Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a89cb7c-288c-3551-895c-6c2ea23a4cc6.roa
File: 1a89cb7c-288c-3551-895c-6c2ea23a4cc6.roa (raw, json)
Hash identifier: XAFrqO1Oip/5hqGel71mtVR65r6zKQ7OiqP5PC6BTbw=
Subject key identifier: AA:5A:C4:F2:7B:03:7E:C2:9C:2C:D1:2E:71:31:CE:76:C5:25:2F:D4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583EDA389CA61BD41124EAAA99C8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a89cb7c-288c-3551-895c-6c2ea23a4cc6.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Mon 11 Nov 2024 05:00:00 +0000
asID: 49999
IP address blocks: 23.26.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:da:38:9c:a6:1b:d4:11:24:ea:aa:99:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Nov 11 05:00:00 2024 GMT
Subject: CN=5fe14b8c-4e11-4ef1-86d2-91fad279cd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:e6:15:40:b8:40:5b:87:14:97:80:30:38:
88:47:b8:53:a0:8a:01:dc:3b:75:66:95:e8:7d:13:
d4:cb:4d:54:db:39:73:0f:07:51:09:81:77:72:70:
87:31:d3:aa:2f:9d:95:69:44:ad:db:db:a0:de:4e:
9d:ab:58:a1:f4:20:12:bf:70:58:e7:0a:71:bd:19:
d7:3d:bf:c5:6e:86:85:18:2a:db:5f:8c:9e:16:a7:
27:f1:dc:5d:bf:59:ee:b9:05:01:66:60:af:31:a8:
ac:59:d6:fb:78:44:d2:1b:98:a8:87:a5:19:e4:f6:
60:dd:26:24:b8:7b:e2:1b:1f:6b:18:96:2b:ce:f9:
49:2f:90:50:59:8f:25:54:ee:e7:aa:ca:0f:e2:d3:
7d:36:89:d8:f4:f6:b3:c7:a5:3b:80:44:42:86:12:
99:40:ed:6f:e8:0f:be:5e:f4:5f:47:e3:3d:18:e2:
46:a4:0c:14:a2:57:a2:cc:b2:54:0d:2d:17:7e:7f:
0b:19:44:c8:39:50:e2:ac:b4:c8:37:4a:50:98:5f:
71:77:4f:82:76:d1:e5:75:34:c5:26:e1:b1:14:3b:
94:87:1b:e4:17:86:89:54:ae:2c:ed:cc:53:d3:de:
e9:61:9b:07:f8:37:67:eb:a5:8e:92:dd:ce:7d:2f:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5A:C4:F2:7B:03:7E:C2:9C:2C:D1:2E:71:31:CE:76:C5:25:2F:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a89cb7c-288c-3551-895c-6c2ea23a4cc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:fa:ab:b6:00:01:df:e6:de:8b:59:07:e7:4e:53:6d:30:c5:
9b:0d:4c:1e:15:22:11:10:12:0a:87:28:58:42:84:85:4f:aa:
0c:21:cc:13:20:46:a2:66:07:79:eb:b0:49:a1:5a:8b:10:e5:
85:7a:3b:b5:ad:13:e3:f9:b8:2c:eb:e5:70:24:f5:83:9c:66:
c8:5d:69:a6:30:43:41:88:c7:57:07:f1:75:36:12:5c:20:2a:
ba:d4:8c:d1:b6:ea:69:88:9f:34:c0:de:58:2e:5d:b7:6b:f5:
3d:da:9d:c3:64:18:ed:33:33:24:ab:34:fb:bc:47:6e:67:57:
40:8f:90:fb:6b:3e:22:ed:2b:aa:09:54:73:9d:2f:58:e8:1e:
c9:b4:9b:12:8a:96:16:2c:2a:80:e5:fb:25:d3:70:9b:71:83:
c2:a5:ef:4d:5b:e5:f5:b9:59:0d:bd:94:c0:10:72:fa:32:d2:
8d:c3:80:f3:61:2b:b2:b4:ae:3c:3d:b1:4a:d7:cf:a7:91:87:
96:27:22:06:6a:3c:55:92:4c:95:a6:43:5c:8c:67:ed:6b:cf:
24:99:01:4d:73:f6:be:76:a5:7d:08:b8:a0:50:9d:7b:c4:7e:
63:e5:9e:9b:64:cd:18:b2:58:a4:05:ea:84:fa:50:c5:f3:60:
89:b3:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:02 2025 by rpki-client