Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc9bc1ae-54bc-3561-ab8f-31e01242a360.roa
File: cc9bc1ae-54bc-3561-ab8f-31e01242a360.roa (raw, json)
Hash identifier: tjd9rPtuOCeulUjPEBb0wjiWGD9VwJaaIzsp2rZSzQQ=
Subject key identifier: A9:FF:E8:A0:15:7D:23:7F:D2:5B:67:BD:BE:FD:EF:D2:90:B2:2F:CC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858465409D15195D789A85617EF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc9bc1ae-54bc-3561-ab8f-31e01242a360.roa
Signing time: Tue 25 Jun 2024 13:00:33 +0000
ROA not before: Tue 25 Jun 2024 13:00:33 +0000
ROA not after: Mon 23 Sep 2024 13:00:33 +0000
asID: 7018
IP address blocks: 23.26.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:54:09:d1:51:95:d7:89:a8:56:17:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 25 13:00:33 2024 GMT
Not After : Sep 23 13:00:33 2024 GMT
Subject: CN=22f04aa2-17b3-48f6-8c8b-d20744fba15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:9b:3b:11:8e:c1:42:91:b6:6c:1c:55:a9:
aa:93:04:49:cc:19:23:be:63:b8:ed:9f:cb:90:34:
f0:c2:26:f2:0d:5d:e0:e9:df:e3:2c:98:ed:c5:15:
61:8d:37:98:da:44:b3:f3:6e:fd:d5:cf:16:1b:fc:
71:00:d9:38:a8:12:96:c8:e9:ee:0c:fa:10:fb:ef:
b9:a9:72:d1:9d:76:88:b1:79:e2:75:aa:5a:7e:fe:
56:e9:c5:db:d3:10:1a:ab:1e:65:89:ca:fd:9e:07:
a0:18:b0:53:98:45:1b:68:79:20:03:cf:ba:5a:8f:
3c:29:df:30:02:d5:08:50:e1:18:82:cc:30:c7:26:
dd:15:c9:61:7b:65:be:fe:f3:74:86:f2:f3:e5:16:
22:18:a6:10:63:29:4f:77:b5:d6:13:56:74:37:a1:
0d:20:03:41:e3:70:13:bf:8a:14:34:1c:8e:4b:58:
b1:ea:4a:f2:f1:b9:bb:1f:07:82:5d:b7:4b:d5:4d:
c3:fd:86:a5:5f:98:b9:b9:fb:89:d4:bb:e9:6a:35:
d1:1f:ae:5d:9a:76:93:92:6b:9e:72:5b:30:69:45:
1c:c7:43:16:5a:8f:5a:33:ae:9f:28:1d:e7:e2:23:
e6:84:33:64:a0:8b:10:c4:51:c1:31:ef:ae:b7:c4:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:E8:A0:15:7D:23:7F:D2:5B:67:BD:BE:FD:EF:D2:90:B2:2F:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc9bc1ae-54bc-3561-ab8f-31e01242a360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:e7:5c:49:84:02:46:d1:9f:76:8a:5d:32:e4:62:7f:76:ab:
84:e4:3b:b0:b7:64:14:b1:de:b0:ef:fb:22:97:53:c2:89:2f:
bf:56:cb:eb:05:82:d6:e4:a4:1e:2a:43:be:c8:13:03:90:af:
16:31:6f:54:9f:41:3b:ad:f2:e3:60:e7:68:2c:63:9d:1b:3b:
62:8c:8a:94:d8:82:7f:4f:fe:a6:93:85:be:f5:07:95:7b:06:
eb:e8:29:a1:91:59:9d:a2:18:83:77:a7:fe:30:e9:2a:23:7c:
a1:7a:b7:ac:62:87:e8:0e:ad:85:e2:85:a7:85:14:5c:6c:b7:
1b:01:9e:5c:01:37:39:7f:7c:a1:69:c0:c8:f2:89:70:81:0c:
0b:20:69:85:4a:8c:a6:51:b8:65:3b:ac:25:58:c1:13:1d:1c:
d6:e7:a8:09:6d:79:47:0b:c1:12:4d:db:33:b1:9d:eb:bc:b6:
1e:82:e5:7a:92:61:de:41:9e:c5:b9:5b:0a:4c:68:8d:7f:d7:
2d:ce:55:4e:fe:d2:2b:62:a0:4a:a3:72:fc:84:be:32:04:e5:
b6:18:bd:d1:1e:68:28:6c:f4:02:0e:5c:28:03:1a:97:9c:f6:
d5:77:5b:52:fa:60:d3:65:db:37:9b:73:25:25:4e:e9:88:4d:
de:43:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:25:19 2025 by rpki-client