Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d978a96d-b8e9-3af5-8faa-e931d1e28609.roa
File: d978a96d-b8e9-3af5-8faa-e931d1e28609.roa (raw, json)
Hash identifier: xEsL+9Jr2mEEXkguWg+fuv/Z6H0ozPIgthhBL3qs/VI=
Subject key identifier: 83:EC:11:9C:E2:40:41:6D:D8:23:37:21:D9:90:14:11:23:1D:D5:13
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842757D6DE427A88026D7F5F708
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d978a96d-b8e9-3af5-8faa-e931d1e28609.roa
Signing time: Thu 06 Jul 2023 17:27:34 +0000
ROA not before: Thu 06 Jul 2023 17:27:34 +0000
ROA not after: Wed 04 Oct 2023 17:27:34 +0000
asID: 400863
IP address blocks: 23.26.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:75:7d:6d:e4:27:a8:80:26:d7:f5:f7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 6 17:27:34 2023 GMT
Not After : Oct 4 17:27:34 2023 GMT
Subject: CN=1b71ab1f-2940-4bc7-9469-ad83a7e9a435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:7e:67:17:6e:dd:9e:1a:f1:86:3b:13:7e:
f1:9a:ea:bf:f9:97:02:ca:22:af:48:e8:eb:54:3b:
b1:6e:fe:30:18:73:16:7e:f1:72:da:7b:3a:74:8a:
db:3e:54:73:52:39:6e:b3:1f:7b:d5:bf:6d:a8:f5:
30:36:cf:a0:44:9a:c7:8b:1f:35:90:2f:ad:7a:0a:
90:0e:f9:bd:0b:b6:00:45:2b:d6:ad:09:93:cd:f9:
71:23:dd:43:bd:1f:29:de:19:f5:88:3f:30:a2:32:
ad:9a:99:1c:75:e2:9a:2e:56:06:10:28:f3:b9:85:
e8:da:68:20:1c:ec:10:d7:b7:b3:e8:76:ed:12:92:
b0:14:68:f5:ee:be:6c:ce:5a:1f:d6:13:96:2f:92:
14:b8:0e:ee:cf:8d:a0:64:97:46:3b:99:68:59:ef:
7d:9d:6b:0b:46:cf:64:a1:28:bd:af:7e:27:08:20:
68:ec:aa:fa:ad:82:f6:ae:54:8a:35:77:6a:79:55:
68:d6:e6:81:0c:b2:a7:48:66:b5:22:03:c8:f6:24:
62:5f:53:20:79:43:8d:c2:00:a6:39:80:c3:bd:1e:
0a:0a:68:f2:1c:c0:4e:ed:db:7e:97:62:44:9c:00:
6d:36:da:8b:26:24:26:47:7d:71:3f:be:4b:a8:76:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EC:11:9C:E2:40:41:6D:D8:23:37:21:D9:90:14:11:23:1D:D5:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d978a96d-b8e9-3af5-8faa-e931d1e28609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:89:45:18:4a:31:e8:f5:fd:4b:a4:d4:25:9b:b6:34:b9:1f:
aa:18:0e:22:a0:26:8e:7d:ef:fd:c5:76:60:5d:05:47:8b:18:
56:51:9e:6e:04:95:ed:f6:6a:e8:76:76:87:80:9f:6f:61:bd:
5b:56:e5:38:0f:e8:c3:93:80:52:f7:85:c8:f2:9f:6a:5b:36:
76:09:a5:54:4b:8e:05:4f:13:00:56:9e:06:70:42:19:52:9a:
36:d3:30:8d:cc:de:1f:c2:0d:11:0a:0e:bf:22:98:2e:38:8e:
0d:58:7d:e7:dc:00:2b:26:34:b4:21:af:c0:95:93:b2:73:05:
2d:72:b4:06:5e:7c:6e:88:53:50:3b:9c:fe:23:09:f8:b2:b9:
fd:18:56:64:e8:9e:84:07:19:05:2b:b2:ec:46:8d:ec:89:97:
c0:37:c9:a8:52:92:09:ac:0a:ee:2a:68:df:9f:96:93:18:eb:
b6:21:ef:e7:c2:f1:27:3b:be:9e:7a:92:12:96:8a:95:b6:3d:
7f:54:e6:9c:9f:53:90:ce:21:f0:18:06:c8:cf:74:bf:a8:13:
03:6b:95:70:b2:6c:95:ef:44:b3:8e:87:18:25:df:73:f0:45:
f1:57:4d:3d:2c:55:03:9f:04:03:db:cf:b7:84:71:6e:9f:5d:
6e:58:e5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:16:06 2025 by rpki-client