Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cca89482-b8d1-37a1-95bd-2e761b610500.roa
File: cca89482-b8d1-37a1-95bd-2e761b610500.roa (raw, json)
Hash identifier: UZdbXoFsYflarOO2FlgGBYrlXUeXiKQfOkrCegd4hjc=
Subject key identifier: 4A:07:DB:36:78:20:B2:40:20:E6:B5:E1:2A:75:12:DC:B8:27:6E:CA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858446769B0438795380770508E20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cca89482-b8d1-37a1-95bd-2e761b610500.roa
Signing time: Mon 01 Jan 2024 02:00:16 +0000
ROA not before: Mon 01 Jan 2024 02:00:16 +0000
ROA not after: Sun 31 Mar 2024 01:00:16 +0000
asID: 6079
IP address blocks: 23.26.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:67:69:b0:43:87:95:38:07:70:50:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 1 02:00:16 2024 GMT
Not After : Mar 31 01:00:16 2024 GMT
Subject: CN=5e822b71-63c7-4fe5-8656-cd5779e9a143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:c2:ee:73:6d:f6:af:58:c6:72:a0:65:9b:
98:d8:61:35:cd:e9:39:5f:d1:2c:06:c1:ce:f1:fa:
0d:49:e8:41:12:44:4b:8f:70:cd:e8:b8:ad:1f:e7:
83:7f:06:f7:f3:bd:ff:fd:3c:44:f4:1f:b7:90:8b:
53:ac:41:56:cd:5a:95:11:60:be:72:ae:6a:81:a9:
f8:77:f1:6c:06:e4:9f:22:9b:f2:b1:24:13:4a:a2:
3a:eb:e0:ea:0d:b0:6b:94:55:43:ec:30:1b:5d:61:
83:1c:31:60:da:04:e9:fe:da:75:23:7c:b0:8f:c2:
35:49:ee:cd:4a:27:ad:73:c8:5c:34:09:41:58:e7:
83:63:01:a4:5d:e8:b7:9b:26:f1:9f:a8:f0:82:36:
0d:a0:77:fb:79:5d:58:e1:03:c2:fa:77:02:77:d9:
0d:99:d7:62:09:dd:1a:37:6e:c9:45:c5:a3:96:1a:
be:99:76:5a:7d:f4:fd:9a:d9:26:13:5f:aa:cc:32:
4d:f3:1e:e5:74:d2:ba:3c:9f:aa:0a:0e:7e:19:5a:
6c:a4:98:67:4d:98:a8:be:fc:68:0e:a3:e4:6f:30:
3a:72:77:03:ce:35:3a:93:79:9a:cb:03:cd:aa:2f:
31:c8:21:5e:37:97:88:9e:42:e1:7d:18:b3:22:1f:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:07:DB:36:78:20:B2:40:20:E6:B5:E1:2A:75:12:DC:B8:27:6E:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cca89482-b8d1-37a1-95bd-2e761b610500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:1d:8a:fa:15:c4:08:89:71:b0:58:a9:cb:57:ac:9e:d8:2c:
e6:32:e7:7c:85:a9:00:87:96:1a:2c:d9:ab:1a:a4:17:8d:6d:
5d:31:a3:3a:bf:7c:41:f4:34:27:a4:b4:8e:c0:e5:41:cf:8a:
1f:24:1e:92:8f:ab:ef:6c:61:b0:4c:8b:c0:a6:42:aa:df:ee:
c6:fb:5d:d7:5e:9b:42:0d:89:20:52:99:91:7a:60:cb:81:c3:
78:6d:0f:a3:94:1e:5a:04:6c:39:49:7d:7c:b5:36:64:61:60:
23:5a:28:68:a5:49:27:83:18:f7:85:e4:80:9e:9b:21:11:9f:
be:28:32:7e:1d:c3:b2:8a:86:ab:75:71:a9:02:6f:e0:bd:6e:
21:cd:af:96:20:16:2d:da:df:7c:60:c5:b3:63:44:ad:b2:aa:
4f:81:df:fc:90:24:2c:e1:6b:cd:f4:e9:de:8b:29:8b:0d:7b:
f8:54:cd:08:ca:a2:b5:21:6c:ad:e6:3c:dd:ce:1b:d4:83:32:
2b:68:01:91:fe:ef:3d:65:74:4d:e4:df:74:ea:35:2e:6c:dd:
db:82:4f:ed:48:2c:10:45:b8:3e:85:59:e5:36:7c:c0:03:f7:
e0:c3:2f:88:04:73:ff:a2:a5:1e:a5:ee:23:ec:91:45:f7:7a:
0f:ec:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:21 2025 by rpki-client