Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f130997-fa11-3ae3-81fe-ec8806bf0ff6.roa
File: 1f130997-fa11-3ae3-81fe-ec8806bf0ff6.roa (raw, json)
Hash identifier: tmqI9yrF8rcV6F3T9NnQmTZuEztx0PG3zfWJYLVqkEo=
Subject key identifier: C7:20:4A:99:93:01:C0:AD:E1:F7:A9:F0:07:A9:77:05:0A:29:9A:6E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846765A01D15A854292F3195280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f130997-fa11-3ae3-81fe-ec8806bf0ff6.roa
Signing time: Sun 07 Jul 2024 19:59:45 +0000
ROA not before: Sun 07 Jul 2024 19:59:45 +0000
ROA not after: Sat 05 Oct 2024 19:59:45 +0000
asID: 399989
IP address blocks: 23.26.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:76:5a:01:d1:5a:85:42:92:f3:19:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 7 19:59:45 2024 GMT
Not After : Oct 5 19:59:45 2024 GMT
Subject: CN=0ae422d5-3e74-4933-8108-8022b7fb0270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:a7:9f:f2:18:f9:97:23:9d:11:3c:50:7f:
f4:e3:fc:f0:90:80:6a:a4:f9:b1:41:a2:37:52:53:
76:0b:a3:e2:33:bd:10:be:85:2b:22:71:e4:6c:7c:
66:7e:e9:a1:67:56:9e:42:1c:27:cb:51:80:75:92:
bc:28:6c:cc:70:2e:fc:a9:9d:37:df:f2:f9:b2:37:
e3:2b:04:a1:9a:07:75:66:b5:27:d3:9a:9b:37:57:
46:ac:97:2f:5d:a7:89:3b:d1:01:58:9e:72:ae:13:
28:13:9e:f9:1a:ed:f9:32:0b:f5:a0:6c:c1:d5:57:
90:0a:8e:60:e9:79:d3:b3:85:f2:67:ea:0b:07:15:
7d:68:ba:e3:d2:e1:4e:0f:d4:81:9e:35:c6:72:1f:
76:8f:a3:75:7c:22:2d:d7:72:a4:03:a3:ca:76:b0:
ea:37:d7:6a:00:41:df:e8:58:5d:26:94:23:98:49:
3f:a2:f8:a1:eb:24:2d:14:c3:58:a0:d6:86:47:1a:
39:d8:ab:f7:10:48:cb:20:7a:d4:63:7b:e6:72:aa:
73:03:2f:1f:20:4b:fc:83:dd:20:15:16:2a:61:d5:
eb:f0:54:69:f0:d3:69:a1:b7:e5:65:44:ed:6b:22:
37:b6:0d:f1:18:56:83:f7:d7:d9:65:9c:d9:4b:e4:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:20:4A:99:93:01:C0:AD:E1:F7:A9:F0:07:A9:77:05:0A:29:9A:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f130997-fa11-3ae3-81fe-ec8806bf0ff6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:3e:3a:6f:2b:16:5e:ec:2d:d0:d0:4a:d8:d0:57:38:bb:18:
83:ac:a5:84:92:c6:84:5c:3b:cd:05:5b:ed:f1:45:f7:7e:ad:
85:3f:d4:a2:7a:5c:d9:a8:16:3b:08:51:56:4f:13:4d:bf:fa:
05:4a:52:18:43:9a:96:b6:97:ac:d9:78:f3:c7:ac:22:bb:68:
50:7b:5a:26:8a:17:c4:af:44:54:7b:38:59:7d:db:04:d7:65:
e0:30:c1:1d:fe:9b:74:b6:f5:71:00:a7:57:3f:00:e2:29:be:
6d:d7:3c:28:e3:21:00:ca:30:07:55:f7:92:2b:1b:8e:79:fb:
dc:d6:c4:a0:f5:f5:5a:d9:57:ca:f1:5e:ac:0c:6f:14:84:ab:
9d:db:5c:ef:5f:46:7f:b9:2a:00:ef:4a:e7:6a:54:1c:68:4c:
cf:e8:aa:73:1a:e5:a2:63:9f:56:71:fa:eb:3b:05:3c:64:62:
44:a1:ed:ce:55:34:05:ab:bf:2e:3b:0c:e9:45:7b:81:80:ba:
19:1f:c4:6e:e1:f9:fc:2f:c6:fa:c8:f9:32:03:01:ab:b9:1d:
f5:b0:17:99:e9:b5:51:ec:0d:27:5f:af:17:67:5b:5f:21:55:
4b:41:37:31:2b:19:b1:79:ed:28:40:5b:37:96:5b:ca:08:b4:
a5:22:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:46:09 2025 by rpki-client