Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/26b34782-2fe1-332f-8478-981f7541b066.roa
File: 26b34782-2fe1-332f-8478-981f7541b066.roa (raw, json)
Hash identifier: aLsyVYbKta3sR2yju9g/mAEFfa6eH0urNs1UPzr9Fg0=
Subject key identifier: B6:F0:60:C1:EC:6E:21:C1:BB:58:08:51:7B:E7:A5:97:E4:B0:2C:C4
Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial: 010D0C9F432858481C9A88AFEA8349A9DB986A80
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/26b34782-2fe1-332f-8478-981f7541b066.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 7489
IP address blocks: 23.133.4.0/23 maxlen: 24
23.133.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:88:af:ea:83:49:a9:db:98:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=3426de28-f769-449c-8e10-9ec40a0002d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:d5:b4:7a:12:b5:1c:b4:14:a5:30:ca:d2:
81:54:d1:34:7b:3c:e8:79:fd:a1:67:1d:b9:71:92:
56:ee:17:aa:9a:7b:8a:3a:b4:ff:9b:27:1d:cc:d3:
f5:61:0d:20:92:5f:e9:b9:c1:65:8b:fa:c2:02:34:
38:c5:32:62:83:0e:fe:a3:ca:11:2d:25:8d:74:63:
d8:a8:62:7a:f0:d0:a8:ea:39:6c:ba:19:7d:e5:59:
03:ee:88:57:58:1d:65:c9:f7:e7:b5:75:62:d9:73:
a6:3e:34:74:83:2d:bf:cf:d6:ea:e3:2f:72:78:e8:
2a:83:1b:bc:30:be:4c:2a:4f:e8:10:ad:23:d7:ba:
1e:08:25:32:fb:c9:29:64:65:71:c3:6c:f0:49:c0:
9f:e1:f4:42:32:b4:f3:88:3e:65:eb:3b:17:15:78:
ef:40:cc:4a:d1:8e:79:a6:59:4b:52:19:9e:37:d8:
97:94:77:c0:0b:3f:ba:47:3c:80:3e:bb:de:0a:a7:
ad:d6:88:37:33:c9:24:94:47:98:1f:9e:9c:95:9d:
f2:f7:a0:f0:38:6c:34:33:3f:bd:a4:1b:fe:f5:e2:
e2:36:8d:58:17:3d:8f:4d:f5:2d:95:03:58:58:15:
2b:31:d7:fe:12:8b:77:c2:ff:30:e6:8f:2e:e6:e6:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F0:60:C1:EC:6E:21:C1:BB:58:08:51:7B:E7:A5:97:E4:B0:2C:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/26b34782-2fe1-332f-8478-981f7541b066.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
X509v3 Authority Key Identifier:
keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.4.0-23.133.6.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d4:24:7d:1d:c6:97:ae:fd:86:c1:72:58:04:47:b7:b5:a3:
4c:d1:a6:45:db:a8:db:b9:15:39:6f:6a:87:d5:71:47:27:5f:
33:d9:15:e6:31:aa:a3:5b:aa:0a:c5:eb:98:e4:45:32:cd:81:
4b:09:05:25:f4:7b:af:76:b6:eb:47:61:14:d1:35:04:90:97:
06:5e:63:82:b1:15:e6:28:1d:cf:4e:4d:9f:b9:1d:2b:c4:5a:
b1:70:b9:eb:c6:0d:89:d9:6c:73:14:39:6e:4b:5c:c2:23:8f:
db:fd:07:4a:5b:a0:41:b9:05:34:fd:28:0e:ce:23:00:86:7d:
5b:8c:b4:23:e4:3f:55:90:f0:a8:cf:09:4a:e5:c9:38:b9:2d:
06:99:fc:6e:03:2e:01:45:db:80:81:f6:c2:b1:00:d8:bd:c2:
1c:1c:58:df:92:bc:41:cb:22:c5:1f:e0:29:b5:ed:f6:c8:6c:
a9:38:6e:13:67:20:4f:0f:8a:0c:a2:d4:93:cd:f7:00:69:7e:
9d:d6:c5:8a:da:1f:eb:58:49:58:90:ff:2c:6a:21:89:5d:35:
0f:43:37:0e:ac:12:05:da:24:a9:5f:c7:9e:11:48:a0:39:15:
c9:bd:3a:e3:f2:4c:46:44:25:18:e8:8a:17:40:d0:66:ac:39:
4f:54:64:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:08:26 2025 by rpki-client