Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f71a041-252f-39f9-819a-ca87672feab9.roa
File: 3f71a041-252f-39f9-819a-ca87672feab9.roa (raw, json)
Hash identifier: Hsl4gJEItEc8rA/eQAVs0FeA4O8K9zvmYbNPweB0/N0=
Subject key identifier: DA:58:6A:82:41:E4:C3:3B:3B:D5:9B:D7:F6:50:0C:A8:31:76:A7:D5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858421C19A75479166B266D5D3600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f71a041-252f-39f9-819a-ca87672feab9.roa
Signing time: Sun 04 Jun 2023 16:59:35 +0000
ROA not before: Sun 04 Jun 2023 16:59:35 +0000
ROA not after: Sat 02 Sep 2023 16:59:35 +0000
asID: 398465
IP address blocks: 23.26.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:1c:19:a7:54:79:16:6b:26:6d:5d:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 4 16:59:35 2023 GMT
Not After : Sep 2 16:59:35 2023 GMT
Subject: CN=3da4d1be-67d5-47f7-afd0-464871d60b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:24:33:02:84:81:8a:25:72:d0:60:4e:e1:
45:3d:c9:ed:1d:51:46:d5:45:87:1a:0c:e5:a7:87:
95:7c:58:87:18:80:cb:5b:1d:cb:f9:76:40:73:36:
fc:ff:5f:0b:bf:28:82:6a:7e:01:66:d4:29:01:fd:
35:a0:ea:8c:58:60:03:32:d3:4e:ea:52:f5:20:f5:
53:d1:a5:d8:6f:bd:76:fb:1b:68:ed:13:0f:76:32:
44:bd:17:e2:47:f6:b4:8c:c2:fa:62:95:7a:72:3c:
f8:e7:71:08:1b:b8:7d:c8:33:c1:0b:57:88:0e:e8:
ed:d0:cd:68:6d:13:d1:24:0e:8c:72:14:8c:8d:8d:
36:1f:be:ed:7f:85:61:4a:ac:a2:2f:cb:b2:a1:bb:
92:20:89:79:e2:a6:7e:20:2c:22:9f:33:5e:fa:b0:
35:45:06:ac:73:9d:ac:15:71:69:50:26:ad:e7:4a:
8f:91:51:4f:26:f2:b1:9d:fd:a6:53:27:79:fb:fa:
bc:09:9f:4c:d7:02:c4:03:5b:67:c9:bb:08:18:31:
b1:67:f4:a0:b2:b0:04:51:06:e4:0f:0c:cf:b0:03:
07:13:b8:a0:5d:c3:1d:fa:3b:fb:6c:10:00:3c:d1:
36:be:2f:a5:99:f8:a5:4c:e1:d5:ca:71:02:b9:78:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:58:6A:82:41:E4:C3:3B:3B:D5:9B:D7:F6:50:0C:A8:31:76:A7:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f71a041-252f-39f9-819a-ca87672feab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c2:c2:4a:b2:3c:89:af:42:9d:d8:74:e0:32:ad:48:29:44:
b4:99:4f:29:45:6e:54:02:70:87:2f:13:d3:7c:f5:f4:76:a3:
23:34:82:41:5e:5e:dd:fd:8f:0f:72:ca:55:a6:e4:3f:b7:d8:
f3:76:7b:83:3e:80:c4:99:c2:17:14:be:0f:70:ee:82:59:7e:
67:03:47:ab:c2:41:f0:df:39:35:ba:50:57:42:de:27:e8:85:
7d:a3:2c:04:f3:32:d6:48:71:f2:3d:2d:2c:c1:36:00:95:25:
5d:93:39:1c:f6:fe:8a:0c:a3:f3:2e:8e:9b:4c:6c:2a:88:07:
b7:1c:fa:f0:d0:e4:d7:11:de:84:a3:66:22:7a:da:56:84:aa:
65:c8:43:b9:2d:99:2e:fa:12:8c:cb:fe:4e:ab:cf:10:53:9e:
36:ff:2e:2a:a6:82:ed:ec:4f:fb:6d:28:b5:8f:99:7b:31:09:
6b:d1:82:9c:2d:15:64:b2:74:af:35:08:f3:ef:f1:4f:06:3c:
28:06:d4:3d:13:ef:88:0e:b1:1a:04:b1:bb:e1:fe:87:bd:53:
99:f6:09:fa:17:9a:cb:a3:24:cf:99:b1:f1:47:69:8f:33:01:
46:3e:25:77:b1:d0:55:bc:c6:76:49:8d:ef:74:d0:2a:85:50:
ae:c4:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:36:03 2025 by rpki-client