Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf270b02-112d-32b5-a9c1-300c1c67393c.roa
File: bf270b02-112d-32b5-a9c1-300c1c67393c.roa (raw, json)
Hash identifier: Zw6hclmh+m0a1n4JYatReDnsjxqNAMVAPzWsQxF72aI=
Subject key identifier: D2:F9:55:04:BD:3B:0E:93:8C:36:31:FD:A3:13:58:ED:ED:B6:63:3C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584781DB2762903B2C24E62A80B0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf270b02-112d-32b5-a9c1-300c1c67393c.roa
Signing time: Fri 11 Oct 2024 15:40:48 +0000
ROA not before: Fri 11 Oct 2024 15:40:48 +0000
ROA not after: Thu 09 Jan 2025 16:40:48 +0000
asID: 834
IP address blocks: 23.26.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:81:db:27:62:90:3b:2c:24:e6:2a:80:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 11 15:40:48 2024 GMT
Not After : Jan 9 16:40:48 2025 GMT
Subject: CN=4069e3fe-63ed-4d02-9479-29272171d159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:94:03:a1:d9:c9:e2:e7:39:a6:8c:45:e7:
a1:f1:96:81:3d:98:63:a9:b6:b0:07:73:6c:72:c7:
2c:52:8c:dd:68:65:67:e3:2c:24:60:91:23:20:77:
1c:57:cd:be:4e:4a:b3:1f:5a:43:cf:65:b2:06:0b:
b0:4c:5a:95:bc:38:7e:39:98:b4:09:ef:69:8b:f0:
8d:02:64:34:90:15:69:59:29:e1:de:97:51:97:65:
8a:bf:f0:6d:59:c9:16:e1:fa:00:b1:f2:ee:c7:51:
31:8b:17:cd:e2:be:15:12:5a:e9:aa:77:be:87:a4:
9a:dd:fd:d7:7c:da:be:77:55:b4:61:7f:56:3f:55:
a8:99:9d:e6:2b:bb:cb:74:95:d3:1a:13:e0:98:0c:
b7:ff:d8:fa:ac:3a:fa:b8:89:f2:80:00:36:96:20:
6b:65:d1:03:7d:c7:cd:57:7b:43:e3:a4:9e:6f:ce:
0d:63:dd:a0:43:22:de:59:be:a5:25:14:a6:be:4f:
98:53:88:9c:47:2d:31:31:7c:ac:90:b7:bc:24:13:
04:e6:95:68:e4:be:e5:32:68:ca:9d:56:ca:df:6d:
2b:4f:ff:2c:e7:79:8a:44:1b:12:cd:32:61:34:7e:
94:e5:d1:62:3e:fa:17:97:d7:c7:8d:89:b0:07:08:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F9:55:04:BD:3B:0E:93:8C:36:31:FD:A3:13:58:ED:ED:B6:63:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf270b02-112d-32b5-a9c1-300c1c67393c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ed:66:40:7a:3f:88:27:03:ea:2a:9f:e3:a5:a8:e3:b9:63:
2c:b6:6d:1c:01:ad:be:e2:e2:30:5f:78:9b:be:90:3e:5a:71:
de:31:1b:b0:ca:a7:a4:de:c8:5d:c5:52:ba:8b:05:2e:f3:d2:
d7:ab:cb:3b:92:4b:7a:fe:4d:a7:7d:d5:5f:51:71:4f:21:dc:
c1:f2:ec:3c:12:27:54:7f:49:51:c3:6e:37:18:7f:d4:ef:69:
42:90:71:85:b6:19:00:65:a4:e3:0a:dd:18:df:d4:0a:6f:0c:
13:02:9b:a7:44:69:17:76:55:11:85:a7:ff:33:c7:06:72:d3:
06:c2:54:c4:5e:f4:f6:70:7b:dc:82:23:56:f8:17:de:76:81:
ba:06:59:9d:cb:85:62:ec:85:ff:b3:dc:26:a1:45:5c:e1:eb:
3a:75:e9:89:c4:ab:a7:29:f2:aa:a1:a2:2a:5a:2c:de:cf:b8:
d5:a5:2b:b9:ac:ac:bd:7d:bf:27:05:9b:5a:32:ff:88:42:f3:
c6:da:39:93:72:22:ae:f6:bf:f2:c3:35:f4:e8:35:ca:b2:fa:
ed:02:a0:c9:63:a8:3f:8a:ca:1b:ea:61:a9:5f:9c:83:23:ee:
87:d0:f0:a2:bb:fd:34:97:50:94:cb:0a:25:29:34:e8:d3:18:
8b:70:20:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:24:36 2025 by rpki-client