Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe9d24a3-6a6c-3896-b110-2a82aa97a701.roa
File: fe9d24a3-6a6c-3896-b110-2a82aa97a701.roa (raw, json)
Hash identifier: VSPMAgq6Sih8Cyks00GX0tWEnnOqm+rJ+3DOiI4iGBE=
Subject key identifier: 21:6C:A6:E4:28:99:B7:35:AB:50:F0:FE:52:BB:1B:11:A0:AA:1C:1D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843256E54195374C0134009E500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe9d24a3-6a6c-3896-b110-2a82aa97a701.roa
Signing time: Thu 07 Sep 2023 17:59:24 +0000
ROA not before: Thu 07 Sep 2023 17:59:24 +0000
ROA not after: Wed 06 Dec 2023 18:59:24 +0000
asID: 834
IP address blocks: 23.26.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:25:6e:54:19:53:74:c0:13:40:09:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 7 17:59:24 2023 GMT
Not After : Dec 6 18:59:24 2023 GMT
Subject: CN=6f1638f9-a079-45d0-a288-1e25bdcbbfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:5c:6a:e5:f5:bd:e0:8a:04:53:96:3a:c5:
4d:5d:c3:3b:0d:13:9d:9a:9e:1a:4f:5a:b7:a6:52:
35:5c:35:46:5d:ee:60:df:a1:c4:70:f8:29:9c:4c:
6f:b9:bd:f3:4a:13:b9:00:67:e9:45:74:3e:67:b5:
28:9c:57:c6:be:e2:6a:3b:62:0b:f9:be:f1:7b:3b:
c6:22:7d:89:c3:f1:1c:69:c0:78:88:0c:6f:12:c8:
62:7f:9c:18:f3:fc:d3:b7:e1:29:81:be:51:59:ac:
e4:15:35:e3:b6:7f:c2:b8:9e:ae:2c:7b:89:0a:be:
37:60:2c:eb:85:f5:db:66:cd:ec:c3:72:8c:1d:fd:
42:54:e2:da:fd:f9:4a:fd:74:63:2d:f4:5c:e0:5e:
81:b0:43:f3:05:08:78:fa:e4:28:e0:2b:92:e2:d0:
89:a7:5e:b3:17:1a:08:0b:57:93:d8:6e:19:43:11:
68:02:9a:9f:aa:32:a8:47:0d:71:fb:2e:54:c8:fb:
e1:14:26:7c:d1:6e:0d:02:e2:a1:23:8a:5d:b9:7b:
8c:82:4d:ef:cb:a3:60:e8:fc:36:ac:18:35:12:15:
09:23:ad:8f:0c:22:3c:f7:75:5f:77:3a:d5:3d:45:
17:8d:51:5d:42:02:dc:e7:77:65:2f:a0:4d:14:5b:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6C:A6:E4:28:99:B7:35:AB:50:F0:FE:52:BB:1B:11:A0:AA:1C:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe9d24a3-6a6c-3896-b110-2a82aa97a701.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:ec:61:65:1a:9b:87:41:d5:d1:e4:be:55:b8:5f:6b:41:92:
cf:16:c6:af:72:01:d7:d6:de:18:75:b3:b6:88:8b:8a:99:95:
b7:0b:55:43:99:58:9b:b2:3d:93:22:9d:0a:d5:f5:51:8d:98:
71:f3:21:f3:df:ad:05:bb:da:07:65:7f:f3:77:c4:7c:b9:84:
cc:08:0c:b6:4e:20:7b:36:8e:9c:08:16:f3:78:b4:df:dd:b3:
c6:20:3d:1f:e8:02:1d:c4:d3:e0:6d:af:fd:3b:35:09:2f:99:
b5:a8:ee:42:0c:82:65:77:24:04:8b:7d:83:14:41:2b:dd:0c:
d6:7c:fb:00:9b:1b:38:96:1e:80:c3:bb:03:e5:3a:14:86:52:
7f:06:a9:e8:28:75:28:e7:5e:91:f1:40:be:61:e9:b5:4b:0d:
01:93:4b:44:c6:7c:b5:25:9b:0a:ea:11:68:99:67:14:97:b6:
fb:a0:3e:24:7c:a5:5e:03:70:ad:9f:4c:ab:0e:ba:0e:07:fb:
ef:9c:fa:3c:b5:6d:72:90:90:d4:57:f5:9e:97:72:9b:8b:74:
40:d7:7c:9c:c6:7b:89:4b:1d:a2:fe:d2:31:53:2b:16:84:14:
a0:ea:f6:91:b1:3d:bf:17:17:78:86:77:fa:a5:74:2d:c4:b7:
23:40:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:05:22 2025 by rpki-client