Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef2bf8ae-abe7-3f3b-94a4-d31bda3ee776.roa
File: ef2bf8ae-abe7-3f3b-94a4-d31bda3ee776.roa (raw, json)
Hash identifier: 4QdJvVIdKzsyR8irU25kVxVP+Rk8lolZLkQbNkdWSxk=
Subject key identifier: FE:AF:BA:EB:1E:D6:4C:7E:FD:ED:43:85:B4:81:E0:F7:3C:01:2E:4F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845E4DBDBFF4369A2911B07D580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef2bf8ae-abe7-3f3b-94a4-d31bda3ee776.roa
Signing time: Thu 16 May 2024 17:13:22 +0000
ROA not before: Thu 16 May 2024 17:13:22 +0000
ROA not after: Wed 14 Aug 2024 17:13:22 +0000
asID: 834
IP address blocks: 23.26.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:e4:db:db:ff:43:69:a2:91:1b:07:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 16 17:13:22 2024 GMT
Not After : Aug 14 17:13:22 2024 GMT
Subject: CN=0a1e10ff-1a88-4ed3-991e-b0f2b86d36c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:fb:b7:fd:fe:2f:82:8b:c9:a4:4f:74:27:
96:b1:27:9e:b1:bb:0c:ff:63:83:01:dd:a8:b3:56:
fd:70:57:59:3c:48:91:ad:b0:22:ce:97:2f:64:77:
cb:e7:a5:93:4c:d4:dc:b1:30:d7:d9:fa:06:92:3c:
0c:ed:12:1e:14:33:f2:4f:a9:48:0f:19:35:98:c2:
9b:46:eb:0d:76:07:5f:f6:0b:ee:71:07:f3:86:e1:
11:91:39:dc:9a:bd:85:7a:48:80:ba:ca:59:51:8a:
7f:24:f2:27:cb:db:a4:1f:db:78:f9:05:78:d9:18:
dc:2e:19:df:f8:6c:78:52:6b:31:03:d2:ff:c3:38:
01:5b:fd:3e:da:89:da:5c:0c:2b:98:a7:f8:b1:0c:
89:e9:7e:e7:3b:aa:62:43:ff:b0:79:35:0d:66:a4:
66:2a:94:ce:9f:0e:11:06:50:44:e9:41:be:e5:43:
4a:03:40:26:6f:ff:d2:d1:b5:00:50:7b:7f:63:a1:
2f:ef:88:14:54:a5:8e:15:44:de:39:ac:22:9e:1d:
df:95:70:6c:3b:05:e8:c5:e2:58:79:a9:3e:59:3a:
d4:6e:5a:33:d1:db:1f:f5:93:73:b0:a5:ed:4c:df:
2d:27:14:1e:58:bd:df:7f:c2:f4:b8:bc:06:57:ec:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:BA:EB:1E:D6:4C:7E:FD:ED:43:85:B4:81:E0:F7:3C:01:2E:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef2bf8ae-abe7-3f3b-94a4-d31bda3ee776.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:90:08:ba:34:71:a7:e3:c9:b9:0f:3d:99:8b:a5:ac:36:c2:
8c:7b:d5:60:ce:58:3a:ac:81:72:d6:4f:c6:72:05:5f:cd:d7:
72:ba:26:20:9f:c4:e0:f9:93:df:ef:5f:54:64:2b:eb:34:13:
5d:1c:ab:6c:69:18:58:6e:cf:99:81:f9:b6:27:0e:07:31:c5:
ff:91:34:00:7c:dd:d2:bf:20:58:79:dd:25:2a:2d:a0:53:88:
7a:61:82:d5:79:02:cb:61:d5:5b:5d:2b:75:3c:f6:36:69:3c:
16:59:94:10:7c:43:cb:0b:56:c7:f6:0b:89:89:2d:c7:8b:4d:
9b:d1:2c:ed:b2:81:37:c7:bf:ba:04:8c:fd:f8:ee:7c:10:4a:
7c:f0:8a:35:3b:df:63:f7:85:99:c6:50:c9:47:ce:84:1c:d4:
a2:a4:00:55:f8:89:61:13:25:83:7c:99:fb:92:1b:c9:09:a4:
47:70:08:4f:f4:a9:50:53:ee:b2:ed:fd:bc:96:61:5e:56:7b:
3b:2a:51:de:b7:b2:26:88:ae:49:0b:ce:a1:4b:a3:9d:50:32:
ac:d2:61:5b:5f:e7:09:e8:72:7a:5e:60:13:fd:3d:b2:52:ad:
7a:d6:63:c2:72:30:41:db:ee:64:e2:96:41:5f:60:49:f9:52:
01:80:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:26 2025 by rpki-client