Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43a3e5f0-c50d-3b67-b36f-5edcb15e68a0.roa
File: 43a3e5f0-c50d-3b67-b36f-5edcb15e68a0.roa (raw, json)
Hash identifier: GE7Cyvs++hGwgDjL9oD/uo9yCCC3qFdUi9rYnlQu1eg=
Subject key identifier: 36:F8:60:14:71:62:2B:87:69:4A:51:80:99:D2:35:DE:F0:6A:13:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845B838B16072BA178C3E86CD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43a3e5f0-c50d-3b67-b36f-5edcb15e68a0.roa
Signing time: Tue 30 Apr 2024 17:29:02 +0000
ROA not before: Tue 30 Apr 2024 17:29:02 +0000
ROA not after: Mon 29 Jul 2024 17:29:02 +0000
asID: 834
IP address blocks: 23.26.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b8:38:b1:60:72:ba:17:8c:3e:86:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 30 17:29:02 2024 GMT
Not After : Jul 29 17:29:02 2024 GMT
Subject: CN=42f6e5d6-13f7-499f-acb4-79dfcda5fba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:3e:1f:8b:ac:39:65:0e:a8:af:7a:b4:5c:
3c:78:57:f4:71:35:d9:33:aa:df:1e:7f:b1:8e:5f:
1f:8a:ea:a7:1d:80:ef:54:e8:80:23:76:29:b6:49:
d3:88:35:70:c7:09:15:08:02:06:3d:76:c5:bb:74:
e1:7a:9e:69:1d:f0:73:1d:2b:4f:22:4d:f9:bd:8f:
ed:2f:a0:65:60:bd:34:03:54:6e:fc:df:c1:7f:fc:
ac:5a:86:b1:51:2d:e7:63:5e:a4:30:28:3c:8c:8a:
a7:51:4e:fd:f9:6b:a6:72:48:3b:b0:7a:83:61:ba:
ae:6f:60:97:ed:6f:80:00:9f:e0:59:ad:a8:ba:44:
96:f0:cc:83:6e:99:9e:20:26:5c:e3:a0:46:a1:9e:
ef:27:b2:69:9e:15:17:e1:a0:d2:06:8a:a5:b0:13:
8c:6b:51:c9:f7:53:ea:69:39:f4:4f:ed:38:44:04:
33:01:7e:a9:7b:a3:62:80:57:4e:27:06:27:30:fc:
82:c3:65:9e:58:78:cc:72:67:9e:ee:21:6f:51:05:
95:c0:0d:65:6d:61:91:d3:2b:ba:e3:62:e3:16:39:
f5:7f:68:3c:4f:b8:50:9f:15:f7:0a:14:fc:04:4e:
f4:b9:8e:10:09:46:50:5f:e1:a2:82:68:87:62:05:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:60:14:71:62:2B:87:69:4A:51:80:99:D2:35:DE:F0:6A:13:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43a3e5f0-c50d-3b67-b36f-5edcb15e68a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c2:9c:27:bd:f3:00:50:44:a8:55:8c:96:d9:2d:f2:97:ff:
86:f6:ea:cd:e4:a1:07:b0:72:b5:aa:4c:fa:8c:85:de:a9:d2:
86:75:47:d2:0a:93:87:7b:6d:e1:c1:3f:19:13:29:f4:d6:25:
8e:6e:d3:c2:e7:ea:40:ca:9c:81:b7:f2:39:75:bb:75:52:65:
b5:d8:fb:d1:f3:a8:d7:e0:b7:65:a5:5e:4a:a1:2a:9c:32:83:
a5:a2:06:f2:be:eb:48:7c:14:c9:e2:8a:0d:e6:73:83:90:a5:
2d:af:05:11:03:96:0f:31:dc:6b:74:04:62:4a:dc:66:46:19:
72:2a:47:5e:2a:bc:0d:79:bd:3f:b2:74:03:e5:fa:f0:2b:d5:
7e:f0:58:a8:a1:b5:09:f9:f0:6a:ce:2f:52:59:e4:a0:7b:d8:
81:6c:e4:e6:9d:77:d6:23:c1:87:2f:62:4a:af:58:0b:f5:5d:
fd:b6:7e:b4:b7:f7:d3:67:75:e5:04:6e:fb:ff:2f:0e:f5:a4:
75:a3:4f:2e:d6:12:15:73:61:dc:83:27:fd:42:46:14:5a:4b:
43:18:f2:ab:0e:53:01:c2:43:76:9d:96:a2:ae:78:8e:73:b1:
a0:8a:d7:b8:c6:51:12:86:ea:52:4d:a4:7b:b1:1d:60:a5:7f:
5f:09:97:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:19:02 2025 by rpki-client