Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b15de7d3-79a0-3eac-be57-2c05bc71683e.roa
File: b15de7d3-79a0-3eac-be57-2c05bc71683e.roa (raw, json)
Hash identifier: 91sqQGIV1/6HDsvpwmAb1VO85RW0FqAIeZx271LRWoI=
Subject key identifier: 8B:0B:FA:72:CB:F8:4B:45:1D:2C:48:EF:F0:A0:31:8E:40:07:38:B3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489340B414653CB693BCE26F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b15de7d3-79a0-3eac-be57-2c05bc71683e.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 142111
IP address blocks: 23.26.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b4:14:65:3c:b6:93:bc:e2:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=34e44c9d-ef57-42d4-ae97-705d05c7dc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:5c:f8:e8:97:5c:72:2b:d2:6e:54:31:c4:
e8:c5:b2:03:67:41:f3:cf:97:4c:f7:ee:81:87:34:
8f:bd:c1:c4:3c:a3:f0:86:1d:bd:ef:a1:df:f8:ac:
b4:e8:e6:9f:c5:28:56:6d:83:3a:70:b9:fd:64:6b:
53:be:9e:74:04:7e:6b:8e:e8:df:27:c2:4d:ff:a7:
cd:86:46:f0:75:41:d1:57:21:73:7d:72:c1:6f:25:
95:25:95:f5:da:16:52:a1:d8:e6:2e:65:98:24:dc:
f8:cf:e4:31:02:60:67:be:98:6a:ab:21:03:7a:57:
97:e6:58:dc:98:8e:df:63:1e:2a:47:b1:bd:5a:fa:
32:f1:79:84:57:e2:26:23:fd:6d:f7:9d:40:11:9d:
26:bf:24:bb:7c:1a:73:66:bf:c9:ce:e4:0b:92:ef:
8c:28:2d:a4:19:e9:ac:f1:91:44:3c:13:0d:94:cc:
25:a5:f1:9b:cd:55:50:37:24:ab:ab:e9:8b:a4:b9:
88:b4:02:f8:77:99:fd:91:ae:f6:a6:71:da:3f:ec:
81:f9:9c:8a:cb:95:24:63:14:2a:ce:6e:af:05:63:
47:a0:41:22:77:be:fa:d2:74:28:91:bd:89:73:98:
a1:e2:49:bb:61:fa:ce:91:62:cd:80:a6:aa:69:68:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:FA:72:CB:F8:4B:45:1D:2C:48:EF:F0:A0:31:8E:40:07:38:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b15de7d3-79a0-3eac-be57-2c05bc71683e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:e7:01:c8:79:08:39:6f:74:bd:2a:a6:0a:4b:fe:e2:69:54:
4e:b0:3a:a5:dd:88:e8:3f:24:15:56:4b:17:29:fb:bf:9a:87:
c0:3c:a4:50:77:b7:c9:0b:29:46:73:90:72:6c:a8:8e:6f:d4:
a6:eb:98:54:bf:1a:e6:aa:d9:78:83:6d:6b:fa:34:6f:6e:65:
30:6e:62:4b:63:2c:58:22:bb:ad:aa:7a:8d:d1:e3:1d:02:f0:
fc:b5:43:e3:99:d2:7e:68:71:cd:d4:52:23:a4:c3:4f:b9:8a:
59:50:9f:8d:a7:c0:16:35:e7:85:00:64:35:47:4f:50:f3:d6:
64:5e:b5:91:f5:11:bc:9c:a7:61:f9:7e:24:5f:95:a8:21:99:
d5:30:17:7b:5f:ab:94:f1:96:6a:c8:8d:3b:16:a4:97:97:a7:
0a:f4:b0:9f:79:3b:8f:db:2d:00:b9:52:0a:80:c1:48:18:4d:
00:ba:7b:70:c2:46:40:c7:86:58:e6:ba:b5:27:50:eb:f6:bd:
56:13:67:9a:eb:e2:9d:c1:ff:8c:57:34:aa:79:5f:ab:aa:8d:
63:8c:33:39:34:ed:07:bf:3b:61:e3:dd:20:e5:29:78:17:01:
53:84:31:2b:47:b2:3c:82:9c:50:99:4c:34:46:3a:f2:fa:a1:
f1:2d:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:06:20 2025 by rpki-client