Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0f751d2-ce8b-3f66-89ac-f749cf83f37c.roa
File: e0f751d2-ce8b-3f66-89ac-f749cf83f37c.roa (raw, json)
Hash identifier: vfPVVn9uL2XIRTLonXEMszYKnj0P/opLH/slaHF8hXI=
Subject key identifier: 1F:0D:C8:00:B7:4E:28:7C:E0:DC:82:E3:1E:BF:90:C2:FB:28:FF:32
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844A79F77EE68EFC6AE995F2DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0f751d2-ce8b-3f66-89ac-f749cf83f37c.roa
Signing time: Wed 24 Jan 2024 02:00:26 +0000
ROA not before: Wed 24 Jan 2024 02:00:26 +0000
ROA not after: Tue 23 Apr 2024 01:00:26 +0000
asID: 63023
IP address blocks: 23.26.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a7:9f:77:ee:68:ef:c6:ae:99:5f:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 24 02:00:26 2024 GMT
Not After : Apr 23 01:00:26 2024 GMT
Subject: CN=24f7024f-e393-4b2e-9e6e-cb1adab62b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:85:f1:4d:57:be:ab:d4:cb:32:1a:ae:5a:
79:0b:06:ad:f3:20:1a:b0:e8:f4:60:b7:ba:96:95:
fd:80:1c:e0:a9:ca:78:b0:a2:8e:67:25:27:ee:c9:
1e:71:cd:d6:e4:f2:2d:a2:b2:df:0e:a2:45:8f:67:
f3:3e:d9:46:a3:8f:39:af:1a:11:53:41:18:17:b8:
46:74:23:41:67:b1:b4:75:1e:b3:43:81:eb:46:41:
32:36:fa:58:28:3b:8a:de:18:9e:4c:55:85:d3:43:
a6:0d:58:53:59:a1:1d:35:5c:89:d9:78:3b:1a:8d:
ab:e5:9d:88:5f:60:42:1a:51:a1:86:57:e9:43:7b:
71:79:3d:c4:d7:96:72:a2:9e:d4:7f:73:81:31:6e:
95:31:b7:7d:bd:a2:85:c6:5b:f6:dd:ee:fb:7e:e1:
14:a1:5b:e0:0b:01:81:10:90:45:77:ce:ce:1e:a3:
62:6c:ee:85:53:7f:9e:91:b7:ef:8b:a3:28:37:23:
70:eb:db:db:0d:0c:f6:20:33:97:2e:d2:86:28:cc:
71:ce:ea:69:3b:f0:08:63:48:6f:04:03:84:37:55:
3f:07:7e:6c:f3:39:d4:31:3a:e5:96:d6:be:66:a0:
97:60:a2:11:de:1d:c7:96:60:9f:81:f7:9a:f6:a5:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0D:C8:00:B7:4E:28:7C:E0:DC:82:E3:1E:BF:90:C2:FB:28:FF:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0f751d2-ce8b-3f66-89ac-f749cf83f37c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:f0:5b:0b:a6:50:83:db:87:15:20:f3:45:47:33:07:66:a4:
24:b5:3c:69:69:95:af:f2:ac:1f:94:36:94:05:15:33:83:c4:
95:48:f6:2e:f7:60:4e:4a:06:42:22:12:25:cd:89:1f:52:48:
12:ab:7d:3d:ca:60:fc:59:89:aa:5c:2f:0a:76:82:3e:76:72:
d0:c5:ea:75:73:e9:23:0d:9f:20:d6:93:76:7f:de:0c:1a:a4:
2a:d2:09:c2:4d:1a:62:ac:a9:58:92:5c:33:2d:7d:ae:30:2a:
fa:df:a1:21:8f:36:70:c2:9d:79:af:fe:64:56:6d:21:7d:80:
97:45:63:f2:e3:8c:ce:4f:da:4a:d3:ac:c0:70:dd:12:65:dd:
5b:24:60:ed:17:ea:b4:01:0a:ea:cb:ff:d5:04:07:ad:24:58:
d6:00:2f:e5:50:18:6d:e0:8d:a5:a0:de:18:00:18:b7:88:1b:
27:a5:e6:7a:49:a2:cf:ec:7d:02:31:4a:7b:46:a6:6e:9f:87:
22:9f:bc:d5:f6:c7:ae:f4:5e:b8:58:a3:b1:c0:24:a9:d4:ca:
2b:1c:c7:b5:9f:68:e4:92:7c:f5:a3:39:bf:0e:71:02:50:2f:
74:18:3f:74:3f:c7:aa:de:e5:37:9a:57:36:be:9f:9e:fb:ee:
f2:d6:3d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:07:03 2025 by rpki-client