Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0033a210-72b9-3b07-af02-68c559a93dc3.roa
File: 0033a210-72b9-3b07-af02-68c559a93dc3.roa (raw, json)
Hash identifier: tu8b4wsH+xRO9IKZaMyiDWF8u54oQ9cvboJ8sbzwDsA=
Subject key identifier: CF:35:1A:13:DF:46:1F:A1:F0:90:7C:0A:D5:58:D5:EC:69:D0:F2:57
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446EC2D204A73F71CA186A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0033a210-72b9-3b07-af02-68c559a93dc3.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sun 13 Aug 2023 01:28:09 +0000
asID: 19318
IP address blocks: 23.26.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:ec:2d:20:4a:73:f7:1c:a1:86:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 13 01:28:09 2023 GMT
Subject: CN=3b32aba3-a8bd-46ed-ac34-8819c5b708c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:53:7f:87:f8:4d:3a:02:40:45:a7:62:86:c2:
3f:88:35:b2:57:80:20:76:f7:83:d5:08:85:e7:71:
34:02:5c:e5:27:3a:42:cb:81:76:74:51:df:23:a3:
76:3b:a1:45:77:f7:b2:63:19:ac:a6:ef:dc:e3:4d:
8f:f9:af:b8:cd:df:79:81:61:39:e5:76:e9:0c:ad:
e5:47:a8:60:3f:e0:59:4d:87:e8:77:3e:02:ab:a6:
91:0d:ea:2b:91:50:d6:a7:dc:96:ff:6f:63:32:3e:
21:18:e9:92:9f:7c:d4:5e:e7:90:96:0e:d0:14:7d:
ef:dd:2c:52:ca:68:d8:82:ae:f9:16:b0:4c:c8:40:
6c:51:ba:2a:fe:9e:43:98:21:2c:89:b5:45:3a:61:
90:11:25:c6:42:2b:62:f3:6f:5c:27:88:24:e9:d8:
47:f3:0f:8b:e0:a9:06:e9:b2:00:84:0b:ef:dc:3d:
6d:9e:e7:7b:79:bc:a1:15:36:0d:6f:56:ce:90:24:
0d:05:79:ff:8e:a7:0f:c4:9e:00:30:20:4b:aa:92:
50:1b:69:eb:33:34:c6:bf:7c:eb:f3:7c:f8:ab:87:
84:a0:8a:bf:04:dd:a2:ec:a2:c5:20:b5:90:bd:1f:
bf:06:51:1b:a8:0b:c8:f3:65:52:c1:0f:d8:d6:6f:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:1A:13:DF:46:1F:A1:F0:90:7C:0A:D5:58:D5:EC:69:D0:F2:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0033a210-72b9-3b07-af02-68c559a93dc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:2c:e5:0e:70:75:7f:81:61:7a:e3:0d:f4:e1:78:4f:b1:bc:
86:3b:5c:ce:66:00:a9:f4:b2:66:e0:78:8c:e6:69:72:57:39:
84:3d:17:3d:c0:71:d9:85:f1:04:fd:3c:50:47:1c:ef:7a:49:
32:d3:32:f6:5a:66:55:49:da:90:c1:da:f5:86:7e:08:bf:2b:
a8:19:45:d6:54:80:9b:85:02:e8:5c:4f:89:92:8d:c4:1f:f1:
15:88:c3:95:cc:fa:37:e9:e2:40:ca:d1:cc:1e:9b:7f:a2:df:
1c:e8:f2:cf:f6:88:4d:e2:91:e9:21:a2:e8:b7:f6:ee:cb:a1:
a5:2e:22:d5:c7:32:6a:23:ad:96:70:c6:c3:6e:ba:39:03:a1:
9b:55:ad:44:c6:23:45:c5:1d:1e:1c:91:26:24:9d:4a:82:45:
eb:18:c8:d0:82:f3:60:01:23:57:11:97:11:f1:e5:86:cb:22:
0e:2d:e5:6f:b2:e8:2e:ae:94:03:05:c5:b2:16:b3:e8:72:b7:
16:ef:8e:c5:d7:d7:fc:c4:d3:11:db:f1:63:16:2b:d4:cd:b6:
e7:9f:47:09:1f:3d:d9:82:f7:ce:81:cb:95:7e:21:f5:c8:69:
68:54:36:70:d3:7e:3d:f3:47:ea:6c:d2:7a:60:f4:c2:66:d4:
b2:74:01:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRuwtIEpz9xyhhqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgxMzAxMjgwOVowLzEtMCsGA1UEAxMk
M2IzMmFiYTMtYThiZC00NmVkLWFjMzQtODgxOWM1YjcwOGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlN/h/hNOgJARadihsI/iDWyV4AgdveD1QiF
53E0AlzlJzpCy4F2dFHfI6N2O6FFd/eyYxmspu/c402P+a+4zd95gWE55XbpDK3l
R6hgP+BZTYfodz4Cq6aRDeorkVDWp9yW/29jMj4hGOmSn3zUXueQlg7QFH3v3SxS
ymjYgq75FrBMyEBsUboq/p5DmCEsibVFOmGQESXGQiti829cJ4gk6dhH8w+L4KkG
6bIAhAvv3D1tnud7ebyhFTYNb1bOkCQNBXn/jqcPxJ4AMCBLqpJQG2nrMzTGv3zr
83z4q4eEoIq/BN2i7KLFILWQvR+/BlEbqAvI82VSwQ/Y1m8M3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM81GhPfRh+h8JB8CtVY1exp0PJXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDAzM2EyMTAtNzJiOS0z
YjA3LWFmMDItNjhjNTU5YTkzZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxohMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAs5Q5wdX+BYXrjDfTheE+xvIY7XM5mAKn0smbgeIzmaXJXOYQ9Fz3A
cdmF8QT9PFBHHO96STLTMvZaZlVJ2pDB2vWGfgi/K6gZRdZUgJuFAuhcT4mSjcQf
8RWIw5XM+jfp4kDK0cwem3+i3xzo8s/2iE3ikekhoui39u7LoaUuItXHMmojrZZw
xsNuujkDoZtVrUTGI0XFHR4ckSYknUqCResYyNCC82ABI1cRlxHx5YbLIg4t5W+y
6C6ulAMFxbIWs+hytxbvjsXX1/zE0xHb8WMWK9TNtuefRwkfPdmC986By5V+IfXI
aWhUNnDTfj3zR+ps0npg9MJm1LJ0AeI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:50 2025 by rpki-client