Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e59f82dd-7bf7-3e2f-8203-8994cfe43272.roa
File: e59f82dd-7bf7-3e2f-8203-8994cfe43272.roa (raw, json)
Hash identifier: tY1ueI2MydDb6QD9I7MiZY7x5quX13S+M4zkrjud2DI=
Subject key identifier: 43:FE:9F:10:73:45:3F:C6:1A:4E:EF:EF:BB:F4:16:DA:DF:C1:51:5C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844159E5C5B27921FBCD6326C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e59f82dd-7bf7-3e2f-8203-8994cfe43272.roa
Signing time: Sat 02 Dec 2023 18:50:11 +0000
ROA not before: Sat 02 Dec 2023 18:50:11 +0000
ROA not after: Fri 01 Mar 2024 18:50:11 +0000
asID: 21859
IP address blocks: 23.26.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:15:9e:5c:5b:27:92:1f:bc:d6:32:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 18:50:11 2023 GMT
Not After : Mar 1 18:50:11 2024 GMT
Subject: CN=574d0240-5261-4661-b771-5323e92d44b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:05:87:f8:14:3c:c8:95:ba:42:2f:25:46:
a6:6c:53:9a:c9:a8:1f:6e:e2:40:b7:ec:40:de:8a:
70:fc:f5:29:13:b8:21:52:5d:a0:e4:b0:34:34:05:
33:2e:15:5d:7e:04:9d:eb:37:70:fc:c3:ed:e4:49:
d3:64:3d:f2:0a:29:d9:20:39:fa:23:d4:49:e7:b1:
b2:61:a2:8b:e3:19:3b:9e:51:8f:20:c9:f1:f6:14:
82:6f:0b:ba:73:42:dc:3e:2a:07:e6:72:76:91:3d:
a9:bf:1c:9b:60:0a:90:e8:a1:92:6a:15:e9:49:e4:
db:57:c7:69:d0:0e:42:8b:0e:4a:dd:d1:65:38:bd:
ee:ac:06:04:cc:6e:9f:98:98:ae:86:06:7b:d7:f3:
3f:0f:6c:6f:df:e0:91:a4:9b:fb:d5:c2:bf:70:c0:
01:b6:ab:bd:f9:a6:43:d9:76:96:4d:03:26:76:7c:
6b:90:0f:47:b1:e6:a0:6c:1b:ac:f2:5a:28:a7:90:
f4:8b:ab:09:11:6c:30:a0:2b:5d:d4:b0:2f:87:03:
2d:d7:c0:62:16:07:4a:08:56:c2:bb:08:1d:f1:43:
3a:3c:d9:5e:4e:4d:98:73:43:66:64:09:45:87:a5:
4d:cf:40:07:07:f3:94:6a:05:c8:21:9b:2c:63:2d:
c1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:9F:10:73:45:3F:C6:1A:4E:EF:EF:BB:F4:16:DA:DF:C1:51:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e59f82dd-7bf7-3e2f-8203-8994cfe43272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b0:63:60:78:10:2d:ec:e6:05:b2:99:6e:3f:ce:26:3a:3c:
e1:cb:a1:66:00:0a:40:b5:f6:a3:1b:da:40:35:85:4a:e5:dc:
42:b2:80:61:55:9c:82:bf:e1:02:59:d7:0f:5f:aa:8c:52:55:
9c:ce:06:da:57:f7:c7:fb:51:99:50:4a:ce:4e:17:d8:69:66:
63:a9:49:f1:12:90:1c:f0:71:70:78:c3:aa:9e:df:2f:55:69:
ab:94:e3:47:17:7d:e5:c6:ee:6b:a7:a4:06:e8:97:d4:9d:38:
09:44:8e:76:f5:94:5e:ce:c9:c0:87:22:0e:f2:51:c4:e3:b1:
ae:6a:2b:a2:fc:17:57:ba:f2:24:29:c8:ec:7e:80:c6:7e:96:
31:0b:32:14:ae:3a:c2:6f:34:10:53:22:d1:98:a0:9c:8b:ef:
53:38:d8:4f:6e:9c:7a:af:2d:bc:3f:66:81:90:37:36:06:6c:
31:6f:70:33:df:b1:35:3c:f4:be:c8:3e:19:28:3e:29:c4:2b:
43:37:ec:e6:04:8a:95:c5:75:6c:21:2b:e0:76:6d:23:9f:6f:
65:32:37:7e:8c:80:f9:68:d4:b6:fa:26:d1:c6:6d:2f:bf:1a:
1a:c9:44:04:34:74:d2:cd:28:34:d8:0b:9f:90:90:85:73:69:
2c:74:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:26 2025 by rpki-client