Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ceac20b0-1073-35ea-99a2-a9724667d1be.roa
File: ceac20b0-1073-35ea-99a2-a9724667d1be.roa (raw, json)
Hash identifier: 02vCzr+Jxys9Pm/QFQQjJ8wc6vgoSZWmIFUDWzpecmk=
Subject key identifier: 8F:E7:16:A5:0F:1A:E3:7D:73:37:A0:B6:C8:77:40:53:E6:E1:50:66
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858432BD4A310252162D4A65C0E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ceac20b0-1073-35ea-99a2-a9724667d1be.roa
Signing time: Sun 10 Sep 2023 01:00:22 +0000
ROA not before: Sun 10 Sep 2023 01:00:22 +0000
ROA not after: Sat 09 Dec 2023 02:00:22 +0000
asID: 174
IP address blocks: 23.26.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:2b:d4:a3:10:25:21:62:d4:a6:5c:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 10 01:00:22 2023 GMT
Not After : Dec 9 02:00:22 2023 GMT
Subject: CN=72cfef0a-9a81-49c0-a078-1eb743def530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:4d:d7:0c:32:a0:d0:97:77:5f:72:7d:da:
b1:69:3d:30:79:1e:17:54:e8:a8:aa:dc:27:b2:b9:
d1:27:73:ba:40:97:73:ac:95:89:cf:86:bf:d5:34:
af:15:c7:2d:6a:1c:39:5a:b7:23:0c:24:a9:01:f9:
30:e7:d6:3a:8f:bc:0c:f3:00:dd:f5:37:0b:18:a4:
66:91:0b:49:b8:e2:80:4d:bd:d4:45:9c:a9:d1:a4:
4e:a6:68:22:e3:62:91:13:aa:8e:8a:17:10:f2:36:
f1:54:b5:36:33:26:85:d9:09:10:56:3b:f2:4a:09:
62:f1:e7:26:bb:b1:77:cd:13:e9:36:94:35:20:76:
24:ae:1b:95:3c:97:39:d5:57:5d:80:ea:d1:fd:01:
82:de:94:33:68:fa:d0:30:e9:06:b3:5f:e8:96:f7:
a9:2e:91:57:fd:0f:3d:ac:e5:f6:93:e9:38:48:c0:
ff:c4:7a:09:d5:09:e6:42:44:5f:ba:e1:ae:f9:8c:
2e:88:31:bf:7b:e7:f5:8c:5c:8f:8e:2c:a7:45:eb:
f0:cd:0a:92:e9:3c:fe:ef:6a:ac:30:ec:86:6a:48:
06:2d:00:c1:36:dd:c7:82:87:da:84:47:07:66:11:
81:c6:27:f6:c4:b2:d2:29:ae:55:92:18:2d:88:a7:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E7:16:A5:0F:1A:E3:7D:73:37:A0:B6:C8:77:40:53:E6:E1:50:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ceac20b0-1073-35ea-99a2-a9724667d1be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:9e:ac:70:d2:b1:74:b5:00:0f:b3:b7:03:52:4d:49:a0:f0:
b4:ac:37:9b:11:d6:cd:aa:67:53:6c:9b:67:76:5d:bd:e6:1d:
17:cc:0c:e5:bc:c5:8e:a5:47:a0:3a:4b:b1:ed:e8:ed:87:8a:
04:65:8e:d9:c4:51:f7:8c:b7:1c:d6:57:04:77:ec:33:93:57:
f6:4c:28:ce:31:d3:eb:0a:53:f3:8b:e1:2c:a8:05:6e:0c:3a:
d4:67:94:11:c3:7f:e2:51:cf:d5:de:46:0e:af:23:a7:7f:16:
a0:f6:3d:86:83:da:04:ad:3d:03:25:14:0e:4f:85:2e:81:ba:
91:d3:f7:40:9a:89:9e:22:a5:44:8d:e7:93:e3:ec:8e:33:85:
3b:8f:85:15:46:61:82:78:88:8f:1a:6e:4b:4e:f4:cc:99:7c:
69:b9:5d:03:df:78:de:1c:ea:bd:9a:a1:7e:2b:81:12:f8:3c:
5f:62:89:1b:e0:26:ca:14:39:fd:45:c6:3d:37:52:94:2d:6f:
cd:d2:5f:4c:ab:a8:4b:3e:a8:06:27:87:d9:6a:e1:72:19:38:
53:06:a5:4b:c6:2c:a1:80:60:9a:f8:a3:3f:38:71:2f:38:d2:
60:02:5e:fe:08:94:c9:af:74:de:5a:aa:a6:17:74:3a:22:24:
92:71:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:34 2025 by rpki-client