Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9adad445-531b-3d12-8a5d-8e5c6949db2d.roa
File: 9adad445-531b-3d12-8a5d-8e5c6949db2d.roa (raw, json)
Hash identifier: l4GjxFXU4O1rGUGR5lemJc4Q4NMd/LgEPBadaaiSvDE=
Subject key identifier: 4D:98:3B:41:E7:E9:90:E6:AD:D1:40:80:0D:E0:3C:DC:06:2B:BD:D7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584500F56056A2838321EE3CBA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9adad445-531b-3d12-8a5d-8e5c6949db2d.roa
Signing time: Sun 25 Feb 2024 02:00:26 +0000
ROA not before: Sun 25 Feb 2024 02:00:26 +0000
ROA not after: Sat 25 May 2024 01:00:26 +0000
asID: 59895
IP address blocks: 23.26.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:00:f5:60:56:a2:83:83:21:ee:3c:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 25 02:00:26 2024 GMT
Not After : May 25 01:00:26 2024 GMT
Subject: CN=3a31d849-c902-41cb-8607-7c431d6f4c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:ea:ee:00:aa:89:18:35:06:94:99:33:ba:
09:11:3c:9d:90:e7:6b:fa:2f:59:c2:bc:d7:10:f1:
d5:b5:f5:93:56:c6:cf:f7:26:c9:86:d9:a8:99:c6:
3d:7a:22:1c:e1:9d:52:10:f7:74:3b:f2:21:f5:94:
9b:44:92:d5:0b:b7:fc:05:ca:a4:e5:fc:81:df:db:
27:ab:7a:df:3a:3b:4e:b8:a8:15:1e:26:fd:5c:9b:
2d:b5:03:13:b1:24:54:8b:a3:de:c9:35:41:00:91:
0b:f6:37:cc:5c:74:17:61:26:b5:84:88:74:cb:5c:
5d:18:b5:70:03:95:cb:fa:04:20:0e:ed:00:88:28:
ca:d8:10:5f:d4:36:6a:8a:64:a2:8e:64:af:12:ab:
cb:fc:28:4e:d1:f3:51:f7:37:a0:77:47:ef:48:9a:
dd:f1:6c:0f:98:63:c3:f9:c9:cf:98:e7:ff:5a:2f:
c7:7f:0e:19:6e:d4:94:31:4f:45:4b:5e:d0:ab:f6:
9b:a3:73:29:80:98:7c:18:8c:d0:87:8c:3c:08:2d:
f5:07:61:3b:42:64:cd:1d:d8:48:23:4e:6f:80:84:
da:32:2d:a1:da:2b:03:5b:85:58:8e:e2:1c:c2:36:
78:5d:ea:72:5a:8f:64:e0:3c:ed:c8:51:ab:83:fd:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:98:3B:41:E7:E9:90:E6:AD:D1:40:80:0D:E0:3C:DC:06:2B:BD:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9adad445-531b-3d12-8a5d-8e5c6949db2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:35:31:54:31:a4:5b:91:7e:51:63:20:3e:11:d8:e9:ed:4a:
20:8b:0a:1b:7d:a7:3e:e4:30:0b:80:5d:02:65:0c:f7:b9:51:
1b:ee:e6:d8:04:e3:31:d0:0a:5a:66:30:e7:b9:11:55:62:9f:
09:cf:52:5d:0a:09:7f:5f:98:75:fe:3c:ab:47:46:86:50:4c:
95:8a:e5:e6:b3:b5:b8:d7:e5:3c:99:06:72:3b:67:f1:e5:9f:
1f:e1:9c:6a:f6:6d:25:17:9e:2a:ad:7e:bf:e3:8c:41:ce:e4:
80:b2:00:0d:17:bc:c3:05:f0:58:de:09:62:82:e8:88:2a:83:
76:d5:ce:63:85:90:9c:b1:c5:ec:2c:ed:9d:77:de:af:87:3d:
5d:d6:65:d2:ab:53:e6:a7:bb:df:7b:23:65:55:14:dd:29:e5:
74:83:0e:c5:fb:ea:4f:1b:72:1e:28:00:c6:00:08:52:c5:a4:
10:6f:b9:35:67:15:06:b4:dd:48:c2:9e:72:12:25:92:0e:32:
7a:e8:0f:f0:d6:e1:73:76:ed:c9:9c:b3:05:e8:db:26:e0:b7:
4c:91:e7:f9:53:14:b4:91:ab:4b:c1:b1:43:42:af:61:1d:aa:
94:e0:42:7b:41:c6:88:ec:a1:4e:35:0d:71:32:20:47:8e:a3:
9e:b4:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 21 23:18:53 2025 by rpki-client