Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28060479-4ca5-3cca-be6b-83a1b137c732.roa
File: 28060479-4ca5-3cca-be6b-83a1b137c732.roa (raw, json)
Hash identifier: RXNiNquDLn5se5Ak5cWILKTFjWsoCudS9mzslJczTBY=
Subject key identifier: FF:1D:06:72:4C:7F:C6:DE:70:B0:0B:4F:AF:03:85:E7:33:C4:7A:2C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584731FB22ACEB1AAF89DA992F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28060479-4ca5-3cca-be6b-83a1b137c732.roa
Signing time: Fri 13 Sep 2024 01:00:32 +0000
ROA not before: Fri 13 Sep 2024 01:00:32 +0000
ROA not after: Thu 12 Dec 2024 02:00:32 +0000
asID: 138156
IP address blocks: 23.26.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:31:fb:22:ac:eb:1a:af:89:da:99:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 13 01:00:32 2024 GMT
Not After : Dec 12 02:00:32 2024 GMT
Subject: CN=913830ac-1f60-483a-a515-6414b9ecf575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:74:b2:58:71:17:c9:28:1d:64:7b:e9:b6:
94:26:15:00:6a:3b:26:22:33:b9:a6:32:1e:5d:f5:
4c:e4:77:79:5a:00:87:8c:67:da:48:41:f1:97:9e:
f0:b2:dd:94:39:cd:ae:7f:9d:e4:4a:38:67:30:18:
97:e0:46:6b:a3:c7:9e:68:50:7e:36:d9:2d:ee:93:
0b:6d:c0:e8:3d:5f:af:6f:a0:87:2e:cc:68:e9:52:
ca:f2:37:a7:84:0b:b2:3e:61:80:74:97:24:fb:97:
fb:fe:a6:01:36:e5:01:e9:b2:be:71:1c:c9:73:f8:
3c:6c:42:70:a4:4a:53:0a:b7:aa:9f:17:53:b6:ac:
21:be:d7:94:80:3f:04:4f:07:72:26:cc:83:e0:37:
5f:81:df:c3:c0:4c:64:8e:16:d9:8f:d3:2d:24:37:
26:f1:80:94:d7:a1:8b:72:78:1f:9e:ad:5b:92:8c:
de:8c:fb:5a:55:b5:51:25:25:34:1a:bc:ac:c2:1e:
94:a4:0d:f4:30:0e:a0:fe:47:a3:2f:12:da:e8:9f:
73:80:d5:a3:8d:cf:39:10:a1:83:7c:30:9a:8d:d2:
d0:02:75:a0:b1:79:e8:9a:8a:9d:08:1f:9c:11:8d:
e5:b7:49:9e:c7:fc:ae:d0:a5:ad:29:f9:2b:36:f9:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1D:06:72:4C:7F:C6:DE:70:B0:0B:4F:AF:03:85:E7:33:C4:7A:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28060479-4ca5-3cca-be6b-83a1b137c732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:80:50:17:81:7a:f6:b1:05:d8:e3:c7:ee:76:26:25:b0:c4:
2d:88:a9:22:f0:d8:cd:50:c6:8a:69:08:3d:5b:8d:30:f1:6a:
7e:fe:96:a8:69:87:8f:ad:a5:4f:4e:1d:b7:c0:d1:81:54:ef:
e2:3e:75:48:d2:f9:4f:aa:e1:d9:0b:75:4e:ea:3d:ec:13:bb:
a9:90:23:c0:5f:fe:7f:0e:5b:40:35:50:fb:7c:99:25:36:c8:
0d:e0:1c:49:91:36:a2:1c:a3:d3:94:89:ac:92:b2:4c:61:c4:
1b:1d:33:9f:8f:fe:1c:81:d7:79:e4:8e:64:b2:16:9a:4e:15:
36:a7:44:36:31:65:ec:23:5c:db:93:e8:30:14:11:f1:e8:5b:
d9:e2:3f:31:c8:3d:8f:a3:b4:79:e3:4c:0c:d0:22:05:7b:35:
4a:34:96:55:d1:54:3a:05:17:8d:4d:db:d7:20:e5:61:13:48:
d3:8f:10:c4:9b:e0:14:1a:eb:b5:10:93:85:ae:aa:34:07:25:
07:cb:48:91:29:89:66:7c:9e:c3:4e:9b:19:ff:9f:4e:3e:d4:
66:d4:be:ad:78:92:da:d7:d9:d5:84:64:28:3b:3b:68:5a:ce:
5e:2b:ce:25:99:6c:2c:6e:6d:a2:5a:a8:0f:4c:9e:1a:2f:81:
d6:1a:17:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:22:04 2025 by rpki-client