Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b9b4e0e-e8fd-3464-99c7-2f2e9678e2b7.roa
File: 4b9b4e0e-e8fd-3464-99c7-2f2e9678e2b7.roa (raw, json)
Hash identifier: OQXlIgAwLZHELZHKfuV8ch+q2bt9dUPXthkYzDRMZiA=
Subject key identifier: 66:32:81:03:0C:36:69:1D:52:BF:85:B2:43:2E:FB:76:88:D1:A0:68
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858480B19E036FF190D3DF120E780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b9b4e0e-e8fd-3464-99c7-2f2e9678e2b7.roa
Signing time: Fri 29 Nov 2024 19:32:55 +0000
ROA not before: Fri 29 Nov 2024 19:32:55 +0000
ROA not after: Thu 27 Feb 2025 19:32:55 +0000
asID: 834
IP address blocks: 23.26.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:19:e0:36:ff:19:0d:3d:f1:20:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 29 19:32:55 2024 GMT
Not After : Feb 27 19:32:55 2025 GMT
Subject: CN=cfa739da-62bb-4861-a98f-b64e3af5fa2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:c0:24:b2:f1:1d:9e:e8:1c:8a:ff:46:67:
db:63:fb:15:3d:ce:14:01:69:aa:0e:db:41:fc:4d:
da:35:d8:47:9e:12:63:05:73:43:bb:7d:80:60:07:
b1:17:76:37:ed:dc:b4:44:30:bb:be:49:21:64:bd:
92:70:59:e3:a0:bd:9c:07:84:a8:83:23:49:12:90:
84:92:91:68:de:58:2e:4a:f7:a2:20:df:24:50:08:
5f:69:30:d3:9d:34:7e:de:6d:59:90:94:5e:a6:de:
20:c6:5a:bf:54:6a:73:d3:8d:8b:95:21:1a:ba:68:
b9:3e:b9:48:81:62:e6:ed:30:c7:8f:ac:4d:13:3f:
78:4d:59:ee:f6:a6:a9:f9:84:40:f0:bf:b6:4d:64:
78:04:e4:af:5b:21:c0:a3:19:78:56:56:98:07:ee:
d8:11:78:d3:a1:4d:32:46:de:9f:8a:c4:62:49:5a:
17:ab:73:c4:70:1d:d4:9d:a5:26:cd:5e:94:ec:b0:
48:b7:df:08:05:b8:9d:5f:5d:d6:36:c8:ae:72:da:
b1:9e:a6:94:45:61:c2:bc:19:e8:d7:a9:63:85:c3:
6a:c1:83:77:38:22:ea:a4:96:36:cb:b5:57:b6:13:
1b:82:08:8c:90:a1:8c:4c:63:c2:9c:12:11:44:9f:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:81:03:0C:36:69:1D:52:BF:85:B2:43:2E:FB:76:88:D1:A0:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b9b4e0e-e8fd-3464-99c7-2f2e9678e2b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f5:35:b0:89:97:d3:e1:c2:7e:26:df:87:11:ba:60:56:2f:
14:da:c2:78:ed:c3:22:6b:5b:cb:49:d8:dd:a0:17:2f:54:26:
ae:66:e3:b0:a6:66:7c:5a:6d:8b:ce:a2:2b:3e:27:da:a0:63:
80:b2:77:31:96:76:33:62:f0:b6:f5:46:de:f4:e9:23:6a:03:
f0:42:6d:2a:a1:dd:e9:0f:97:97:02:7c:ac:3f:f8:91:fe:37:
82:55:d2:e2:b7:7d:36:1a:ef:1a:b9:b2:25:ac:6a:67:94:f5:
ff:e4:cd:07:19:50:89:47:9a:51:cc:6d:dc:f7:46:8a:97:80:
0e:13:fc:0d:24:e8:95:ed:e3:0f:42:3f:8f:66:d9:c8:2f:37:
85:b8:e9:fe:b2:47:e1:05:0a:d1:37:29:77:3e:63:c6:ab:ca:
ec:18:ae:a3:e1:9d:20:e5:90:67:42:d7:65:95:1b:53:48:be:
be:8f:bc:3a:04:6f:05:8c:79:c0:d9:19:7b:86:24:7f:e4:f1:
90:a8:06:8d:06:c6:95:fe:61:ad:b9:3f:b0:3b:65:5c:8a:b0:
db:a1:7c:24:76:5a:90:8d:52:7d:b8:11:57:56:86:bc:1a:ed:
0e:c0:74:66:57:fe:43:0e:bb:2a:35:6c:4f:c9:7c:08:f3:fc:
c0:cc:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:44 2025 by rpki-client