:b8:31:e3:c4:bf:7e:85:01:0f:
01:40:b3:4e:7f:09:68:82:74:23:de:c2:8a:c3:e9:
79:70:d1:8d:b0:74:1c:8a:b8:28:9f:ad:fb:8a:ac:
bf:6b:35:5f:03:7d:1b:50:d9:7e:b8:6f:08:6e:4b:
5e:8b:80:03:ba:fd:2b:16:53:95:83:85:b8:37:10:
d0:60:a4:2b:1f:96:ff:f8:e0:eb:44:f6:44:f4:08:
43:ac:09:e7:a0:a8:79:85:22:da:5c:58:6e:b7:63:
d0:91:13:b8:7d:00:ed:e6:91:52:5d:aa:cf:ab:3e:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D0:D9:6F:73:6F:99:70:41:90:A7:72:6F:C6:17:0D:B3:65:DB:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47e0a6eb-9f61-3e10-a182-90b63da14da7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:a9:95:c8:4f:23:b9:5c:28:73:ae:fd:5e:a6:8e:b5:c8:24:
53:74:c3:69:5b:49:2c:ec:56:98:04:c0:8c:b4:a6:40:26:9f:
0c:43:b6:06:21:c0:4f:50:45:f8:a0:79:da:41:35:0e:ff:67:
74:81:b7:05:49:4d:3b:82:1d:90:c6:e8:19:4a:57:d8:bf:12:
30:4c:85:db:48:d8:44:b6:8a:db:c0:c1:66:dd:66:1e:fa:c8:
9a:ca:f2:80:a9:4d:6a:55:d6:18:59:1c:e5:81:c2:3e:c6:2c:
33:1d:5d:bd:80:b3:fd:6d:35:69:f9:ba:86:ab:a6:4e:87:00:
73:b2:59:b1:70:4c:aa:e8:c7:26:71:3a:59:f1:e4:6d:10:f4:
61:ac:d0:54:64:4f:f7:59:ff:c4:cf:45:a2:53:63:d2:31:7b:
49:55:e8:3c:0c:4e:91:b1:04:31:56:48:ed:ae:69:59:76:57:
6b:c8:27:fc:e6:5e:aa:4f:39:12:b7:92:12:95:f4:1d:5a:da:
e2:72:72:f0:ea:ca:a9:c8:ad:e4:2e:af:e0:50:72:99:57:7a:
69:f7:39:37:35:b8:73:c1:6b:31:a7:de:34:a1:31:53:36:f9:
5d:e5:bd:fb:0f:e8:ff:c8:bb:bb:d2:56:54:3f:7d:7a:b2:1d:
2c:50:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 16:13:36 2025 by rpki-client