Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddba021f-a64e-315e-a472-ac4acea6c424.roa
File: ddba021f-a64e-315e-a472-ac4acea6c424.roa (raw, json)
Hash identifier: 9hW2CqF1uusahKr/SIJwhgcDC9ZVB80nLqpx3bpUvxs=
Subject key identifier: 9D:2D:4D:7B:90:C1:EB:FF:05:67:F0:67:97:53:9D:DF:2A:D9:02:71
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584453DEE453607AB5FC6F090A50
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddba021f-a64e-315e-a472-ac4acea6c424.roa
Signing time: Mon 25 Dec 2023 02:00:15 +0000
ROA not before: Mon 25 Dec 2023 02:00:15 +0000
ROA not after: Sun 24 Mar 2024 01:00:15 +0000
asID: 212238
IP address blocks: 23.26.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:53:de:e4:53:60:7a:b5:fc:6f:09:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 25 02:00:15 2023 GMT
Not After : Mar 24 01:00:15 2024 GMT
Subject: CN=d144b582-6ed1-4a9c-a3d5-b5e0e56cfb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:2a:8f:37:d2:d3:53:8e:9f:9d:16:59:28:
aa:77:7f:9c:ec:71:97:a5:80:fa:85:9f:83:64:4b:
55:90:59:35:2e:e7:89:ee:5c:49:65:bd:a3:c7:9d:
78:f8:21:59:f1:3c:f3:a9:70:d9:88:e6:84:2f:70:
8f:58:a6:cf:3c:db:ec:b4:ee:f2:97:38:d9:0a:fc:
80:e6:ec:bd:59:84:f6:0a:4b:19:4c:a2:36:d0:40:
fa:21:f5:cc:08:ed:18:74:32:25:08:55:ad:22:0d:
06:1a:f2:00:b6:a1:20:3b:67:c8:14:16:03:d1:7c:
26:98:fa:cc:a4:c0:ef:42:2e:1d:72:55:a3:11:0d:
97:45:e4:a0:10:93:66:76:92:b6:a5:9b:42:95:6b:
03:50:7f:3d:54:77:43:12:db:46:11:9c:d5:1c:e4:
3e:46:ec:b8:71:f6:55:9e:bf:a9:8b:08:54:87:25:
57:a5:b3:e6:1a:d1:a8:dc:12:ef:2b:e5:de:88:40:
6d:31:03:8f:52:38:37:f5:44:a2:1d:71:b2:5d:a8:
be:50:79:55:7f:0a:08:4b:39:8b:d1:36:85:16:88:
7c:39:1c:23:3a:81:d0:d9:be:82:70:fe:fd:55:26:
40:3e:44:af:7d:62:a1:ac:b0:58:0a:c2:bb:79:14:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2D:4D:7B:90:C1:EB:FF:05:67:F0:67:97:53:9D:DF:2A:D9:02:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddba021f-a64e-315e-a472-ac4acea6c424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:5b:21:5b:00:3f:ff:ca:84:0f:db:79:ed:db:26:84:e6:30:
69:63:71:15:ce:cb:b4:27:6a:23:e2:57:a0:04:ff:92:a2:fb:
e0:de:ea:35:25:bb:20:ab:47:96:df:66:2b:dc:4a:46:b5:8a:
95:fb:9c:e6:7b:c6:c1:40:36:0d:fb:56:4c:65:45:37:8f:56:
08:6f:ea:5a:27:af:7c:58:47:4c:d3:ab:a4:22:7a:93:e8:32:
2f:c4:6d:31:6b:cc:1c:05:ef:36:7e:95:b0:f6:ee:2f:ea:a4:
50:7b:8b:f4:1d:51:0b:45:e1:a0:2b:b2:a0:01:3c:bb:f0:18:
88:36:05:b8:0e:0d:b2:55:69:80:ed:73:3d:7e:89:1d:08:ca:
85:c4:08:03:bc:b8:25:62:8c:dc:e0:72:a9:22:82:fd:7d:fa:
dd:86:98:3b:5b:3c:f0:9e:76:59:90:4b:07:99:60:54:d4:93:
88:9b:20:48:94:ee:8f:9f:8f:1c:13:a5:50:0a:fa:c9:38:da:
a3:90:6b:3f:6a:eb:88:52:f1:4a:d7:09:30:9a:00:8d:7b:a5:
a1:b1:18:3f:60:92:15:a3:0c:35:4c:f3:f1:80:6b:d4:be:86:
a6:34:bb:11:56:23:77:a6:56:f2:2d:b2:65:5e:a0:48:61:70:
57:55:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:04:35 2025 by rpki-client