Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d7de839-c8ee-3d9d-892b-7a9da6c5baf1.roa
File: 2d7de839-c8ee-3d9d-892b-7a9da6c5baf1.roa (raw, json)
Hash identifier: naV8mQQA5bvR7JWGYtEvHI1/8vEkIotcEG5WTcdzXnk=
Subject key identifier: 39:3B:CA:89:CF:53:AD:4D:6D:CE:2A:9B:AE:ED:BF:05:EA:DC:6B:11
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858432BD4A36EFEBB515F2527B540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d7de839-c8ee-3d9d-892b-7a9da6c5baf1.roa
Signing time: Sun 10 Sep 2023 01:00:22 +0000
ROA not before: Sun 10 Sep 2023 01:00:22 +0000
ROA not after: Sat 09 Dec 2023 02:00:22 +0000
asID: 174
IP address blocks: 23.26.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:2b:d4:a3:6e:fe:bb:51:5f:25:27:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 10 01:00:22 2023 GMT
Not After : Dec 9 02:00:22 2023 GMT
Subject: CN=eee3818e-f625-4c5c-adb8-7bc3b054f1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:42:50:61:ae:63:20:63:42:04:ac:50:36:
b0:a3:08:d9:a2:46:7a:32:8d:65:66:38:95:f5:4b:
cd:0f:92:33:ec:76:bf:7b:63:2a:c4:93:3d:4c:ce:
1a:8f:c2:54:b3:99:87:6e:c2:3a:5e:80:cc:62:78:
af:4d:1b:d4:30:01:d2:63:25:12:75:56:5f:e1:b3:
54:e0:17:25:92:8d:f8:39:31:bd:fd:21:ff:e3:66:
d9:c3:f5:9a:e3:87:c0:db:97:1d:ad:b7:4f:97:5b:
fe:01:22:cf:3b:f9:05:57:2a:9e:36:af:49:6a:dc:
bf:b7:9d:86:15:05:51:ba:9c:aa:33:c5:60:ac:0d:
f3:48:0a:66:95:ba:bb:cb:50:1d:f1:bc:90:7c:66:
9e:4a:7c:b0:40:c4:4c:b8:6e:45:ff:63:ae:ad:d0:
dc:6f:e5:e2:40:66:d6:7c:d9:8b:cf:e0:fe:73:40:
af:b6:ae:03:48:09:58:78:70:96:2a:41:da:57:ed:
48:f1:51:34:92:f2:5f:02:01:b5:e6:af:e7:52:bf:
e2:a7:ab:e0:a7:2d:dd:d4:48:23:53:c1:b7:0e:db:
9e:0f:64:bb:1d:8b:7d:d4:96:a0:df:b0:d7:5c:67:
ea:39:bc:a1:22:cd:23:07:4c:d3:ec:e0:86:d7:a2:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3B:CA:89:CF:53:AD:4D:6D:CE:2A:9B:AE:ED:BF:05:EA:DC:6B:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d7de839-c8ee-3d9d-892b-7a9da6c5baf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:64:80:45:ce:ea:4f:5b:30:c1:7e:47:c8:30:1f:63:5c:5f:
38:ae:3f:eb:73:0e:33:42:c7:d2:3a:b7:27:32:9c:57:85:3b:
cb:cd:f2:8a:ed:67:1d:ed:af:68:13:4d:19:ee:f0:ca:da:c1:
bc:87:fb:50:72:1a:dc:96:a5:b5:ef:c3:2b:b7:76:20:d1:28:
f8:86:40:69:4f:be:c3:51:c4:7c:06:ca:72:ec:cb:05:da:23:
51:99:01:36:f8:21:52:07:86:49:2e:a5:2a:3f:e3:14:47:16:
7f:70:8d:59:04:6b:ad:f6:ce:e3:31:de:75:35:8b:57:ee:ed:
90:a4:34:be:b2:a9:9d:ed:e9:72:d2:57:59:82:80:51:ad:85:
44:ef:0f:35:b4:b7:1c:b0:4e:b6:52:24:b2:56:c9:67:c7:96:
c6:81:98:b9:93:cd:c1:2d:b3:a0:38:28:b6:7c:59:5a:9e:e0:
9c:1e:bd:41:b9:8f:df:40:8d:d5:22:1f:98:cc:b0:55:2f:9d:
05:81:c4:8a:71:a9:b4:f9:5c:03:4e:e7:8f:61:6e:62:73:fa:
a7:e5:9a:7a:80:a2:0f:76:ff:c4:9d:4a:c3:f5:a6:e3:c0:3d:
e7:15:36:de:fd:54:5a:89:2f:67:f9:7e:a0:6c:68:3a:70:bd:
4a:be:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:07 2025 by rpki-client