Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e03ab8e-0a58-3b0e-b4b2-5206a42e96fd.roa
File: 2e03ab8e-0a58-3b0e-b4b2-5206a42e96fd.roa (raw, json)
Hash identifier: mfEcd8T5O9V3FraLOwvWKIO5+R8qNt/xVw1unS8XVbg=
Subject key identifier: 7D:4D:1F:EB:D2:8A:DF:27:14:7C:F7:9F:6B:AB:A1:00:BF:90:30:2D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844E730000DF178670134346380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e03ab8e-0a58-3b0e-b4b2-5206a42e96fd.roa
Signing time: Thu 15 Feb 2024 20:27:35 +0000
ROA not before: Thu 15 Feb 2024 20:27:35 +0000
ROA not after: Wed 15 May 2024 19:27:35 +0000
asID: 11798
IP address blocks: 23.26.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:e7:30:00:0d:f1:78:67:01:34:34:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 15 20:27:35 2024 GMT
Not After : May 15 19:27:35 2024 GMT
Subject: CN=bfc92442-ce00-4dc6-9568-ed8b8fa3cffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:4c:6b:96:35:50:be:13:91:c6:44:cb:72:
a5:5c:63:fd:f4:b0:5b:f5:8f:13:f4:4c:07:9c:5c:
e6:f1:33:13:b7:fc:c3:df:a1:dc:e2:95:65:8d:0b:
bf:89:38:5b:52:22:86:9e:8c:a0:8e:f1:d2:41:8d:
08:a1:a3:a8:d7:29:af:de:ad:8b:93:0a:ce:6e:df:
71:9c:26:a1:e1:53:11:04:ef:55:03:6d:9c:66:bb:
ec:44:29:42:7a:7c:d2:4b:1c:ce:91:c7:36:0a:52:
8e:19:34:36:cb:a9:09:17:38:ab:00:ff:e8:81:1d:
5a:ce:aa:34:8e:06:89:70:2c:13:40:61:cd:53:5c:
28:62:89:70:92:bd:5b:eb:42:76:b9:16:98:ec:95:
0b:c6:24:80:9a:3e:ad:52:ba:8e:41:c6:5a:39:c1:
ac:df:df:be:43:6f:32:9f:b5:d9:15:d0:fd:a9:ad:
15:96:d6:23:c5:3d:0b:a2:2a:91:74:c5:1c:2c:88:
9e:b5:01:15:e0:6e:ac:ef:79:25:63:e0:55:4d:ed:
78:d7:4c:e0:bc:47:f7:41:b0:76:8c:96:ba:25:a2:
9a:36:1f:c5:0c:dd:b5:90:9a:fa:96:1e:a0:5b:9b:
33:ba:09:9d:39:79:db:aa:5a:94:f6:76:b5:6f:de:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:1F:EB:D2:8A:DF:27:14:7C:F7:9F:6B:AB:A1:00:BF:90:30:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e03ab8e-0a58-3b0e-b4b2-5206a42e96fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:8f:6d:c0:76:ae:7c:bb:54:d3:2a:e4:15:74:5a:56:d1:26:
0c:9f:8d:5b:a8:0e:3c:4b:15:4d:46:96:9c:25:9d:8a:09:16:
36:83:5e:22:20:9f:54:e9:40:06:d0:6d:23:67:56:b3:8e:75:
23:d8:09:14:4d:cf:a4:b1:5c:ef:cd:ba:7b:2e:bd:91:59:36:
94:df:0e:a3:7a:69:d7:21:df:3b:8c:6f:82:57:f4:fb:19:70:
4c:46:fa:33:2e:3b:95:b0:47:79:f2:8a:2b:d7:90:65:77:47:
de:9b:3d:bc:94:80:97:d3:34:ee:ac:e1:b6:a0:dd:ee:08:80:
fc:a2:95:9e:54:7d:6d:6e:2c:8b:97:07:73:e9:34:66:5a:85:
e4:cf:22:03:d8:40:d8:ee:b1:7b:2e:ff:07:3e:2c:c4:46:9e:
36:f1:bc:96:ea:a8:b0:e8:71:a2:3f:ae:8f:5f:d4:57:04:67:
92:d3:46:68:c0:82:51:90:a3:e2:4b:31:79:f4:d6:4d:07:7d:
0e:ab:a2:6f:cd:7b:cc:c3:19:04:8d:94:3e:dc:92:e9:87:a6:
88:97:5b:66:a6:a2:98:70:00:6c:f3:84:b1:fc:1a:ce:31:1f:
ac:55:45:3e:f3:d4:30:a4:de:9b:65:b0:a7:55:e8:85:00:7f:
cf:df:43:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETnMAAN8XhnATQ0Y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDIxNTIwMjczNVoXDTI0MDUxNTE5MjczNVowLzEtMCsGA1UEAxMk
YmZjOTI0NDItY2UwMC00ZGM2LTk1NjgtZWQ4YjhmYTNjZmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNZMa5Y1UL4TkcZEy3KlXGP99LBb9Y8T9EwH
nFzm8TMTt/zD36Hc4pVljQu/iThbUiKGnoygjvHSQY0IoaOo1ymv3q2LkwrObt9x
nCah4VMRBO9VA22cZrvsRClCenzSSxzOkcc2ClKOGTQ2y6kJFzirAP/ogR1azqo0
jgaJcCwTQGHNU1woYolwkr1b60J2uRaY7JULxiSAmj6tUrqOQcZaOcGs39++Q28y
n7XZFdD9qa0VltYjxT0LoiqRdMUcLIietQEV4G6s73klY+BVTe1410zgvEf3QbB2
jJa6JaKaNh/FDN21kJr6lh6gW5szugmdOXnbqlqU9na1b95J/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1NH+vSit8nFHz3n2uroQC/kDAtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmUwM2FiOGUtMGE1OC0z
YjBlLWI0YjItNTIwNmE0MmU5NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFxoIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmPbcB2rny7VNMq5BV0WlbRJgyfjVuoDjxLFU1GlpwlnYoJFjaDXiIg
n1TpQAbQbSNnVrOOdSPYCRRNz6SxXO/NunsuvZFZNpTfDqN6adch3zuMb4JX9PsZ
cExG+jMuO5WwR3nyiivXkGV3R96bPbyUgJfTNO6s4bag3e4IgPyilZ5UfW1uLIuX
B3PpNGZaheTPIgPYQNjusXsu/wc+LMRGnjbxvJbqqLDocaI/ro9f1FcEZ5LTRmjA
glGQo+JLMXn01k0HfQ6rom/Ne8zDGQSNlD7ckumHpoiXW2amophwAGzzhLH8Gs4x
H6xVRT7z1DCk3ptlsKdV6IUAf8/fQ34=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:17 2025 by rpki-client