Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2ee72a0-bdde-3e06-92a7-cc5e64251573.roa
File: b2ee72a0-bdde-3e06-92a7-cc5e64251573.roa (raw, json)
Hash identifier: rTeNXFmN6wCJNXtPEj3gz/90oukB9H21w3Jj5mL10ro=
Subject key identifier: 99:02:7C:28:66:69:4A:CE:DB:D7:22:44:30:BA:0C:92:04:95:8F:CC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858432BD4A2EE82D4819CCB07BC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2ee72a0-bdde-3e06-92a7-cc5e64251573.roa
Signing time: Sun 10 Sep 2023 01:00:22 +0000
ROA not before: Sun 10 Sep 2023 01:00:22 +0000
ROA not after: Sat 09 Dec 2023 02:00:22 +0000
asID: 1239
IP address blocks: 23.26.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:2b:d4:a2:ee:82:d4:81:9c:cb:07:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 10 01:00:22 2023 GMT
Not After : Dec 9 02:00:22 2023 GMT
Subject: CN=f0429014-7c1f-4002-9ba1-aad11a4adeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:9d:de:df:36:f8:8a:ed:a7:22:d6:d9:0a:
64:41:12:df:fe:ac:2b:f5:7f:9d:9a:26:0e:8c:af:
37:75:09:32:d3:d8:ef:54:e2:54:79:bf:eb:57:0d:
76:7b:f6:00:c3:e6:1a:b2:3d:72:d4:9d:be:18:00:
d4:59:82:1a:39:5c:ec:7e:e3:b2:14:91:f8:80:66:
cb:34:99:6f:8c:8e:82:cd:76:18:fc:ab:8d:f0:a4:
d7:7f:36:ad:af:8b:2a:a2:5f:de:a9:c8:29:52:38:
a2:24:bc:a7:f8:43:54:46:84:54:93:a1:12:ee:62:
8d:71:38:eb:ee:3c:b5:87:3e:1d:68:79:b8:ff:1c:
92:cc:52:0f:c5:61:10:25:38:fb:d3:67:1c:8b:ec:
ee:d4:a5:1d:98:a7:4e:b4:33:a1:3e:c7:45:bd:3a:
84:aa:18:b0:e4:66:76:2c:ac:71:2d:02:ee:65:ac:
ff:92:bd:c9:7b:f9:a7:30:ce:7b:00:7a:11:53:77:
1e:a9:af:18:42:10:96:b1:00:ea:18:fd:69:b9:1a:
b7:30:eb:44:df:d3:72:ad:76:66:86:9a:34:2d:49:
17:50:58:01:1c:44:1a:f7:05:1a:d2:13:aa:66:19:
35:b9:e5:64:cc:fa:08:e6:dc:b4:88:30:7b:2f:52:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:7C:28:66:69:4A:CE:DB:D7:22:44:30:BA:0C:92:04:95:8F:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2ee72a0-bdde-3e06-92a7-cc5e64251573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:81:c1:43:3e:6c:f9:30:89:aa:5f:50:7c:e4:e2:cd:29:f9:
89:bc:85:57:72:ba:87:17:04:2f:32:4f:80:09:5b:7e:c2:6a:
e5:b4:02:0f:6f:81:8e:e4:e9:77:8a:15:12:52:95:dc:a6:8f:
dd:22:0b:3f:dd:e5:8c:93:c5:fc:67:e5:01:f0:79:28:75:90:
79:c3:c4:42:8e:72:35:b3:28:a9:67:6f:d1:38:d5:46:63:25:
ff:2c:72:7a:a9:49:0e:b5:4f:49:40:13:3f:eb:0b:d0:67:9f:
92:e4:e9:73:43:a4:f9:59:39:63:c0:a1:e0:5a:71:42:d9:9e:
1e:36:11:23:9b:25:13:00:25:06:54:be:81:c0:a4:7f:8d:77:
aa:9f:b6:67:31:31:28:e6:eb:ca:03:2e:85:ee:45:13:55:7f:
c5:97:a9:08:88:f8:26:83:d2:48:14:85:58:3e:47:6b:9c:9c:
17:38:7a:ec:ca:e6:1e:0a:c0:a9:1e:4b:e9:1b:a4:f8:56:34:
9c:29:fc:4b:7d:1f:1e:30:e9:fc:4d:4b:8a:cb:53:d9:7c:74:
ee:e1:52:97:00:5a:b0:c0:9d:0b:a3:89:83:50:19:2b:bb:d8:
95:97:7b:af:5f:92:f8:62:ce:7a:e8:17:9d:0d:6f:80:a7:f9:
a1:b3:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 22 00:26:57 2025 by rpki-client