Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09f1ed1a-48fa-328a-ae8a-67f80931c393.roa
File: 09f1ed1a-48fa-328a-ae8a-67f80931c393.roa (raw, json)
Hash identifier: a8ItmgRz9Fk0E21a58CWf6RGVg5DDehh99QwAkRtLAk=
Subject key identifier: F2:62:58:BC:F3:00:CA:14:98:F4:F1:EE:16:D4:05:56:12:F7:0A:A6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846B8C5678B496645E5C21D9600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09f1ed1a-48fa-328a-ae8a-67f80931c393.roa
Signing time: Wed 31 Jul 2024 14:59:30 +0000
ROA not before: Wed 31 Jul 2024 14:59:30 +0000
ROA not after: Tue 29 Oct 2024 14:59:30 +0000
asID: 834
IP address blocks: 23.26.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b8:c5:67:8b:49:66:45:e5:c2:1d:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 31 14:59:30 2024 GMT
Not After : Oct 29 14:59:30 2024 GMT
Subject: CN=9cb89cc7-0c78-45d1-b84e-4d771177d650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:04:27:13:a4:94:08:a8:72:4e:30:ab:2f:
d8:79:54:54:3b:07:1b:3c:4f:a8:ba:1d:0f:44:b4:
a4:7c:4b:46:5c:c8:36:01:95:db:5d:52:64:1e:aa:
33:1b:ee:1f:28:7f:07:f8:d4:48:8a:3d:eb:0d:2d:
80:bf:6f:d6:4b:b7:a5:86:1b:b5:b2:36:cc:5f:46:
7b:87:a3:97:33:59:e4:d8:6d:f9:91:98:da:03:4b:
92:c0:de:ee:ff:c6:77:35:29:cc:9a:1e:2d:33:f4:
b0:03:ab:f3:da:f1:87:85:d4:eb:6b:8e:a9:99:55:
87:e4:dc:f0:1d:68:26:99:43:58:0d:73:37:74:fa:
c7:00:1f:80:2c:04:e0:31:18:15:bc:f8:35:50:6e:
b0:41:76:5d:46:b5:31:35:22:f9:26:2d:03:a1:da:
59:93:a7:a3:1f:af:67:26:13:30:b3:5b:75:eb:55:
71:ee:6d:79:ed:e6:a1:1b:9e:a2:d3:2e:a1:2e:9b:
bf:fa:6e:5b:53:c5:1b:75:bf:c2:81:d8:2b:82:35:
0a:64:a3:f5:f5:dd:93:db:ea:c3:85:9c:82:67:c2:
1a:17:6b:a3:ed:f8:ca:60:03:a4:cc:19:44:6a:2d:
29:73:ce:6e:b4:df:3a:ae:14:6f:a5:15:03:b7:65:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:58:BC:F3:00:CA:14:98:F4:F1:EE:16:D4:05:56:12:F7:0A:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09f1ed1a-48fa-328a-ae8a-67f80931c393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2a:23:9f:2c:a0:ba:6f:68:80:69:04:41:57:8d:37:b0:98:
58:54:e1:29:2e:13:42:57:f7:4d:1e:ee:4b:3c:6e:b5:7b:11:
53:a2:09:c4:6e:8b:06:83:0e:4e:fe:7f:9c:4f:85:ca:8c:37:
8d:6e:b6:1f:77:4b:55:a0:ab:02:b5:5e:0b:e1:e4:49:15:ae:
4c:93:e0:f9:84:b3:bf:32:74:24:f6:fd:0a:15:a3:2c:18:54:
fb:78:db:ad:82:7c:a1:01:98:ff:ef:e2:f4:25:65:49:d6:d9:
6d:ed:a5:db:73:97:97:67:79:dc:14:c7:f3:4c:e7:b8:98:d9:
29:39:76:f1:c6:49:23:28:37:51:34:e9:bb:67:eb:ea:70:ab:
95:4f:2c:c7:a3:3b:8d:10:38:b4:8a:c8:10:f0:a9:83:91:4f:
e2:64:37:34:31:3a:c2:75:29:6b:02:58:53:9f:6c:a9:6e:94:
d1:a3:2c:3e:37:37:d3:81:98:9a:d1:db:3e:d9:35:3f:c7:94:
56:c4:e3:3b:d4:04:0c:3a:de:d1:9e:fe:f6:17:6b:d9:b4:8c:
67:52:c4:05:5f:97:9f:54:f1:59:a2:d4:32:95:cf:9e:8e:f4:
b4:3c:13:eb:44:42:b3:3f:9b:84:a0:5d:b9:5c:5d:1a:9a:9d:
09:30:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:59:05 2025 by rpki-client