Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ace2a0c-37cf-354d-8e00-8acd50ad18a0.roa
File: 7ace2a0c-37cf-354d-8e00-8acd50ad18a0.roa (raw, json)
Hash identifier: OXREpzh8/ZtfKXwYEKIlaaEXv47xdU3sK2LKU2IRLx4=
Subject key identifier: A8:67:AE:D8:17:B4:D1:D7:BD:75:67:36:4A:29:8E:85:EE:0E:91:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584726B7E1B6C99B350D95810080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ace2a0c-37cf-354d-8e00-8acd50ad18a0.roa
Signing time: Mon 09 Sep 2024 00:11:10 +0000
ROA not before: Mon 09 Sep 2024 00:11:10 +0000
ROA not after: Sun 08 Dec 2024 01:11:10 +0000
asID: 834
IP address blocks: 23.26.74.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:26:b7:e1:b6:c9:9b:35:0d:95:81:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 9 00:11:10 2024 GMT
Not After : Dec 8 01:11:10 2024 GMT
Subject: CN=5d496e6e-bf85-4308-bc8d-6389cd6e1235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:cf:d4:a9:97:54:60:d2:3d:79:9f:ee:76:
98:98:b7:71:fc:bc:c6:87:46:d7:14:6c:b3:65:57:
1e:a3:6b:dd:0e:20:90:f1:cf:bf:e3:a6:b8:e1:b3:
67:fc:ca:d4:e6:12:e6:02:36:8d:e4:7f:cc:b5:0d:
75:2f:55:aa:b8:b0:c5:de:28:4f:84:01:1c:6b:f3:
aa:2f:5b:15:30:71:8c:1d:e3:1f:8a:79:14:48:5a:
17:d5:6d:ed:24:f9:e3:af:2d:19:83:20:85:d5:0e:
05:61:36:3f:ca:21:ff:c0:b6:cc:c5:aa:e9:1b:ad:
25:dc:8a:a3:d7:ac:d3:12:99:07:41:cb:a3:c1:a1:
cb:47:5a:1e:7a:8a:3f:d4:8f:b3:76:62:bd:e5:2a:
27:7d:70:c6:6e:35:5f:3d:ef:bd:0a:0e:50:0e:3a:
e8:45:78:bb:9b:52:d6:d0:14:d2:40:f1:b1:ef:f5:
b7:3e:22:9d:fd:54:6a:4d:b7:71:bf:3d:50:92:82:
7b:d3:c4:dd:e1:03:25:64:b5:2a:ec:ff:9e:e9:ee:
b6:bc:f4:55:63:73:54:0d:51:81:13:d4:fd:71:22:
6a:92:b5:39:b4:05:4a:ee:26:1a:60:1a:3e:39:51:
c9:b9:01:3e:e7:c4:dc:21:fe:78:00:86:a4:7b:c5:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:67:AE:D8:17:B4:D1:D7:BD:75:67:36:4A:29:8E:85:EE:0E:91:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ace2a0c-37cf-354d-8e00-8acd50ad18a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:0d:35:8c:3a:55:c0:b2:df:a9:27:90:8d:82:7c:76:d6:c4:
d8:cc:82:bc:dc:d2:86:c5:d2:b2:1f:35:fc:a0:f1:3f:ae:a3:
06:75:d0:74:6c:6e:37:01:9a:53:ed:69:d5:51:af:be:bc:b2:
58:8d:34:77:fa:7e:f1:52:04:3c:c4:94:90:b7:36:c1:a8:db:
41:db:46:78:77:5d:0d:f7:36:e9:74:2f:bd:27:1e:d5:23:8c:
12:26:bf:1e:36:c0:54:46:5c:90:74:27:80:2f:9d:cf:78:a5:
fe:9e:91:57:80:9b:6e:7b:0d:62:fd:91:b0:b6:b5:f3:5f:c3:
92:85:70:8e:48:e3:c6:37:2c:5a:8b:df:ac:f4:59:54:b9:91:
09:5f:f1:3f:73:26:9b:fb:8d:8e:92:8c:84:91:18:56:86:e5:
aa:3c:f1:05:ac:d1:90:6f:7e:2a:a5:12:3d:b4:bf:fd:06:c5:
c1:20:03:67:7f:37:41:1e:52:f2:ce:01:ae:2c:62:5e:1e:6f:
d8:cc:a5:99:c5:36:6b:73:5f:03:44:04:31:ed:c4:3d:f2:c3:
4b:7e:56:d8:51:79:91:c8:9e:99:75:92:47:f1:0b:ed:07:4c:
65:9f:20:ab:e7:b3:16:b5:3a:d4:32:ea:7e:be:6a:04:74:5b:
2b:bb:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:52:46 2025 by rpki-client