Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/39d04773-1821-3dae-9d1b-80529970f298.roa
File: 39d04773-1821-3dae-9d1b-80529970f298.roa (raw, json)
Hash identifier: wa29DQ/+0X64lfSlJo0s1gwzBhRJrlax9UbdkP79WGw=
Subject key identifier: A4:93:37:DB:44:68:86:28:34:E6:DE:A2:8A:96:02:A2:7A:E6:28:0D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858421C16CF7A8C8AA99E488778C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/39d04773-1821-3dae-9d1b-80529970f298.roa
Signing time: Sun 04 Jun 2023 16:53:51 +0000
ROA not before: Sun 04 Jun 2023 16:53:51 +0000
ROA not after: Sat 02 Sep 2023 16:53:51 +0000
asID: 834
IP address blocks: 23.26.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:1c:16:cf:7a:8c:8a:a9:9e:48:87:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 4 16:53:51 2023 GMT
Not After : Sep 2 16:53:51 2023 GMT
Subject: CN=2ab79c52-9499-4b27-b60e-b8297face289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:ac:35:4d:ee:05:5e:ee:c7:4d:d8:cb:5b:
1b:db:e6:95:7d:54:8e:90:57:77:d8:4f:eb:ed:74:
b8:83:ac:95:ae:2d:0c:57:d6:50:fa:ca:dc:31:5c:
6f:9c:4f:53:98:00:63:27:39:7c:8d:20:f3:b9:d9:
32:0b:f1:79:ed:21:d2:12:6c:82:4f:69:c6:be:d4:
d0:08:fc:c9:93:3d:15:84:60:a5:ea:8f:ea:de:35:
29:df:8a:d9:2d:74:52:a8:1e:9f:ac:de:6b:7d:07:
1d:b7:c9:06:8c:80:cb:66:7f:26:23:c0:6d:bc:8b:
53:c9:11:09:3f:b0:cf:b4:53:81:a9:5f:db:38:a1:
52:62:fc:24:58:10:df:a5:a5:70:0a:72:10:a7:8a:
82:00:f3:87:0c:70:92:94:bc:a1:ab:d6:b1:60:b9:
9c:0b:19:46:44:ef:17:33:c0:08:82:fa:95:ef:7b:
0a:37:ea:4f:5b:a9:57:90:32:c5:da:83:0e:dd:42:
70:6f:83:b1:eb:bf:90:12:b6:13:e9:75:1b:a7:be:
1a:17:07:63:27:88:42:70:81:75:a2:65:94:bf:f6:
de:40:56:3d:9e:ca:8b:74:3c:27:e9:a8:9f:05:52:
79:69:e4:c3:e3:7c:49:4f:74:34:32:13:70:29:af:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:93:37:DB:44:68:86:28:34:E6:DE:A2:8A:96:02:A2:7A:E6:28:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/39d04773-1821-3dae-9d1b-80529970f298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:70:54:ae:5f:c8:17:6d:cc:fe:28:3a:2c:e6:e2:5c:25:92:
75:27:35:cf:59:74:7e:65:3a:19:72:02:fa:46:de:7c:fc:c1:
9f:57:1c:9c:ab:c4:f5:a0:81:7f:20:6b:d7:9c:9c:9d:23:e5:
f7:9b:9a:b8:65:69:f2:0d:41:c7:61:77:ba:b6:54:4d:90:24:
1b:d8:27:ff:0f:23:08:34:39:11:a0:a9:2c:79:72:4c:7e:a9:
e0:85:2a:89:ad:f2:33:a0:bc:73:24:e7:87:07:b4:2e:6a:80:
9e:ed:ce:13:e5:9e:85:17:57:05:fc:ec:ba:d1:e8:6b:4a:15:
03:9c:01:44:2d:cc:ba:44:a1:ba:d8:58:ba:0c:1a:59:c2:d6:
45:a4:28:9e:af:4e:e7:a6:4a:90:7c:29:33:26:29:dd:e2:51:
ad:ce:24:ee:05:f0:0b:58:77:a7:9c:7e:1a:d9:3a:b5:39:31:
19:cb:e7:1c:aa:c4:19:de:82:8c:0d:f8:ce:00:a8:90:6d:e0:
e7:69:e7:87:15:a8:1d:b9:c6:e9:ed:4c:d9:29:ef:8d:c7:ab:
18:3d:b2:24:11:bd:03:8e:ce:b5:f9:d0:ea:60:50:fd:2a:53:
37:79:59:6a:55:50:fb:f6:30:e6:21:db:f6:03:dc:48:f3:fb:
83:04:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:23:40 2025 by rpki-client