Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd18f2ec-68c4-391d-9d15-4d526de79b4e.roa
File: cd18f2ec-68c4-391d-9d15-4d526de79b4e.roa (raw, json)
Hash identifier: cb6Ge3KB1XFto144zKTz0bx7Sv34+yCNNg9Y611/ybY=
Subject key identifier: 4D:91:85:F4:3D:F3:11:44:0A:95:AD:AB:2B:0F:E3:31:D0:5E:AA:9C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858464FD9B30493E0D6095697FF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd18f2ec-68c4-391d-9d15-4d526de79b4e.roa
Signing time: Mon 24 Jun 2024 01:00:24 +0000
ROA not before: Mon 24 Jun 2024 01:00:24 +0000
ROA not after: Sun 22 Sep 2024 01:00:24 +0000
asID: 400175
IP address blocks: 23.26.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:4f:d9:b3:04:93:e0:d6:09:56:97:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 24 01:00:24 2024 GMT
Not After : Sep 22 01:00:24 2024 GMT
Subject: CN=9dab3677-2696-48be-a8b5-7b54d27e3dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:ea:1a:4d:ce:87:3c:50:88:f3:f8:b0:b7:
a0:6e:e5:84:3b:87:50:37:43:8c:b2:21:47:48:df:
a7:bd:39:f6:f4:5e:64:ce:ab:a6:9b:16:ed:c9:59:
68:15:9a:4b:56:89:92:83:4a:4d:21:3d:db:e2:92:
ce:ad:e9:ac:13:3b:d1:a9:4e:0b:35:6e:e0:37:e0:
d2:5a:68:3c:7e:cb:9b:94:b3:39:41:28:94:62:d3:
d9:df:30:74:e3:4d:b2:bc:5a:ca:20:9f:53:f6:73:
84:2a:1b:98:2c:0c:80:00:a5:9a:14:af:8a:df:e2:
24:7f:aa:10:67:41:b9:20:e0:47:90:4d:d8:ca:98:
d3:f6:9f:b4:f2:06:05:2f:0b:17:2d:2a:af:da:7e:
70:01:45:82:09:bd:10:5c:2e:28:83:f3:bc:4e:5b:
22:cb:94:66:52:79:2b:4e:46:5d:06:09:4e:79:22:
b6:73:a2:be:56:7d:5b:fb:cf:95:fe:69:0a:6d:0a:
75:a8:c2:f1:66:c8:87:bf:cc:9d:e2:f5:bf:d1:14:
64:e8:15:a1:bd:c1:c3:1c:63:4d:2a:d7:9b:53:61:
bf:af:c6:43:27:59:7b:41:b3:6a:01:a8:9a:65:5f:
1d:73:5f:8b:11:88:a5:77:aa:20:db:b3:49:3b:12:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:91:85:F4:3D:F3:11:44:0A:95:AD:AB:2B:0F:E3:31:D0:5E:AA:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd18f2ec-68c4-391d-9d15-4d526de79b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:9c:2f:1f:9a:16:7c:f6:3e:d5:58:b7:1f:9e:cc:4a:18:a6:
13:36:61:50:a0:9b:9a:25:7e:f7:0e:96:a4:0c:f5:2b:80:62:
db:4d:be:0c:a6:be:44:50:2c:f5:d4:72:6e:d7:6c:1f:f5:da:
0b:77:0d:0f:06:6c:77:45:ad:f9:dd:87:3e:44:fa:94:3c:88:
32:63:53:ca:f9:6c:19:bf:90:06:25:e6:e3:86:eb:12:4b:75:
0e:c5:c8:b3:80:de:67:2c:21:5a:9a:fe:d7:8f:82:98:3f:58:
85:2c:dd:28:02:74:80:00:b1:1b:03:21:75:97:75:b1:dc:94:
03:54:97:29:53:39:08:46:ec:56:f4:55:ac:85:a4:74:28:5f:
45:ea:31:db:7a:21:66:3e:13:27:36:cd:32:a4:82:d0:a7:fa:
30:f6:23:e5:d5:30:2d:e1:e2:76:5c:5c:aa:14:e4:ea:ca:10:
0e:0a:a4:e3:8b:81:17:4a:f0:bf:9a:af:d9:50:23:5f:3c:35:
14:e2:8d:96:63:7c:b4:29:1d:72:da:cd:4e:0c:39:07:d2:e1:
72:b0:92:e1:9f:8d:35:bb:1e:e1:33:3c:d9:72:9e:93:eb:a5:
10:83:b6:bb:ea:5e:9d:b0:60:3a:45:e0:31:ee:5f:4c:2d:65:
a7:50:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:52 2025 by rpki-client