Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8a7d3bf-3d25-3f45-beec-6ac4a4e47ae5.roa
File: e8a7d3bf-3d25-3f45-beec-6ac4a4e47ae5.roa (raw, json)
Hash identifier: BnD47PW4iYnvjsH+yidcr52AkeR41W6edCuOXSSloxc=
Subject key identifier: F8:D1:F0:BC:35:DA:53:33:00:DB:0B:2F:12:0A:5F:86:0A:D0:F4:07
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E44707A99A010A9814C8FEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8a7d3bf-3d25-3f45-beec-6ac4a4e47ae5.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 12 Aug 2023 12:41:45 +0000
asID: 140155
IP address blocks: 23.26.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:07:a9:9a:01:0a:98:14:c8:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 12 12:41:45 2023 GMT
Subject: CN=d5998ffb-8b89-40d6-86b7-0712b02bdda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:64:a1:17:1f:95:6b:f6:e4:79:a7:66:53:
27:bb:f7:b1:b0:a7:43:82:45:63:ed:4c:28:c1:b6:
2d:1b:ee:ba:3f:aa:70:c5:5d:df:18:77:78:f7:35:
31:f1:d5:88:c5:b6:c2:fa:7f:07:80:2a:46:1d:7b:
fb:3a:08:30:6d:06:0d:12:da:50:d4:d4:8a:95:41:
51:c7:31:2b:f6:12:a3:3c:c1:c3:31:4b:4c:30:3d:
84:9e:78:0b:c2:7a:d9:a6:69:6d:be:d7:8e:f8:b8:
a2:29:e0:95:84:65:08:53:bb:83:b9:a2:d6:87:0c:
e0:bb:7c:aa:3d:21:ad:ac:6f:48:e2:44:e8:c0:17:
fc:4c:d8:6d:ee:9d:3c:e4:69:9f:7c:15:59:13:7b:
b1:1e:6b:b7:db:3b:f5:f8:88:49:84:65:26:af:6f:
9f:71:38:9a:94:36:12:fd:be:dc:1a:a6:5b:81:79:
24:56:ab:d7:0b:75:6d:32:04:be:2b:37:96:9a:34:
88:b0:13:69:e9:e9:1a:4a:8e:f2:05:62:ab:95:ba:
c0:04:66:9b:8d:e8:a8:1b:4d:57:23:b5:05:d1:ed:
46:7a:57:34:ca:a2:b4:b8:8b:1f:6a:ad:a6:2a:1f:
58:b7:6d:93:50:bb:f5:09:2a:c4:e1:88:43:5b:42:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:F0:BC:35:DA:53:33:00:DB:0B:2F:12:0A:5F:86:0A:D0:F4:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8a7d3bf-3d25-3f45-beec-6ac4a4e47ae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:98:43:46:39:6c:bf:f1:0a:e1:02:3d:76:b1:37:db:ea:c8:
f8:ba:b2:5a:43:c1:d2:62:d6:10:43:8d:df:9f:f8:61:8a:31:
77:1d:40:35:ab:ef:13:4b:f3:0c:f8:d4:f9:43:8d:c0:b8:e8:
0f:4e:2d:49:13:47:c9:a6:b9:04:ce:96:81:86:11:f9:ab:77:
ea:5b:7f:2a:f4:82:20:94:37:32:29:cb:8c:46:0d:9d:78:00:
84:4a:44:d2:f7:9d:08:08:da:e6:2b:7d:2f:ce:6f:94:2f:49:
15:14:2a:c1:95:7b:c4:c8:7d:76:99:99:bc:c6:a6:4d:9c:e2:
a4:55:7a:5f:2d:cb:73:ca:cd:1c:85:82:b9:3b:63:4f:67:47:
38:b8:c5:dc:b1:cd:7d:30:76:4a:b6:26:32:11:08:6d:b3:fe:
82:78:d4:a6:fa:36:87:06:ef:49:0c:65:4a:cc:7a:4d:84:23:
f2:62:a3:9d:81:66:cb:0f:b7:7b:e6:4e:15:9b:8d:19:72:21:
47:09:a0:c5:64:fd:73:fe:43:cb:d1:dd:a0:97:d8:69:a6:8b:
05:2d:c6:3c:bb:87:43:bf:aa:e1:d5:7e:fd:0e:0f:50:96:a3:
5d:11:38:c3:79:b3:e2:ab:be:79:a5:29:a0:51:04:4d:d7:f3:
fd:ff:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:55 2025 by rpki-client