Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96c81860-b9a0-3f6d-95f7-c396780369d9.roa
File: 96c81860-b9a0-3f6d-95f7-c396780369d9.roa (raw, json)
Hash identifier: cKNnPMgL8KgIO7eTV5jyRPDZ6j0QvLADmI2G00iGsvM=
Subject key identifier: 8F:78:7D:2B:FE:0C:42:45:2B:F4:6E:23:70:95:89:1A:C9:64:D4:16
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A60CEF5AA961919E4DB50
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96c81860-b9a0-3f6d-95f7-c396780369d9.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 212238
IP address blocks: 23.26.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:60:ce:f5:aa:96:19:19:e4:db:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=f545a5fd-1c17-464b-accb-36a68c0f4afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7d:3f:e8:10:88:9c:54:86:7a:0a:16:db:d6:
e2:4f:6d:62:05:27:8b:2c:c3:2b:3c:60:ad:4d:1c:
8b:42:57:9f:50:60:f3:e7:8b:9f:16:d4:db:0b:41:
be:61:c3:7c:59:45:8d:4a:66:04:64:4c:e2:03:60:
8f:12:84:c9:38:05:26:49:9a:bc:77:23:d9:00:ba:
e8:5d:ad:2f:81:76:5c:48:2d:f6:32:e4:44:82:32:
7b:51:1d:f8:6c:1b:ee:60:62:82:69:0b:f6:80:ec:
b9:11:6e:38:32:28:7d:35:d7:89:7f:0f:82:2e:4a:
ab:56:57:62:4e:27:06:25:9a:9c:eb:c7:fe:0c:ea:
9a:bc:14:7b:40:65:bd:05:e1:d2:83:c9:d6:91:f3:
30:92:6b:a4:20:77:7c:47:61:99:0b:f4:19:78:c5:
02:96:e1:ef:4f:78:58:40:1e:dc:3d:f3:1d:c7:47:
25:c1:b9:48:2e:9e:0e:5f:7a:05:48:dd:05:ad:aa:
88:b6:ba:02:3c:f6:5f:dd:c3:aa:14:f3:17:45:fd:
5f:ad:fa:ef:68:fe:83:4c:5b:89:69:83:4e:03:1c:
20:8e:98:6f:3f:aa:c3:55:21:d3:8e:1b:ce:2e:92:
f7:46:b5:51:8b:4e:98:41:a1:79:f1:0d:61:5d:ef:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:78:7D:2B:FE:0C:42:45:2B:F4:6E:23:70:95:89:1A:C9:64:D4:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96c81860-b9a0-3f6d-95f7-c396780369d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:fa:27:e4:f9:f1:8d:3e:74:26:9b:f6:28:bb:45:1f:57:c7:
8d:6d:17:48:4b:f3:f9:00:2d:0d:d0:b0:d0:62:45:26:fb:5f:
93:99:a9:5f:da:59:29:66:e5:9d:f2:10:e6:f4:ca:98:f3:84:
af:9b:a3:93:23:71:43:1d:20:d1:b2:0f:e5:f6:4d:67:bc:ee:
1c:a0:12:b9:b1:fd:d5:aa:66:8c:17:3c:e8:3f:37:e8:93:95:
1c:2e:1b:e4:01:48:a5:2e:dd:24:ff:01:3b:de:b2:ce:bf:be:
c1:17:12:b2:d3:4d:84:08:ce:7a:54:2f:9d:f7:bf:57:53:08:
2b:37:05:81:b4:4f:72:f7:bf:12:09:91:c8:60:84:72:1d:d4:
c4:ff:8d:c2:1f:8d:0b:23:87:68:84:bb:ac:a6:4c:b5:2f:c9:
be:8b:75:10:d6:5f:a7:5d:7a:93:0b:75:de:6e:44:fc:97:cd:
9d:ef:c3:10:c7:8a:6c:79:4f:33:09:b8:27:07:ad:c4:37:1f:
3c:27:96:ab:fe:dc:9b:e3:58:20:9e:93:99:33:f0:6a:b4:71:
f7:df:e5:68:0f:4e:2e:b1:4c:da:36:f7:4e:cf:18:07:4d:a8:
9b:d0:d3:f3:b1:00:0c:be:66:4c:61:b4:39:4a:c0:22:a3:e0:
a4:f0:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:25:47 2025 by rpki-client