Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f87a652d-bee0-3e08-bbf6-0a74586c64e8.roa
File: f87a652d-bee0-3e08-bbf6-0a74586c64e8.roa (raw, json)
Hash identifier: dQVgPksVDLT4YxDK6aSmyY5Nxa99+1SCAq+i8+lCS2Q=
Subject key identifier: 8E:AE:80:7E:81:97:7E:01:3E:54:48:46:4B:7D:2E:C5:62:86:03:1D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858467443BF42FB06D76568AF5980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f87a652d-bee0-3e08-bbf6-0a74586c64e8.roa
Signing time: Sun 07 Jul 2024 02:03:17 +0000
ROA not before: Sun 07 Jul 2024 02:03:17 +0000
ROA not after: Sat 05 Oct 2024 02:03:17 +0000
asID: 834
IP address blocks: 23.26.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:74:43:bf:42:fb:06:d7:65:68:af:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 7 02:03:17 2024 GMT
Not After : Oct 5 02:03:17 2024 GMT
Subject: CN=f270d55f-7d1f-47b9-af08-f22f255116a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:b6:1e:0d:61:97:c1:37:ad:c5:19:a6:0e:
e7:9f:e8:9e:bd:f6:fa:3a:32:6f:8c:68:9e:72:27:
0c:37:83:37:1d:0f:fd:2e:5a:6d:be:31:a7:95:ee:
e2:00:31:09:fa:7f:f7:db:15:ed:b1:7c:6c:44:f9:
f4:a1:5b:e4:85:be:f1:4e:e5:88:9d:cc:c6:12:a9:
5b:c8:af:df:71:62:4a:54:dd:22:93:c0:fc:68:1d:
b7:b1:82:97:ee:60:38:38:a2:3e:45:c9:96:9c:15:
fd:68:11:b5:eb:b0:a3:3f:0b:2d:e8:ed:02:4f:39:
22:2c:f7:37:5d:2b:ac:cb:89:40:88:20:75:78:5b:
1d:23:b8:c7:17:a8:2b:20:d6:88:04:cf:35:0e:92:
59:8b:e7:2d:f4:2f:f4:e1:f7:cc:9c:97:07:15:94:
26:cc:72:f7:b7:2c:76:83:e7:bf:05:97:87:e8:18:
dd:50:ea:7f:e8:6b:e8:28:26:52:13:be:e8:03:7d:
ee:36:4c:56:6e:61:03:43:dd:00:5d:d2:a2:cd:87:
bb:22:02:7c:66:c1:b4:49:6a:cf:68:2c:30:62:04:
84:e2:4f:a4:37:09:36:66:be:fa:c5:80:cc:63:8a:
e8:51:60:57:78:85:33:85:e6:e8:33:c8:41:4f:74:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AE:80:7E:81:97:7E:01:3E:54:48:46:4B:7D:2E:C5:62:86:03:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f87a652d-bee0-3e08-bbf6-0a74586c64e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:a6:d4:b7:17:ca:a9:f6:b8:b1:70:1b:0f:97:88:c8:79:40:
b2:1c:a7:d4:bf:42:0e:79:1e:15:7a:63:14:53:63:26:ac:3b:
3a:cd:6d:6c:d0:e2:2a:01:9e:c6:b3:8f:5a:3f:b2:ea:ac:93:
23:0f:7f:c6:26:c7:d8:9d:9f:b7:87:fb:38:fd:d1:dd:fe:00:
df:91:c8:1f:6b:25:30:86:59:e3:05:b8:b8:16:1f:c8:4c:2d:
6c:94:54:2b:c1:c2:31:a1:7d:94:51:b5:72:67:8a:56:9b:e2:
3d:d6:6e:f3:4d:c6:49:e8:71:1a:64:23:a0:40:f5:e1:36:f8:
7a:aa:c4:1b:63:b9:75:83:db:63:b2:44:ac:26:e7:69:73:c1:
7a:66:19:7f:22:df:14:d7:12:87:91:87:77:21:e8:b4:7c:49:
25:d9:18:a4:3d:6d:83:c1:36:fe:3f:ec:f5:7b:88:86:45:1c:
07:cf:a0:92:76:09:25:ff:c9:6c:76:38:1f:b9:ee:bc:ec:3e:
fb:1e:9c:38:f7:c6:e5:eb:c8:da:5d:4d:e6:b6:da:22:3e:ac:
a6:5e:4e:ee:4a:f4:26:4e:c9:94:17:30:8f:bc:f6:e1:c5:58:
a9:bd:1a:63:da:62:a7:95:af:3c:42:be:d7:f3:21:ee:b6:f0:
e2:dd:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:10:22 2025 by rpki-client