Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc895804-f51d-337a-b8f7-d3835aa37802.roa
File: cc895804-f51d-337a-b8f7-d3835aa37802.roa (raw, json)
Hash identifier: lMrOzSZoIy6Z9eKMYW9OQWD3gkVUTV20lx89A6rL4So=
Subject key identifier: DB:65:56:3C:91:73:6B:2B:C6:CE:5C:36:35:3E:55:DF:0A:FE:F9:B6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842AFDAF8070495B17A2ABD0580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc895804-f51d-337a-b8f7-d3835aa37802.roa
Signing time: Thu 27 Jul 2023 15:12:55 +0000
ROA not before: Thu 27 Jul 2023 15:12:55 +0000
ROA not after: Wed 25 Oct 2023 15:12:55 +0000
asID: 197644
IP address blocks: 23.26.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:af:da:f8:07:04:95:b1:7a:2a:bd:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 27 15:12:55 2023 GMT
Not After : Oct 25 15:12:55 2023 GMT
Subject: CN=a8c2b7dd-76c1-47be-9bd6-30f9706ab690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:04:8d:f6:c3:1c:a4:7a:d0:e5:5e:d2:da:
e3:30:63:2d:6f:63:7e:17:60:e0:54:61:f6:64:86:
e4:1a:4a:4c:33:81:94:27:4b:d0:40:f0:36:e4:73:
9b:2b:7b:67:7b:59:c2:79:b2:6b:65:46:e0:87:07:
2c:99:37:be:af:09:66:ba:b7:b0:be:17:96:14:81:
1c:ab:a8:8f:c6:43:0c:ad:a0:ef:80:86:ed:2b:ae:
a8:92:71:2c:a6:cd:5f:b0:04:e6:6f:10:e7:9f:97:
7e:01:af:a1:c9:9a:c1:b4:20:1f:de:de:23:4f:54:
6a:f3:b9:b6:92:ce:4f:dd:31:a5:74:ee:1c:fc:9c:
6d:35:59:30:27:9f:c8:81:3b:09:b0:75:7d:b5:6d:
3a:df:fd:5b:7c:e3:b2:72:84:42:1c:49:42:76:e4:
f6:b4:7b:89:96:2b:49:6a:a6:8c:35:14:f2:5f:72:
6b:3d:d4:81:a2:28:fc:cd:b2:b3:89:d5:1c:c2:bb:
eb:7d:a3:eb:0e:e0:a5:30:bf:3c:57:05:88:0c:cc:
e4:9e:d1:32:4a:69:f2:ce:d0:ad:a2:0d:66:d5:5a:
1f:52:30:b2:82:0b:6a:b9:93:68:69:b7:7b:9c:8e:
0f:ae:2f:ee:81:60:50:57:62:d3:fe:67:4c:73:98:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:56:3C:91:73:6B:2B:C6:CE:5C:36:35:3E:55:DF:0A:FE:F9:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc895804-f51d-337a-b8f7-d3835aa37802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:e9:0a:58:8d:95:0d:8d:c1:8a:38:70:9b:38:5b:f2:3a:c5:
f9:ac:85:6a:82:85:f2:f6:08:54:86:3b:15:1f:b8:78:cb:19:
73:70:72:44:a8:14:25:9f:cb:11:39:16:da:f7:db:4f:d4:ae:
05:ce:90:6f:91:6b:00:d7:09:a9:28:9e:ff:7b:95:f1:4d:fe:
f0:67:37:d9:97:83:27:9a:bc:0d:72:0c:a2:f4:74:00:da:07:
11:66:20:eb:30:b1:7f:f4:86:3b:4a:d1:c0:7a:9c:fc:8c:86:
73:70:70:70:f1:8a:63:07:cc:ac:be:16:20:bf:20:a6:05:e8:
f7:ef:1f:3d:ca:98:19:2c:c5:c2:32:e1:2d:00:a8:b5:5d:10:
2a:c1:7b:89:b4:1f:df:d0:18:5a:78:ad:90:81:af:2a:13:5d:
76:51:f9:39:6b:d0:78:70:e5:ed:73:85:cc:31:69:2e:fa:46:
6b:0b:ec:86:53:c3:86:20:71:3a:7b:22:9d:1c:21:42:2f:80:
47:a4:fd:60:fa:89:57:43:e4:ad:f3:8a:93:32:86:7e:1e:e8:
0a:eb:4b:1c:88:1c:a6:b0:a4:fe:02:08:ed:32:f8:b9:90:b0:
67:55:21:d6:5e:c4:2b:be:7c:e2:67:d9:51:e1:41:5c:42:30:
40:a9:31:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:45 2025 by rpki-client