Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de153cc5-c81d-3d44-acef-a8b8c7212228.roa
File: de153cc5-c81d-3d44-acef-a8b8c7212228.roa (raw, json)
Hash identifier: JaXmQ14U4fx1JEWD9qt/F4aYyE+/QBJCrb8h5XuISd0=
Subject key identifier: 0A:7A:88:17:F9:57:2F:C9:25:67:33:22:E2:11:68:A0:DE:B1:37:49
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584766138EE9D9E03B3004E7B380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de153cc5-c81d-3d44-acef-a8b8c7212228.roa
Signing time: Tue 01 Oct 2024 16:51:49 +0000
ROA not before: Tue 01 Oct 2024 16:51:49 +0000
ROA not after: Mon 30 Dec 2024 17:51:49 +0000
asID: 834
IP address blocks: 23.26.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:66:13:8e:e9:d9:e0:3b:30:04:e7:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 1 16:51:49 2024 GMT
Not After : Dec 30 17:51:49 2024 GMT
Subject: CN=287e879a-1dbf-41ab-bcd5-4754beba32ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:a1:91:e4:7e:f3:a2:90:d9:45:8a:de:20:
2c:0d:ce:34:51:20:43:06:ff:6a:b2:4a:a2:ea:7f:
49:30:4d:c9:37:d6:b9:4d:98:c1:51:2b:e3:d3:86:
19:41:a1:fc:dd:03:de:39:41:00:bc:c0:70:ad:d7:
0b:89:15:1a:e4:e6:26:7d:83:b6:bc:04:8a:ee:7c:
42:66:53:da:39:aa:70:c0:23:0d:a7:7e:ab:cb:db:
e6:9c:ad:61:63:33:80:bf:84:22:83:ae:a3:08:f1:
1c:9e:fa:e2:0a:63:20:ce:1f:78:21:99:1c:1f:1e:
aa:c9:4b:9f:f4:f8:ff:f4:a9:db:6d:49:99:3c:1f:
a9:aa:83:67:2c:11:e0:43:f5:e4:c2:21:af:50:46:
14:92:4e:ef:13:ae:4a:11:cc:09:89:9d:e1:93:c7:
ee:fd:fb:38:73:47:83:f9:a1:f5:3c:44:c1:bc:40:
c7:1a:57:b8:6e:5b:4a:3a:1c:24:32:60:8f:c7:dd:
00:50:41:fa:e3:78:6a:43:4d:ba:55:bc:91:5e:96:
af:e3:cf:79:76:91:d0:3a:2e:ad:ae:0a:9f:cd:8d:
ec:26:3c:44:a6:2f:f0:86:5c:72:0f:c7:c3:6c:fb:
a1:7c:59:63:27:fa:3e:ce:00:41:2a:e5:67:c9:3c:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7A:88:17:F9:57:2F:C9:25:67:33:22:E2:11:68:A0:DE:B1:37:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de153cc5-c81d-3d44-acef-a8b8c7212228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:4e:91:10:c9:ee:35:21:4b:cf:bb:01:11:a4:14:64:a7:57:
9b:c8:f7:69:d0:24:dd:79:7f:78:42:e5:7c:c8:24:b3:dc:71:
ef:83:e1:62:b9:be:65:3d:98:bc:5c:05:80:e0:3d:cf:41:0f:
9b:23:9b:19:ed:a3:a1:0b:49:89:14:2a:80:d1:7e:70:69:90:
89:75:b8:aa:63:05:42:f3:b8:80:58:fa:db:ac:97:8f:16:b4:
82:b3:bf:61:fa:d8:0e:01:fa:37:9b:3f:c3:61:22:74:38:6b:
e0:93:18:d7:77:ca:8d:c3:f2:3a:53:ec:f5:e4:80:a1:0f:1a:
f3:59:63:3f:19:83:4e:99:e4:ea:ba:53:8d:11:65:ef:ff:9d:
a7:25:ae:69:1f:8b:65:66:40:95:65:04:e5:f1:8c:e9:b3:a4:
7b:85:b7:bc:80:3f:15:03:51:c9:8f:d0:24:7a:11:3e:0a:99:
8d:e2:b5:b3:81:66:55:4b:38:c0:0d:5d:80:06:cb:4b:9d:2d:
c7:fc:e1:84:0d:e7:6f:21:25:ef:75:a0:f3:6e:ff:a8:90:b6:
79:a9:d3:5c:68:9a:d3:e2:14:76:e8:7d:e0:1f:af:90:88:9b:
83:a8:ae:35:72:5b:16:ec:bf:3c:9d:c0:43:64:e3:b1:a8:8d:
d5:87:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:45 2025 by rpki-client