Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc77dc58-3d43-3c79-a09a-e2bcc3af3274.roa
File: cc77dc58-3d43-3c79-a09a-e2bcc3af3274.roa (raw, json)
Hash identifier: LaIcf/Lc7NSgVMFaQbI+GcOV/tLrWLaylAC5nsT93gA=
Subject key identifier: DA:77:02:E4:4C:F6:FD:4D:E8:C1:82:2F:04:0A:C9:6B:11:12:B9:C1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847FFA47869209B1B682191E160
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc77dc58-3d43-3c79-a09a-e2bcc3af3274.roa
Signing time: Mon 25 Nov 2024 17:02:28 +0000
ROA not before: Mon 25 Nov 2024 17:02:28 +0000
ROA not after: Sun 23 Feb 2025 17:02:28 +0000
asID: 834
IP address blocks: 23.26.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:a4:78:69:20:9b:1b:68:21:91:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 25 17:02:28 2024 GMT
Not After : Feb 23 17:02:28 2025 GMT
Subject: CN=38d61bcb-180c-4ef3-8152-c231b15cb0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:19:d1:22:b7:c1:9c:be:cf:e3:d8:67:b2:
94:62:5b:46:42:ea:c3:e6:1a:ca:9c:3e:d2:92:9b:
fc:fe:bc:b5:cc:ce:5c:87:88:e1:be:74:6c:86:78:
7c:26:41:b4:84:52:a4:5e:6e:37:c5:f8:a1:31:7e:
44:71:a9:13:d1:a3:3d:17:7a:46:49:fb:d7:f2:2a:
6e:cb:f2:4c:c1:76:65:98:3e:df:90:2b:b2:a1:4c:
64:3e:da:e2:f1:46:98:62:56:04:96:76:40:e0:88:
e0:14:fa:8f:88:f8:e5:dc:4e:76:88:f2:47:91:ae:
b3:36:a5:13:62:89:ac:5c:6c:4a:ff:fb:d4:cc:34:
e3:91:90:8a:88:7c:13:78:c2:44:5a:85:80:84:74:
21:49:2e:42:32:26:71:c6:b0:2e:aa:33:0f:21:5d:
5e:20:86:23:81:21:60:df:76:ae:27:60:eb:a1:1f:
63:67:94:63:92:a3:66:4f:af:da:e6:42:74:c5:ec:
52:05:b3:e4:0f:c7:26:00:9a:bd:c7:9b:e7:5e:ea:
4c:3e:1b:e7:4f:46:d0:8a:54:dc:03:53:eb:8f:f0:
97:72:1d:98:82:6d:b9:bd:d6:73:60:5d:ea:83:db:
48:92:cc:fd:50:14:12:3b:60:53:1d:7e:e5:25:f9:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:77:02:E4:4C:F6:FD:4D:E8:C1:82:2F:04:0A:C9:6B:11:12:B9:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc77dc58-3d43-3c79-a09a-e2bcc3af3274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:9a:be:f8:c6:71:a0:94:49:bf:fa:f3:71:ed:b6:06:3f:81:
92:e2:d8:30:8d:59:82:63:13:9d:02:15:42:be:2c:b3:3d:72:
db:e6:6e:02:bb:ae:6a:60:a1:31:af:4c:53:ab:d1:30:11:a6:
aa:b4:a1:76:9a:2b:ec:92:cf:6d:bf:ed:5a:2a:a2:cb:59:25:
85:fe:c8:f3:b8:9c:58:ef:7b:89:8a:5d:67:18:b3:f3:4a:51:
6d:c8:20:99:01:ca:58:99:b8:7d:16:26:fb:4b:ee:56:7a:b8:
5f:da:ad:63:a3:86:86:fd:9a:39:e1:b0:7a:ad:ad:f3:bd:dc:
75:de:7a:4a:2a:65:6b:fb:db:a6:32:81:7e:d7:32:47:d6:66:
a2:8a:b3:87:9c:db:d8:4a:bb:8b:cb:48:54:54:c3:1d:f2:2a:
93:a1:5b:ac:d7:71:1e:19:35:77:e3:58:cb:5a:6e:83:8a:ce:
85:c4:15:62:df:6f:ad:f9:1e:c2:9d:ff:ec:36:1e:e8:a4:0c:
33:22:a9:c0:34:60:67:2f:0c:44:a3:c6:c6:9d:16:43:e8:4b:
e8:5b:f9:dc:61:6e:74:b8:33:f9:30:db:18:18:f3:ff:84:fd:
7f:b4:86:7b:41:70:06:ec:f2:55:c6:20:f2:6a:40:68:1a:01:
1f:81:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:06:21 2025 by rpki-client