Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f9658b53-cda9-3f95-9e44-96275a5e0729.roa
File: f9658b53-cda9-3f95-9e44-96275a5e0729.roa (raw, json)
Hash identifier: 2m/NaFCWY3vS8Ga4cqxWGEfMLduTq5VHLEmO32bG2LA=
Subject key identifier: 0C:B1:54:BA:1D:8C:6B:23:3B:86:A2:F9:5D:42:F0:61:B7:CB:AE:F6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584633EEE4DDC2E2C529680F14A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f9658b53-cda9-3f95-9e44-96275a5e0729.roa
Signing time: Fri 14 Jun 2024 01:00:26 +0000
ROA not before: Fri 14 Jun 2024 01:00:26 +0000
ROA not after: Thu 12 Sep 2024 01:00:26 +0000
asID: 54600
IP address blocks: 23.26.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:33:ee:e4:dd:c2:e2:c5:29:68:0f:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 14 01:00:26 2024 GMT
Not After : Sep 12 01:00:26 2024 GMT
Subject: CN=b8c74c9f-73fb-4b34-bcd7-b93fe1e0070b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:a3:b0:ea:a3:5b:c9:52:58:90:bc:3a:0a:
c4:91:79:48:ef:54:22:70:c4:6f:36:cf:e2:ac:e4:
53:bc:57:80:a0:d6:c1:9a:fd:bc:88:01:d7:9c:83:
e9:d9:b6:1f:19:24:e3:03:ec:4b:33:d9:ea:5f:eb:
b1:4a:b5:24:1e:c2:2d:b8:c9:00:63:86:f2:02:de:
cf:00:53:e7:3d:ce:1f:37:2b:9d:95:4b:3b:6e:c4:
9a:10:a8:89:44:44:fb:7f:f2:97:38:d6:05:f8:99:
50:cd:0b:7e:3c:2f:d6:1d:77:6c:fe:fc:20:92:83:
e1:25:04:b7:ed:02:fd:63:ac:4c:48:88:11:b8:4e:
c5:15:79:ef:5e:ba:3a:29:d3:a6:11:b2:ae:24:fc:
6d:e2:ff:64:76:77:3b:04:25:4c:69:30:c8:d2:c5:
66:7e:ed:02:6d:60:36:ac:64:d7:40:36:33:65:7b:
5e:b8:f8:76:a9:64:1f:5d:29:6d:0f:40:1e:c4:8f:
1d:8e:56:1c:c0:6a:71:a1:6d:b2:b1:bb:5b:22:68:
11:9a:c5:bc:9d:ff:97:b7:95:b8:06:68:85:fd:91:
03:75:ba:ef:6a:73:d1:1d:78:be:d9:23:4b:f1:ad:
86:d8:4b:58:8f:6e:de:2e:9a:00:f3:3f:31:ce:a3:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B1:54:BA:1D:8C:6B:23:3B:86:A2:F9:5D:42:F0:61:B7:CB:AE:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f9658b53-cda9-3f95-9e44-96275a5e0729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:ea:10:37:0c:5b:df:54:ec:39:a4:e2:ad:dd:2f:15:b1:2f:
46:72:0e:cd:db:ef:d6:de:7d:6c:72:3b:47:6a:15:ee:c4:e1:
b1:94:29:73:fa:86:36:c1:6e:f7:b6:aa:5d:46:df:b1:a8:55:
4e:c1:fb:73:2b:cd:52:ce:b2:dd:b4:f7:0e:51:3b:99:7d:0c:
05:28:07:86:69:62:5f:83:f4:85:73:90:57:ec:db:d5:a3:2a:
a0:59:2c:45:22:35:04:bb:bb:a3:34:3a:23:0b:8e:ea:3b:d8:
fb:87:97:51:4e:12:77:74:54:80:fe:3d:55:77:8d:d6:1f:bb:
58:59:c5:ec:b7:01:01:7c:ae:8a:b7:15:0c:71:a4:cb:b3:7a:
7a:f3:25:90:49:f1:c2:72:66:df:82:d6:54:c9:ac:3a:8a:ba:
08:7d:62:c7:da:76:02:83:46:e1:f8:1c:db:49:78:71:3c:3d:
df:3f:61:c6:e0:e2:5e:d4:d2:41:e5:8c:2c:2f:60:8f:47:2a:
6a:f8:07:44:e9:a4:86:19:5c:b2:49:be:5b:6c:79:b8:da:13:
35:5d:0b:a0:32:8c:e1:38:bd:15:96:2b:39:ba:48:83:c4:6a:
7c:65:9e:c1:f0:ab:cb:43:d6:a1:3e:c7:b5:f9:5e:ad:9b:74:
54:24:cb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:23 2025 by rpki-client