Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5382973-9d9e-328c-a5c7-e5db9390a425.roa
File: b5382973-9d9e-328c-a5c7-e5db9390a425.roa (raw, json)
Hash identifier: +G07h67d3JmJFru1jpCF00M3zaWY/iDLqBvbKrMMCN4=
Subject key identifier: C8:3B:E8:9F:9C:37:49:D0:51:01:46:FE:79:2A:9D:32:C8:F5:26:AC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A5FE781CFD074FE86E280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5382973-9d9e-328c-a5c7-e5db9390a425.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 212238
IP address blocks: 23.26.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:5f:e7:81:cf:d0:74:fe:86:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=8dea4d15-2ffb-4b3b-85e2-0849ad1a54c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:5c:e1:b8:46:f1:36:2e:6e:13:95:6e:5b:
61:d7:00:97:68:ab:38:1b:39:19:28:f6:77:b8:73:
35:2c:3b:53:fd:5d:be:95:35:ad:bd:6d:6d:b5:37:
0c:48:8f:07:f0:be:4b:81:d1:7c:42:5e:8e:70:35:
41:3b:3e:b3:3a:47:94:93:a3:69:b9:cc:19:eb:7f:
b0:68:b4:fb:eb:3b:d6:b4:b6:c5:8b:a2:ef:66:58:
b5:43:3b:2f:11:11:df:f1:e0:6f:1b:2b:e5:90:84:
30:f5:02:34:60:7a:d0:ec:a0:47:8f:41:25:51:da:
89:5e:8f:37:58:b5:5c:66:c0:1f:b0:9f:e0:92:da:
1b:9d:37:59:85:e3:42:aa:14:69:68:43:38:74:ac:
1b:33:4c:68:07:d7:aa:20:33:88:3e:df:ab:52:0d:
73:9a:a3:8a:91:fe:f7:61:c9:5f:f8:6f:3f:92:1b:
ee:37:11:eb:28:05:22:cb:7a:0a:65:7e:b8:88:e6:
de:73:79:ef:b2:9a:17:37:3a:49:9f:08:c4:2c:f3:
65:29:28:a7:56:b0:d7:aa:4f:12:5d:e3:b2:f8:b6:
d8:68:69:ad:19:7f:81:fa:78:b1:fc:35:07:88:ea:
10:45:a9:80:5b:94:01:e0:e9:1b:04:d0:d0:18:59:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3B:E8:9F:9C:37:49:D0:51:01:46:FE:79:2A:9D:32:C8:F5:26:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5382973-9d9e-328c-a5c7-e5db9390a425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:d3:73:f6:fc:12:a7:4d:9c:e5:1e:8a:73:c3:9f:9d:1b:cc:
0f:79:77:79:94:39:ce:3a:b1:87:12:9b:5b:be:75:c9:d1:00:
2f:f7:92:65:a8:e2:ae:71:f5:b3:d9:1b:d3:90:a2:8d:5a:b8:
7d:27:89:6c:58:06:5c:f0:ed:22:4a:2e:7c:03:3d:94:a2:b5:
9f:4c:5a:c4:8d:d9:c6:97:9d:2c:f7:d7:9b:92:b4:86:4b:c4:
a9:e9:94:c4:d4:c7:69:cb:67:a4:c0:36:16:d7:be:65:fb:cb:
f7:ad:0a:a1:8a:b1:c4:8a:3c:a3:c5:af:7f:79:4e:8a:03:00:
97:e1:43:d7:4b:be:44:29:76:d1:ff:e3:db:ea:5b:25:ca:eb:
46:46:48:e1:91:bb:b8:fd:5c:be:e8:89:5d:37:80:83:14:6f:
d8:a5:f0:5c:5a:21:37:6d:53:5f:fc:f0:28:6d:03:51:e3:8a:
72:45:5c:f0:e8:c6:e6:10:fc:c5:2a:82:47:16:09:da:bf:cc:
7a:7a:14:d9:b1:00:88:2d:95:24:19:91:f3:06:be:06:b4:1d:
20:ef:a8:a0:94:48:88:a9:57:9c:de:97:39:0d:70:40:6a:59:
41:55:47:ea:ac:77:66:65:5d:e9:12:bd:f7:96:13:c6:38:66:
99:71:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:04:41 2025 by rpki-client