Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3574c118-c19f-35ba-af04-138fce1b9b4b.roa
File: 3574c118-c19f-35ba-af04-138fce1b9b4b.roa (raw, json)
Hash identifier: cBTZ07M4aIp2gwQ/2eeUCKoeVArCoNHFRMOStcQd+6A=
Subject key identifier: 9E:86:37:19:86:0F:3F:B0:1D:88:DD:D1:F9:B5:E4:CB:0B:31:16:8C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584380FA7B4A14A73047B17D3000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3574c118-c19f-35ba-af04-138fce1b9b4b.roa
Signing time: Tue 10 Oct 2023 13:00:18 +0000
ROA not before: Tue 10 Oct 2023 13:00:18 +0000
ROA not after: Mon 08 Jan 2024 14:00:18 +0000
asID: 7018
IP address blocks: 23.26.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:80:fa:7b:4a:14:a7:30:47:b1:7d:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 10 13:00:18 2023 GMT
Not After : Jan 8 14:00:18 2024 GMT
Subject: CN=ea36461e-7cf9-4ac5-8008-d19508b7b4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:7d:f5:da:59:58:fe:ee:4c:92:0b:24:cb:
ad:6b:f4:15:f5:57:39:be:f9:28:29:28:d6:25:e1:
73:cc:e4:ce:23:15:39:ab:71:8b:43:5c:45:89:2d:
9e:51:bb:99:17:42:7c:53:d9:05:bf:bc:e6:92:88:
c1:f0:14:ed:83:19:40:34:41:3d:3d:b7:56:37:92:
7d:07:cc:e8:3c:7a:1f:26:83:93:9b:b2:6c:35:85:
9c:1b:fc:81:1c:1c:a1:81:28:18:23:3d:b2:09:1e:
30:7f:6d:9f:e2:2b:8b:8d:e0:75:4a:3d:a0:71:45:
da:e1:81:30:39:2f:20:cf:7b:1c:1c:f9:95:2e:d1:
53:b6:15:18:4f:3d:1f:7a:34:e1:38:1d:a5:b3:71:
2a:f5:c0:00:a1:ed:8f:9d:ea:b5:6b:c5:62:9b:6f:
83:ad:15:11:ea:66:34:ee:de:69:93:6d:9a:97:ca:
df:93:79:1e:81:4a:22:6c:0e:3b:e9:2f:3b:2d:0a:
f6:ae:fe:82:fc:85:ef:de:8c:cc:d1:43:dd:9b:6b:
0c:fd:c1:f5:56:63:ab:78:43:51:1c:08:14:eb:f7:
8e:c3:94:ed:01:4f:5f:fe:90:d9:95:dc:98:a2:22:
60:33:f0:9d:83:7c:e1:03:a6:22:33:56:54:af:b8:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:37:19:86:0F:3F:B0:1D:88:DD:D1:F9:B5:E4:CB:0B:31:16:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3574c118-c19f-35ba-af04-138fce1b9b4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:5e:27:f9:ed:4c:9a:cb:2a:ec:65:a0:17:86:ce:c3:70:28:
f7:d1:30:25:5f:5e:2e:3f:a9:d5:6d:2f:67:f2:ff:51:8e:a3:
6a:d1:2d:b5:f7:b8:87:93:e8:65:75:7a:00:62:fa:bf:91:d9:
fb:f4:58:95:05:76:10:3b:35:31:c0:46:c1:55:ba:98:65:93:
43:5a:61:fe:87:45:2c:62:97:9b:eb:90:c5:af:39:82:1a:01:
ba:47:0d:07:fe:fb:04:17:92:39:2b:63:e5:88:28:04:36:d2:
b8:bc:7f:56:cb:c6:d8:ea:e4:5c:54:77:0f:37:b0:e9:66:66:
a5:71:61:de:7e:ef:c1:9b:6b:25:76:6a:e8:d0:ae:8b:af:e5:
cf:84:89:f0:5b:e1:94:3e:33:ae:10:6c:bd:74:0c:7a:1d:36:
17:93:7a:88:92:00:ce:4f:0f:aa:a5:e1:a9:bc:9a:b0:3b:c8:
dd:83:69:5c:94:8f:86:db:f1:a7:a3:d2:1d:1c:28:c5:b4:48:
e4:a6:63:93:27:68:ad:63:6f:46:0d:b0:51:fc:2e:fe:e4:3e:
70:61:14:a9:80:88:11:3f:9b:0a:fd:00:ad:a8:e6:ff:9c:46:
72:16:e7:18:dd:cb:44:85:c7:3f:7b:11:e4:26:35:87:cc:66:
9a:59:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:13 2025 by rpki-client