Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a85b8bc-9050-3f9f-9e15-b137358738ca.roa
File: 8a85b8bc-9050-3f9f-9e15-b137358738ca.roa (raw, json)
Hash identifier: goifij9GArNGochQHbF7lrflW4AixGksJAdqHEB6tek=
Subject key identifier: C0:7B:0E:FF:70:D6:5A:FD:ED:8C:A2:46:7B:C7:80:30:49:3B:CB:EF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F802A9F1B96F99AD6B5C8C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a85b8bc-9050-3f9f-9e15-b137358738ca.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 51847
IP address blocks: 23.26.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2a:9f:1b:96:f9:9a:d6:b5:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=04d80549-da0d-4932-982c-3866fe64de11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:02:0a:81:d4:2b:49:73:40:71:bb:51:1a:
b3:13:71:68:8c:00:cd:84:a3:f8:f6:73:f1:62:af:
e1:60:06:6e:9b:36:34:5d:7c:f4:9d:85:54:ed:db:
d1:ec:65:47:10:f2:1a:21:8d:fd:ef:74:03:84:27:
5f:b0:73:f5:98:7d:a3:29:0c:fe:4f:f9:0f:a5:bb:
81:39:37:ff:f5:2b:0e:4c:64:37:d6:17:fc:42:ce:
24:ba:8f:6e:85:c3:68:56:c8:e8:bd:64:9d:09:5e:
ee:0d:b2:15:8b:ee:2c:33:9b:7c:b6:32:7e:0b:de:
35:8b:5e:5c:cc:4a:69:59:85:c4:b3:88:2b:4c:7f:
ee:9b:f6:d5:20:9f:f1:e4:01:d5:99:0f:6d:01:dc:
61:c2:c4:01:f9:c1:0f:cf:f9:70:58:50:96:7c:7c:
2f:e7:5b:0d:2e:70:32:03:34:3e:dc:10:9d:5c:50:
92:06:46:c1:7d:5c:20:e8:60:d2:34:c2:70:4f:80:
09:c8:14:20:15:fe:22:e4:e0:0a:c4:06:45:75:75:
93:50:e6:fd:d3:3f:1c:65:f0:c2:7b:f2:8d:04:28:
0b:89:0d:06:fb:a5:e8:6f:a4:2b:a6:82:84:fc:7a:
02:e5:cd:e5:ef:5c:88:0f:22:28:e9:5c:59:97:b7:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7B:0E:FF:70:D6:5A:FD:ED:8C:A2:46:7B:C7:80:30:49:3B:CB:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a85b8bc-9050-3f9f-9e15-b137358738ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:02:11:99:8a:22:be:ac:4d:80:c8:38:ed:dc:51:42:bb:d4:
b0:32:7b:32:5f:58:38:0d:a5:de:d8:e6:28:9e:7e:55:fe:6c:
ec:05:ed:c3:d2:bf:5a:ba:79:eb:54:78:28:cd:b5:d6:04:49:
0b:fd:aa:10:4b:6a:6f:de:60:6c:5e:54:5c:c8:42:f4:64:28:
fa:e6:7c:22:f7:41:e9:c1:cd:a2:c5:51:1e:f3:d1:1c:1b:f1:
f4:be:19:ff:5f:84:a7:0f:34:98:a4:b7:04:92:58:a8:19:83:
29:72:3f:60:29:95:c2:be:ab:b2:f5:e5:9d:28:8a:84:7c:7d:
d3:2b:3d:46:89:ef:51:88:5c:0b:bf:84:6e:f1:62:2d:54:07:
d8:6a:b8:30:c8:93:60:ef:39:fb:f4:23:35:91:3d:54:f2:c3:
2c:fd:6c:56:88:1d:b9:82:6e:99:f5:f9:10:c1:c7:56:9d:c8:
9d:e0:5b:4b:78:6e:d4:a1:10:66:7d:1e:e7:18:58:ce:61:13:
8c:1a:17:e4:3b:3a:ab:d3:07:0b:bc:60:2c:e0:1e:51:c6:c5:
e4:fa:e2:62:d0:7e:3d:97:c3:a7:f7:69:80:2b:37:bf:4a:7a:
63:df:de:ed:e0:6e:80:26:b5:ce:2a:e9:4a:17:4a:c1:19:fe:
af:c7:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:36 2025 by rpki-client