Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c680dcea-312b-3d6d-9ee2-2436952b3df4.roa
File: c680dcea-312b-3d6d-9ee2-2436952b3df4.roa (raw, json)
Hash identifier: dqbGPKuxMUHLnkyLNpAS4GVNuz/T7UxWToh7fnMNjyU=
Subject key identifier: 4F:06:AD:E4:B7:75:53:F9:03:E3:1B:57:87:39:68:9A:D2:C0:4C:0B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489340B406D5E2EF9FD60B2F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c680dcea-312b-3d6d-9ee2-2436952b3df4.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 63023
IP address blocks: 23.26.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b4:06:d5:e2:ef:9f:d6:0b:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=0ab2922a-7558-4d2f-9639-6fd44431e0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:41:06:bc:12:25:5c:b5:8b:98:c2:95:d4:
9a:21:83:f8:c5:80:eb:03:6b:dd:a4:11:af:64:71:
65:bb:31:f9:23:09:25:ee:75:83:02:a1:34:d9:74:
4c:3b:a0:3c:47:0a:3f:96:4c:d7:37:1c:a1:bc:79:
84:26:03:73:e1:45:ce:b0:17:26:04:4a:0e:90:b1:
5c:e0:28:65:d0:a1:0a:dd:25:e4:fd:87:57:26:3c:
37:47:42:ec:11:30:4b:42:6d:6a:81:99:ab:37:26:
01:d8:12:81:42:10:75:77:81:b3:c5:f6:2c:2b:8a:
1c:29:07:92:a0:e5:63:bd:bc:d4:95:8b:74:4d:2b:
c9:b5:32:b1:05:6e:aa:6d:1d:c9:be:66:d2:42:32:
d8:55:e0:12:17:a7:d8:61:29:f5:96:47:f8:6e:8f:
7d:0b:7e:26:2a:5f:89:c9:95:5d:b7:39:8e:e0:32:
ed:cb:09:66:03:ab:08:7b:5d:a9:2b:f0:04:f4:a7:
d6:5d:07:e0:a9:6c:5a:22:3c:5a:c9:6d:c2:e4:aa:
2f:85:26:45:08:29:0b:a6:be:b2:e5:ea:8f:94:7e:
5e:bc:49:94:5c:47:fb:a9:f4:42:cb:73:1f:0b:af:
65:0b:49:67:b5:15:8e:2c:8e:b0:59:ef:fd:bf:33:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:06:AD:E4:B7:75:53:F9:03:E3:1B:57:87:39:68:9A:D2:C0:4C:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c680dcea-312b-3d6d-9ee2-2436952b3df4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:c3:77:44:ca:80:6b:47:1e:b5:21:2b:1a:57:c4:c7:15:f8:
2c:a6:17:70:f3:bb:fe:c3:fa:11:d1:b3:e4:dd:5f:a6:d1:8e:
8b:92:79:ca:67:e7:38:58:b8:c4:cf:34:45:ec:0d:c4:83:fc:
59:aa:86:e1:bd:a8:c6:f6:1c:88:5a:4a:40:d2:ec:9b:a9:eb:
81:99:71:cc:58:e4:43:cf:91:21:9a:58:e9:12:ab:7e:01:45:
8d:3c:5f:1f:47:47:0b:b8:aa:76:44:57:c7:b4:af:97:5c:76:
6a:6b:f1:74:db:5d:9e:8c:1e:6b:f3:31:d0:c9:71:fe:f1:a0:
82:0b:32:f8:73:44:c9:65:de:7c:b3:83:04:d5:cc:66:b8:27:
83:02:67:28:19:17:8c:ce:c4:e3:29:4b:9e:26:d6:d3:10:5b:
14:21:2c:8b:c3:30:11:59:d0:30:7a:b0:a0:d4:cf:26:3d:13:
e1:2a:d7:6b:1e:1d:bb:24:9a:10:5a:62:c1:98:5b:32:f6:a6:
ee:68:14:44:a2:00:df:8c:11:9b:a4:81:69:a4:af:cd:8d:05:
b6:cf:94:ce:53:20:29:b9:5e:fe:23:fb:3b:26:1f:8e:e0:5b:
c8:25:33:72:54:11:83:da:68:62:6d:59:28:c6:f1:c0:1d:4f:
72:f6:dd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:16:09 2025 by rpki-client