Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/554b1bf6-ade8-346b-9d75-5d73ac05552e.roa
File: 554b1bf6-ade8-346b-9d75-5d73ac05552e.roa (raw, json)
Hash identifier: zPg6MQpySQj/yhxNzC5oTd/3swoFrBI+okvYG2OHcWc=
Subject key identifier: CC:9A:DF:A4:C3:D0:0D:0F:F3:DF:62:64:94:8E:86:06:9F:CD:B9:70
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845F7E93E058583CD3D68ACCCB8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/554b1bf6-ade8-346b-9d75-5d73ac05552e.roa
Signing time: Thu 23 May 2024 13:00:34 +0000
ROA not before: Thu 23 May 2024 13:00:34 +0000
ROA not after: Wed 21 Aug 2024 13:00:34 +0000
asID: 6939
IP address blocks: 23.26.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f7:e9:3e:05:85:83:cd:3d:68:ac:cc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 23 13:00:34 2024 GMT
Not After : Aug 21 13:00:34 2024 GMT
Subject: CN=423a9767-1f34-4e05-99d3-cc38eaa837f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:48:58:ae:3b:58:65:93:46:52:2f:c2:ee:
14:5d:6c:a1:c4:8f:59:5c:61:6e:7b:aa:1f:5a:e0:
61:33:97:0a:ed:2d:d5:30:74:46:b4:31:22:9d:94:
d3:9a:c1:ae:d4:9c:a5:ce:06:35:99:bb:7d:bc:51:
c6:6d:8f:5d:18:9a:22:62:68:f2:6c:3b:f9:08:7b:
a5:e1:59:d8:0c:91:82:73:55:db:da:74:89:0f:12:
25:dc:65:e9:a9:2a:c7:6f:70:85:0a:42:63:92:29:
f2:20:b2:a8:34:ca:15:2c:15:14:0b:39:8e:7e:d9:
a8:72:3b:8e:d0:86:75:cb:1b:9e:58:cf:22:cb:83:
b2:c6:fd:e8:5b:0c:7d:9f:7e:7c:2c:94:00:6c:04:
a9:35:3b:07:f5:b7:be:1e:2e:2d:68:50:dd:3c:e4:
5b:89:5f:ab:fb:92:1e:ff:b8:cf:84:33:af:c5:a9:
11:48:79:d9:80:7b:53:ef:2e:d6:3f:29:db:6c:79:
0e:24:93:ed:6d:e1:cc:b9:59:9c:80:62:72:df:5f:
37:21:f7:c4:78:f1:a9:bc:cc:e1:ac:31:b1:81:dd:
d1:37:2d:c6:5a:0b:f6:b9:aa:e4:b5:e2:04:45:24:
fb:19:e0:58:67:47:23:92:40:d1:56:64:aa:ea:af:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9A:DF:A4:C3:D0:0D:0F:F3:DF:62:64:94:8E:86:06:9F:CD:B9:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/554b1bf6-ade8-346b-9d75-5d73ac05552e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:93:ab:fe:cd:d6:2f:e8:9e:9f:6b:22:83:2d:a1:a6:57:bc:
34:cb:e9:c3:67:3e:57:a4:5f:51:2e:49:72:2f:f7:0f:ae:89:
2c:73:11:54:40:03:9b:ee:3e:e7:59:d6:57:b7:be:27:e0:cc:
b6:a7:b5:1a:6f:b4:d0:3c:8d:32:fd:77:25:6b:cd:91:68:fe:
00:6f:e9:67:7b:5b:60:a3:f6:1c:5d:fd:c3:29:80:f4:7c:4b:
eb:d5:e5:1b:3a:28:0b:6c:13:c0:c1:20:a5:07:f9:67:84:29:
83:a9:2a:f6:6a:f3:a0:c5:5e:b6:bf:61:fb:7d:b7:dc:26:24:
6f:fc:a4:be:29:0a:0a:06:28:e4:ec:c9:2b:1e:ca:ae:50:6c:
29:63:d1:9e:f4:09:db:8a:96:97:10:34:8d:c4:77:35:2d:dc:
44:fa:52:f6:65:fb:6c:50:1e:74:4f:ea:06:a1:d4:c3:61:3a:
34:4b:ee:11:55:cd:9b:1e:cb:b1:64:64:2e:51:32:24:d7:d1:
ee:8a:bc:ae:7f:78:bb:7a:0c:4f:98:58:00:c2:32:20:4d:cf:
a3:f1:28:3a:f0:69:50:e2:d2:e9:22:74:57:37:e9:da:fa:80:
e8:c3:db:36:3d:52:22:42:83:cd:dd:6d:eb:93:0b:d8:f2:24:
32:f1:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:56:11 2025 by rpki-client