Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f8eb1453-eddc-3a70-bee1-b4719b50493a.roa
File: f8eb1453-eddc-3a70-bee1-b4719b50493a.roa (raw, json)
Hash identifier: fsc+6maTgMpV3f1e6bpKdmnpYev1xxgK9dDHu4nZPYw=
Subject key identifier: A3:30:7A:48:F1:FC:AF:A6:70:00:DE:67:60:F1:F7:6E:08:9E:72:AC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858484C1036CA426E0F299338CF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f8eb1453-eddc-3a70-bee1-b4719b50493a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 31898
IP address blocks: 23.26.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:36:ca:42:6e:0f:29:93:38:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0479697b-8c15-4704-8954-4c15e348ae48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:f5:92:24:35:63:ce:ff:0c:32:24:b7:a6:
39:c3:db:6b:e3:e0:cf:a8:1d:cf:b1:4c:bd:97:d5:
77:4b:29:db:c1:27:08:08:8f:35:88:29:b0:f9:1f:
0e:8d:ad:8b:29:15:72:bf:40:6d:09:ae:b6:c5:f2:
0f:29:89:ca:d1:24:53:a1:2d:3d:62:f7:b7:27:ff:
61:f9:d6:cc:a1:2e:19:f7:5d:f0:27:1f:24:fe:63:
04:a6:29:74:7d:12:e0:43:9d:0b:0e:c1:9a:7d:e6:
3b:c6:fe:9d:d2:7e:44:45:fa:a2:48:3f:cf:39:fc:
de:cd:a7:20:e2:d3:0c:17:a4:3f:7b:0f:1d:c5:c2:
8e:30:5f:81:95:62:b8:dd:7c:d2:83:b4:2d:d1:de:
96:af:ca:ac:cf:a0:a1:49:79:b2:32:02:b3:b4:9f:
4a:ea:45:3f:ed:0d:24:fa:9a:7c:e1:41:09:6d:b0:
17:d0:ff:52:e5:a4:7c:1b:fb:14:99:65:12:e3:ec:
ce:64:b3:5a:2c:8e:cf:3e:51:25:58:05:e5:9d:00:
83:fe:b8:45:ad:c1:6a:72:98:1b:91:b5:f3:0d:ec:
5c:2f:89:88:f6:77:68:0f:cd:21:e3:71:63:ef:c4:
be:ed:14:15:a1:32:26:c0:47:43:d9:8b:79:fd:db:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:30:7A:48:F1:FC:AF:A6:70:00:DE:67:60:F1:F7:6E:08:9E:72:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f8eb1453-eddc-3a70-bee1-b4719b50493a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:85:63:bc:8c:b8:9e:e7:cc:41:d1:a6:07:4a:cd:0d:2b:8a:
84:31:2e:b0:69:fc:59:44:6b:7e:6b:d8:cf:be:87:c9:d1:97:
3d:5d:35:c2:13:5d:ef:68:62:85:4f:cc:0e:ba:95:a6:c9:ec:
3a:55:f4:f9:ee:c3:02:21:d3:48:3c:4a:03:f8:0a:6b:bf:b5:
26:29:dc:96:f8:63:8d:47:77:51:3d:d4:aa:0c:53:d8:bb:61:
d5:a7:75:07:12:a5:de:ba:12:6a:c2:e6:89:66:c2:5e:8e:b9:
54:44:22:3e:c7:16:cd:77:e1:8c:59:4d:50:22:e3:08:f9:32:
a0:b8:b3:1e:82:8f:7f:4b:cf:7f:6c:22:25:b6:61:87:10:6a:
80:ec:d7:5a:d8:1f:46:f7:b8:a5:9e:dd:90:eb:78:8b:21:33:
36:b1:29:31:25:9c:c6:eb:cc:a3:e2:42:e9:5a:40:67:4d:22:
b0:96:30:7b:c4:bc:79:08:0b:c8:e1:d3:d4:cc:9f:50:2b:e7:
84:26:d7:29:54:93:88:21:c2:2c:fc:b9:f7:a2:a2:c1:d6:9c:
bd:76:72:5c:f3:83:97:87:bb:9a:9b:67:fb:67:f8:87:15:7f:
e3:e0:45:02:34:8b:e8:d5:87:65:d8:56:11:1c:d1:6b:39:7e:
78:c4:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:51 2025 by rpki-client