Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/713771d4-bd67-3dd2-bd4f-20cf72ab1365.roa
File: 713771d4-bd67-3dd2-bd4f-20cf72ab1365.roa (raw, json)
Hash identifier: iicK5BwOHrrNJoS72iuDkBZs0dSv6AIvrVv0dnyT6og=
Subject key identifier: D5:20:63:16:17:C4:FA:4F:0E:6A:79:48:37:60:E5:34:50:96:79:6B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847DF2F5703687EDC1A70A6FB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/713771d4-bd67-3dd2-bd4f-20cf72ab1365.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 32514
IP address blocks: 23.26.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:57:03:68:7e:dc:1a:70:a6:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=70d3f1b8-f0db-4756-b8b4-3d3e9fce542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:b8:65:5a:19:03:df:b0:57:3f:c7:17:a0:
5e:d7:70:a5:fb:c4:2b:9a:22:f2:e2:ae:2a:da:dc:
4d:64:1a:2c:8e:ff:25:c7:a0:49:3a:ba:33:a7:d7:
c0:08:40:b9:8e:e7:f3:c5:73:8e:a6:9c:ad:d8:71:
ec:73:db:eb:b4:83:04:48:ed:fd:00:f7:1c:9d:f2:
9f:68:dc:2b:46:94:98:fd:a0:28:f1:c4:9a:50:81:
7b:1d:57:91:97:62:bd:ab:f3:27:5a:8c:88:c3:58:
a8:42:5b:6a:8a:cf:f2:65:c4:dd:cc:31:6b:41:02:
9d:6a:80:cb:75:8f:56:17:8f:f1:29:18:b3:ae:26:
89:5f:fd:71:f5:d1:da:83:fe:ec:c8:8a:46:0b:32:
12:94:3f:b4:11:c5:53:4d:b2:da:38:7d:42:ab:65:
6d:9e:10:82:c0:c6:61:14:5a:a1:48:fb:b9:3a:06:
9d:87:42:9a:49:ca:43:44:27:ec:82:e0:c9:06:88:
62:af:b7:9c:16:2a:cd:39:7a:3a:3f:2e:f1:e6:ea:
d3:5c:6e:62:cc:3b:e9:81:e3:b6:dd:ae:7b:57:e8:
c5:3f:c6:31:42:a6:b5:2b:89:ca:4c:39:af:1e:0f:
e1:b0:76:77:8e:f2:61:b9:34:3a:f3:a8:8f:00:dc:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:20:63:16:17:C4:FA:4F:0E:6A:79:48:37:60:E5:34:50:96:79:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/713771d4-bd67-3dd2-bd4f-20cf72ab1365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:2b:27:e5:23:4b:78:30:94:53:30:f7:76:b4:9c:6c:bc:03:
0e:f1:54:42:fc:9f:9f:d8:06:53:22:e7:d5:ba:71:09:3e:6c:
59:de:03:42:25:ab:42:eb:fe:6b:e6:95:d5:71:84:3d:6d:2c:
e3:86:d0:81:22:5a:d1:50:46:c1:7c:ee:90:3b:27:76:62:0b:
34:6e:05:e7:3f:70:23:90:a1:91:a1:ef:ca:85:33:8c:0c:66:
5e:47:66:26:64:b0:0e:4c:5e:fc:61:d0:3e:c1:10:eb:63:cf:
fc:39:37:04:21:73:0c:0e:8b:72:89:3f:00:28:1b:a0:bb:dd:
a0:1e:3e:a3:f1:77:86:fd:4c:c0:52:ae:55:3d:fc:7b:55:85:
c9:8e:25:e4:8e:22:47:31:e5:c7:44:9a:25:3a:fa:0f:92:60:
ce:38:2d:09:32:a4:11:f7:42:d2:b6:41:43:99:95:28:19:50:
e3:54:91:60:49:b1:11:b0:08:fb:82:50:f9:57:c7:04:c4:dc:
80:24:59:b1:c6:f0:a4:30:07:19:4c:1d:b3:b1:93:38:4f:9d:
cf:b9:23:45:cc:39:55:ab:76:ed:37:47:ec:5d:88:6e:8e:64:
7e:3a:d0:90:ee:43:5e:35:e0:32:c8:9e:d3:fd:ae:c6:a4:37:
92:da:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:27 2025 by rpki-client