Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd325e68-a208-3352-9d0c-1d50951fbeef.roa
File: fd325e68-a208-3352-9d0c-1d50951fbeef.roa (raw, json)
Hash identifier: VPf50o+DMu08c4sPyZKzRcS5VVYmpwQPooTY4c+cPY4=
Subject key identifier: 1B:CF:9B:3E:F2:53:81:5E:08:5B:87:9A:94:C9:68:22:9F:AA:38:13
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584766138DB5EE05D6FA797AE5C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd325e68-a208-3352-9d0c-1d50951fbeef.roa
Signing time: Tue 01 Oct 2024 16:51:48 +0000
ROA not before: Tue 01 Oct 2024 16:51:48 +0000
ROA not after: Mon 30 Dec 2024 17:51:48 +0000
asID: 834
IP address blocks: 23.26.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:66:13:8d:b5:ee:05:d6:fa:79:7a:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 1 16:51:48 2024 GMT
Not After : Dec 30 17:51:48 2024 GMT
Subject: CN=0daac817-1941-452e-9495-d2ba684b77b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:81:38:f5:e7:59:04:c3:1a:26:6d:42:0b:
09:b1:53:2a:41:61:0e:ed:a7:8d:79:0e:4a:7e:2e:
c1:db:e9:8a:32:a1:4a:09:af:55:7c:34:b8:a0:56:
2c:df:48:06:66:69:55:83:db:78:00:49:1b:ae:8a:
a6:11:d5:dc:45:77:9a:8f:76:e8:aa:db:08:4e:9c:
c3:02:9e:ed:ab:a0:d1:e9:31:7f:91:25:4a:6c:63:
2f:41:e9:46:b4:fd:ec:09:5f:25:b4:41:1c:31:b4:
0a:bd:ee:e1:e4:a3:aa:d3:51:cd:7b:3c:ec:5a:3e:
c5:76:61:90:e4:5a:75:ac:a6:d9:e1:28:ae:5f:1a:
9f:21:7c:cd:42:93:af:e1:6e:d7:f3:f1:43:1e:71:
1b:71:6d:06:9f:fb:e3:21:64:82:64:85:43:56:d4:
57:0f:2f:56:2f:46:84:02:c7:78:89:b3:4b:66:c2:
09:29:53:b3:45:ab:9a:c3:d7:07:33:31:a0:ce:e8:
18:26:66:21:79:77:14:66:64:81:af:7d:38:9e:cf:
33:21:c6:9e:5c:62:15:f7:23:a7:74:86:cd:83:a5:
8f:41:67:46:68:ea:a4:1d:f4:ee:fe:b9:02:1b:fa:
d7:64:42:d2:51:9b:d4:bc:d3:0a:81:a9:76:bf:0d:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:9B:3E:F2:53:81:5E:08:5B:87:9A:94:C9:68:22:9F:AA:38:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd325e68-a208-3352-9d0c-1d50951fbeef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:a7:f4:04:6e:e0:97:d3:39:cf:28:9d:dc:55:8e:e5:de:fd:
7b:a1:a9:dc:57:4c:aa:d9:a0:aa:ed:32:a1:9a:83:96:54:ba:
a3:cf:59:2b:01:e3:d9:96:f2:52:49:41:28:1c:73:c0:01:cd:
95:b5:43:5b:d4:2b:99:d6:01:96:c0:4f:5d:4f:45:54:bb:ce:
20:3a:65:41:eb:d0:ae:48:b8:dc:07:2e:0d:69:99:df:53:ef:
64:9d:03:da:e4:e7:6c:48:e0:71:87:4a:3f:ef:94:10:35:8d:
a8:94:4d:ff:43:20:27:02:7b:54:5f:5b:65:63:85:a1:49:25:
b1:88:f2:4f:5d:09:b3:66:54:99:b0:b6:4a:a8:13:3c:e1:ac:
54:99:c3:48:db:89:45:20:66:c3:a0:6f:ba:18:57:95:8a:21:
95:e5:ab:d0:95:8b:2c:15:0f:ed:41:7f:f9:a0:b9:f9:10:3b:
6d:a2:a4:5c:e4:f0:6b:30:41:4c:e7:f6:6d:25:05:eb:29:d3:
9f:82:39:de:bb:96:36:bf:c6:8d:22:ba:37:5d:2b:62:54:d9:
91:01:c5:42:a0:d0:2b:8a:ba:15:5f:91:10:16:c3:c8:cb:e1:
24:8c:aa:e8:1b:35:a3:76:4f:25:69:27:e4:a1:a3:39:ba:6d:
7a:9e:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:23:03 2025 by rpki-client