Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcdaeeef-13ac-3fa1-bb59-71804309d429.roa
File: fcdaeeef-13ac-3fa1-bb59-71804309d429.roa (raw, json)
Hash identifier: UbrJiZRhml5NcJcZrfLGOxWGddxqb9PSHTuUFqHINlM=
Subject key identifier: FA:37:32:7C:ED:3C:42:5B:3B:FF:7E:EC:41:81:33:E3:FE:C8:6A:5D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584376510B399A1FB496E7A24762
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcdaeeef-13ac-3fa1-bb59-71804309d429.roa
Signing time: Fri 06 Oct 2023 17:20:53 +0000
ROA not before: Fri 06 Oct 2023 17:20:53 +0000
ROA not after: Thu 04 Jan 2024 18:20:53 +0000
asID: 834
IP address blocks: 23.26.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:76:51:0b:39:9a:1f:b4:96:e7:a2:47:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 6 17:20:53 2023 GMT
Not After : Jan 4 18:20:53 2024 GMT
Subject: CN=99af4855-7e7d-4901-bac3-dbed8cb32d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:cb:e1:10:27:ac:56:10:2e:5c:00:e3:da:
e0:38:86:d1:d2:42:fb:2c:a8:fe:f3:62:9b:3b:73:
74:df:73:84:2f:e0:54:63:b0:8f:b2:5b:5c:42:fd:
36:04:37:55:dd:1e:99:ea:ab:0a:41:4c:9e:ee:10:
44:27:0b:8d:68:2b:02:df:0e:15:78:f7:a2:76:be:
ca:bb:ef:b0:0f:aa:10:ce:cc:5c:6c:bc:bc:7a:71:
41:9e:57:2d:42:5a:69:b1:c0:a5:bc:fc:05:f4:ce:
65:83:0a:26:7e:e2:02:7f:c5:50:68:c3:b2:c1:1f:
d6:a8:1b:f3:8e:b6:d5:bf:fe:a6:dc:2b:34:2f:ab:
ad:3e:a8:21:a9:cc:52:3a:18:a4:25:1e:e6:cb:4b:
39:5b:d6:48:0f:3e:01:a2:23:1b:02:88:da:b8:f7:
b7:28:d7:be:b2:24:c8:96:99:01:5f:1b:ab:5b:dc:
72:32:5b:c4:ae:67:a4:9d:40:d4:5b:07:fb:c7:2a:
4a:4e:71:3f:0e:3f:0f:c1:fc:d1:16:50:33:5f:00:
36:f7:31:8f:cf:93:8f:3f:39:5d:2d:b5:19:33:58:
9c:21:1c:00:48:b5:4f:74:f4:f6:e1:e4:6b:d5:51:
76:14:47:d1:43:69:bf:ed:1e:72:c0:10:65:d0:43:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:32:7C:ED:3C:42:5B:3B:FF:7E:EC:41:81:33:E3:FE:C8:6A:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcdaeeef-13ac-3fa1-bb59-71804309d429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:f9:a6:69:e4:f1:bf:3d:e2:83:29:af:45:12:1d:77:43:c9:
e8:18:e5:84:e8:10:c9:87:db:8b:62:a2:e2:40:9a:9b:57:6c:
cc:87:a4:ea:0e:f4:4b:11:4e:f8:ea:1d:33:61:62:c7:5f:65:
bd:70:37:44:e0:da:19:1a:43:c8:8b:7f:3e:d1:7c:12:6f:c8:
c2:cf:08:c6:9e:ab:7b:89:9a:cf:90:7a:9e:26:91:5c:19:35:
43:91:bf:76:ba:3f:b6:7a:fa:f3:3c:49:f7:2b:33:51:06:26:
cb:7b:15:55:7b:46:b5:e6:dc:53:74:e4:2c:f6:82:e9:5d:7a:
4f:2d:e1:74:25:ad:f7:f2:a9:34:bf:5b:4c:af:ea:d5:2e:7a:
12:86:93:06:d7:ff:37:39:f4:35:88:74:f5:0f:a4:03:17:43:
2e:d3:f5:d7:da:80:05:7d:e8:4d:8e:f4:31:f1:d0:3b:a5:3b:
1c:2f:e0:f8:88:f7:84:28:c7:1b:9d:1f:67:00:e5:b5:63:43:
3a:3d:86:c3:23:6a:b1:23:13:51:44:88:66:a9:61:3f:e5:8a:
97:8c:af:90:8e:b0:49:65:3a:c4:b7:5a:a4:22:8e:b7:68:73:
79:2c:1b:f4:ef:57:25:7d:57:00:65:39:80:77:b8:51:35:27:
6c:af:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:26 2025 by rpki-client