Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d90a3a20-1f1a-3119-8d72-4541b3e706fa.roa
File: d90a3a20-1f1a-3119-8d72-4541b3e706fa.roa (raw, json)
Hash identifier: PBDkK9Uag5hvEuGtQ+OB8E99vFovf/kltrJ6S9rdb3M=
Subject key identifier: DD:59:C8:62:D7:1A:42:F3:80:C8:A8:9E:18:D0:0B:6E:1A:04:21:76
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584202E8DCC833422511943D1100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d90a3a20-1f1a-3119-8d72-4541b3e706fa.roa
Signing time: Fri 26 May 2023 16:26:04 +0000
ROA not before: Fri 26 May 2023 16:26:04 +0000
ROA not after: Thu 24 Aug 2023 16:26:04 +0000
asID: 398465
IP address blocks: 23.26.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:02:e8:dc:c8:33:42:25:11:94:3d:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 26 16:26:04 2023 GMT
Not After : Aug 24 16:26:04 2023 GMT
Subject: CN=fb199b40-5586-4760-9961-a9f3d12f62e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:d1:d6:47:a6:85:f4:86:48:cb:87:72:4a:
0c:47:03:f5:e4:93:dc:f1:cc:73:c4:c9:e7:5b:3d:
67:20:32:c4:96:f3:51:5c:79:39:f6:d8:05:ff:48:
1a:c4:a7:d5:ae:d2:57:13:07:1b:4a:ac:d3:88:a1:
89:a4:de:51:26:98:a6:6f:38:b0:3c:b7:94:25:fa:
c9:1e:2b:5b:b9:46:06:d2:20:5f:80:3b:69:7e:93:
d6:5a:65:71:af:d5:c7:21:f5:43:fc:91:5f:82:fe:
8b:44:28:c6:44:db:06:63:0d:a0:94:6a:29:52:45:
82:60:2a:a7:3f:7d:09:9d:21:6d:a2:b7:89:1d:27:
39:9f:7f:fe:69:0e:e5:76:66:c6:8a:cb:90:f5:ad:
75:fa:bf:b6:90:ce:78:5d:09:f1:77:40:22:51:d8:
c7:71:7b:37:cf:d2:c1:54:34:8b:02:dc:a7:8c:10:
e8:08:2e:db:76:32:70:1c:07:d4:18:a8:2c:c0:94:
18:88:5b:c5:f8:c3:36:f1:eb:e5:d4:98:a2:b0:eb:
f8:a2:a5:be:85:2f:2b:79:9b:c5:7d:b5:76:98:5c:
3c:23:6a:cf:63:4b:c1:0f:6f:92:9b:49:a9:e8:ad:
a4:d8:37:a3:f4:bf:63:e9:b5:0b:15:8f:ae:68:b4:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:C8:62:D7:1A:42:F3:80:C8:A8:9E:18:D0:0B:6E:1A:04:21:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d90a3a20-1f1a-3119-8d72-4541b3e706fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:84:2a:31:7e:8e:a7:e3:57:37:09:87:c9:ad:6d:dc:3d:60:
78:dd:ce:6a:9d:3f:43:82:e0:7b:40:ec:1c:89:56:8c:cc:3d:
f5:3c:e6:34:4c:89:99:7d:db:4a:af:f4:88:e9:00:58:93:ec:
f9:19:38:39:ec:13:86:7c:fb:57:bf:97:6b:93:0e:40:d7:b4:
0a:f2:b0:ba:c1:ed:5c:46:05:58:30:56:d3:37:d4:0f:4c:76:
a0:95:8a:aa:f3:2f:30:44:26:54:a5:3b:9d:54:40:3a:bf:ea:
1f:97:9c:48:c9:1b:f0:73:3e:62:98:c2:ee:b6:80:c5:87:07:
f6:5b:7d:83:dd:9a:04:cb:54:a1:1f:ea:48:cb:f7:80:7b:5f:
9c:91:32:c3:5a:28:5d:fe:c8:60:a9:19:fb:c6:89:67:95:19:
71:66:16:94:d5:8b:f9:bd:1e:7f:da:a6:ae:ce:9f:b0:12:cb:
16:eb:73:67:0e:9f:73:cb:1d:ae:ff:5a:fc:7d:ef:fd:2b:03:
bf:74:5c:d4:1f:bf:59:45:f1:b9:5b:c5:86:e1:75:ee:45:75:
4e:38:c4:a1:e0:f5:88:c6:94:8e:59:97:47:7b:36:8d:7e:1f:
de:cd:14:27:0f:1e:c8:b7:96:ed:d1:84:1d:a8:dc:78:33:98:
e0:ad:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:40 2025 by rpki-client