Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0f19466-899a-337f-8b5f-cbf8ec95d34f.roa
File: d0f19466-899a-337f-8b5f-cbf8ec95d34f.roa (raw, json)
Hash identifier: C2Crf9kFJkgOhMKguK7bwLNp0i9Fna2PnY5Ds4hhqv8=
Subject key identifier: 10:A8:34:00:02:04:BA:68:DB:94:2D:97:25:C5:B8:78:F6:2A:2D:92
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845F2DC268ECA1B02B7A1BE5F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0f19466-899a-337f-8b5f-cbf8ec95d34f.roa
Signing time: Tue 21 May 2024 17:35:16 +0000
ROA not before: Tue 21 May 2024 17:35:16 +0000
ROA not after: Mon 19 Aug 2024 17:35:16 +0000
asID: 400866
IP address blocks: 23.26.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f2:dc:26:8e:ca:1b:02:b7:a1:be:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 21 17:35:16 2024 GMT
Not After : Aug 19 17:35:16 2024 GMT
Subject: CN=2a94e7ca-1bb7-460e-9333-996abf8251f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:1d:dd:15:35:13:f8:67:45:7e:2a:41:80:
47:c3:f1:a3:1b:41:a7:f4:67:5e:55:ca:3f:69:c3:
6d:1d:fe:4c:d2:ea:7f:45:f8:ab:57:46:29:45:5e:
79:1f:da:03:8b:c3:41:25:a0:21:fc:70:3c:16:85:
25:33:55:40:48:3f:60:b3:ec:1d:96:27:bb:98:27:
21:e9:f0:72:7f:88:a3:2a:c8:b1:65:8c:25:e1:2e:
38:1d:86:17:e2:7f:df:03:ee:66:fb:f3:a6:a8:f9:
6f:d5:ec:f5:79:fd:b5:4c:8c:58:7d:0c:5e:97:c8:
70:ae:5b:3e:37:2b:10:71:15:60:d2:a6:d8:a2:19:
01:be:35:e5:9c:e7:95:d0:5a:3c:8a:b4:6f:ee:bd:
b7:42:d8:03:6d:c1:d7:f9:20:a0:90:61:37:30:6a:
d5:0f:d6:99:99:0a:c7:38:27:09:9e:ca:16:ee:f9:
2a:af:54:7d:93:64:10:1d:1e:e3:09:7f:77:32:3a:
be:42:e9:5e:f1:79:25:6d:12:db:81:93:14:ec:b3:
90:6c:e9:24:79:a6:47:30:8b:8f:d2:60:52:13:9a:
43:50:8a:8f:a0:2e:d1:e6:4f:8b:33:d5:df:66:61:
d8:0d:51:65:55:26:25:a9:c8:f8:e4:35:48:15:94:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:34:00:02:04:BA:68:DB:94:2D:97:25:C5:B8:78:F6:2A:2D:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0f19466-899a-337f-8b5f-cbf8ec95d34f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e6:85:12:7a:c2:0b:1b:a1:a6:b7:dc:e6:3b:33:f9:f4:3a:
75:43:9b:cd:2c:aa:09:85:73:b4:61:b8:a8:03:33:31:8d:5a:
fe:fd:0a:cb:72:82:3e:53:aa:7b:09:49:7e:67:ac:ef:7e:e8:
eb:8f:61:62:53:f1:32:fa:5f:7a:57:cb:65:11:df:f7:cc:58:
2a:2a:ad:7b:b1:68:64:c3:18:d3:08:c4:34:23:08:e6:7c:31:
27:3a:d5:eb:fc:c4:17:74:1c:3a:27:39:86:35:2d:e5:26:80:
2e:32:f1:45:10:a9:91:cb:24:58:d9:49:cb:1a:96:3b:0b:5c:
0a:4f:c0:53:79:9b:f9:2b:64:16:1b:bc:e2:f9:65:f0:03:a4:
ce:0e:65:36:9a:44:51:15:f7:d7:d5:1f:89:a0:3e:a9:2a:87:
e0:20:e9:70:ea:35:10:7f:f7:e9:dc:63:e6:a8:e2:e5:1f:0e:
7e:fc:96:1c:4e:67:ef:d6:89:8d:5c:cb:e2:c9:16:b9:15:bf:
1f:20:90:b4:01:d5:1e:56:aa:5e:e5:e7:25:55:e2:b3:04:06:
0a:b9:72:72:f9:5e:66:ca:72:d8:c2:c0:0c:48:04:7a:b4:1d:
4b:df:4d:95:7c:29:df:81:75:15:20:f4:c0:0c:3c:02:df:9e:
20:c5:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:59 2025 by rpki-client