Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ccc28e9-baa8-3f4a-afdf-10e7b2519e98.roa
File: 7ccc28e9-baa8-3f4a-afdf-10e7b2519e98.roa (raw, json)
Hash identifier: MxX+HgN34Pot0qs4KQGggBUaJi/Ol+s3WaKslK5Kvlk=
Subject key identifier: 82:53:8A:79:FB:94:F3:3A:25:0B:67:BD:D1:FF:AD:59:18:06:9D:6F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847213B0C19467077C4D15FD440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ccc28e9-baa8-3f4a-afdf-10e7b2519e98.roa
Signing time: Sat 07 Sep 2024 01:00:31 +0000
ROA not before: Sat 07 Sep 2024 01:00:31 +0000
ROA not after: Fri 06 Dec 2024 02:00:31 +0000
asID: 397423
IP address blocks: 23.26.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:21:3b:0c:19:46:70:77:c4:d1:5f:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 7 01:00:31 2024 GMT
Not After : Dec 6 02:00:31 2024 GMT
Subject: CN=6b848d92-e798-4a13-befd-11e0527afdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:1b:4c:e7:0f:7d:66:ee:5b:1d:0c:98:4c:
6d:37:d4:29:52:c1:94:a8:7b:95:c5:fe:8b:dc:fd:
92:57:9d:f5:a7:c1:3c:eb:f1:88:7f:c1:c4:50:e9:
d4:bc:75:87:e5:40:c2:84:2d:0f:87:c4:24:29:9a:
a6:b7:f6:31:1e:e9:43:b4:09:62:a0:20:dc:9e:db:
65:d2:b9:5a:5b:75:23:69:34:b1:e2:6e:9b:4f:4f:
60:56:e5:9f:0c:ed:51:b3:20:75:a4:63:33:48:e0:
8c:fc:e8:1a:7d:c8:9b:8b:66:41:ba:b2:01:70:f0:
ff:ad:0c:e2:d1:bd:25:96:e4:9e:6e:62:7a:f4:b0:
43:48:41:39:03:6d:45:f7:46:d6:0d:a1:9f:d2:5f:
79:5c:d5:f9:1a:4c:b7:2a:19:bd:d8:d0:3d:a7:67:
ea:98:3e:1a:a8:34:ca:35:33:b0:4f:a1:cf:7a:5d:
18:94:be:37:e5:9b:87:d5:9f:58:13:bd:8b:0a:25:
8f:b5:ac:7a:5d:45:df:bf:61:01:2e:cc:bc:32:4c:
e3:04:be:f9:83:fb:41:7e:64:6b:27:9b:dc:e6:8a:
90:5a:b5:54:1b:67:65:c6:66:01:46:10:2b:21:8c:
91:6b:42:63:59:ac:46:36:de:cc:8b:2e:b8:df:54:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:53:8A:79:FB:94:F3:3A:25:0B:67:BD:D1:FF:AD:59:18:06:9D:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ccc28e9-baa8-3f4a-afdf-10e7b2519e98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:a4:68:ec:af:14:7b:ab:fa:0a:6b:59:d8:5d:d2:aa:85:66:
5e:43:40:73:96:9f:b3:ef:ea:a1:4f:ec:ff:a9:04:67:ca:0e:
3e:1f:5b:ce:b2:24:98:45:6e:7e:ac:a6:e9:68:af:a4:46:31:
65:ae:75:52:33:2e:9d:4a:a1:d8:2e:12:3f:39:ff:44:9f:b3:
9d:51:07:da:56:40:49:99:62:51:b5:dc:52:be:99:b2:cb:da:
8d:ec:d2:b3:a1:17:a9:49:0b:03:99:df:e6:da:98:36:b0:6a:
ed:93:84:c8:ea:d9:53:a4:66:39:35:41:74:76:93:6d:54:fc:
ff:88:e9:70:2e:3c:9f:43:ed:02:ce:20:f1:9d:0b:8a:42:fb:
13:53:4b:c4:de:0e:a2:86:5f:9e:e0:ed:69:60:b8:8f:9e:d8:
c8:27:b1:1d:9e:f1:15:61:1d:ba:22:09:58:49:e2:52:ea:8e:
d4:77:68:05:85:06:dd:97:f3:33:0a:c9:93:08:8a:6b:5f:53:
70:08:38:df:0e:3c:f0:98:84:d9:dc:37:f8:27:7d:30:28:37:
12:e2:af:28:2b:cf:fe:20:38:e1:4e:ff:ac:4d:8a:cf:3e:4d:
55:cd:79:c7:52:e0:31:fd:fc:b6:32:60:97:d4:8b:59:53:c4:
d1:9a:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:57:17 2025 by rpki-client