Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bda8349c-08c2-3e7a-8bde-30b5ae3e3259.roa
File: bda8349c-08c2-3e7a-8bde-30b5ae3e3259.roa (raw, json)
Hash identifier: M5wh7dN712uNW0uSWgf0S1LUn+U/QcA1QV+L1A/lLBQ=
Subject key identifier: 2C:95:24:C3:7E:07:0E:5B:F7:0C:F4:78:BE:6B:1D:FF:7A:64:A7:A2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584379FFC9FA0132A27450795200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bda8349c-08c2-3e7a-8bde-30b5ae3e3259.roa
Signing time: Sun 08 Oct 2023 01:00:22 +0000
ROA not before: Sun 08 Oct 2023 01:00:22 +0000
ROA not after: Sat 06 Jan 2024 02:00:22 +0000
asID: 211376
IP address blocks: 23.26.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:79:ff:c9:fa:01:32:a2:74:50:79:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 8 01:00:22 2023 GMT
Not After : Jan 6 02:00:22 2024 GMT
Subject: CN=a2a1bd4d-42e9-475a-9dac-96a14c98cbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:43:f6:7c:c3:cf:1b:24:e8:ef:53:be:d6:
be:f8:53:37:89:51:71:5f:f7:15:c1:f7:e9:03:35:
e3:83:ae:a8:69:ca:fa:0a:8f:71:56:dc:04:b9:56:
d6:01:c2:c1:69:93:7c:bd:39:ab:be:61:86:83:a1:
5a:bc:f2:cc:2e:2b:24:79:cb:fd:48:fe:16:82:63:
7b:3c:f2:ef:3a:df:25:14:a9:5f:aa:9d:33:e4:9b:
43:c6:1c:5d:20:db:25:cd:d6:a7:df:a4:4f:30:19:
3e:92:8a:35:36:64:85:68:e8:ea:cb:8b:ee:d6:1a:
e2:55:96:63:8d:19:1d:1e:ba:6e:b8:d2:b0:26:3a:
93:39:b5:65:0c:d2:59:43:70:f3:f9:88:2d:71:72:
e0:7f:d6:1f:61:83:70:13:60:e6:99:3c:4c:1d:3a:
da:a5:4d:90:8b:07:8d:4b:70:38:70:6f:14:14:5d:
a7:ab:8d:4f:a5:38:26:38:85:81:39:8c:6f:cb:fe:
57:10:bb:14:66:5b:23:ef:fe:dd:0a:c5:d1:96:4d:
59:1a:94:13:c0:49:53:59:f8:35:39:e3:09:bc:92:
b8:af:a5:d4:5d:21:ab:51:75:ef:04:7f:39:07:e6:
5c:2e:49:b8:fa:41:41:df:3e:7d:5a:59:3f:9f:27:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:24:C3:7E:07:0E:5B:F7:0C:F4:78:BE:6B:1D:FF:7A:64:A7:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bda8349c-08c2-3e7a-8bde-30b5ae3e3259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:fd:f2:e2:6c:78:d8:3c:b2:0d:a0:8b:74:2f:1d:aa:a0:0e:
65:ea:10:ea:3b:b1:4b:06:c8:67:13:76:b4:49:a2:f3:b4:29:
40:35:70:cf:d9:69:ed:ff:92:68:5b:db:4e:23:b4:2b:cb:7f:
24:c0:76:c9:1d:69:ac:49:79:34:09:07:3e:ff:8e:ed:22:37:
16:4a:4c:9a:f9:62:a2:88:10:fc:74:8a:17:d8:f2:a5:6d:20:
59:75:cd:2f:c5:ba:f1:4a:b7:a0:16:80:35:5b:ce:a1:8e:0b:
c1:71:97:b6:21:0f:d1:95:0a:f2:43:5f:b3:bd:06:4d:fb:33:
9d:3c:1c:44:8c:45:0b:c0:3e:3c:00:19:7b:6d:04:c4:6b:53:
7f:b3:86:dd:71:9c:1b:c0:de:63:c0:56:1c:19:1e:ec:b0:1f:
e9:41:8b:30:55:25:95:95:ba:1d:04:e9:ff:c4:33:50:a4:d8:
c4:72:a2:a2:d5:b7:20:22:59:a5:60:03:a3:c8:88:a4:28:77:
38:58:b0:2e:16:d1:89:1b:56:99:40:64:65:4e:2e:53:c7:87:
4d:4b:03:dd:89:a9:39:c2:5a:1d:be:23:7c:45:a7:f5:12:9a:
96:5e:c3:8e:33:0a:15:8d:3d:04:f3:5a:4e:1c:47:73:16:68:
c5:ae:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 15:51:46 2025 by rpki-client