Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/455e29be-3522-3ace-8744-81e3eef315ca.roa
File: 455e29be-3522-3ace-8744-81e3eef315ca.roa (raw, json)
Hash identifier: ZXfB1vhs+J7HUgLOxqTI2JUBsMsMsUxxHxpO9vckigo=
Subject key identifier: 98:DD:3B:80:24:45:83:52:52:4B:B9:78:D1:10:54:7C:8B:5B:D7:9A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848DC488C405DF4F0D2B3715080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/455e29be-3522-3ace-8744-81e3eef315ca.roa
Signing time: Wed 12 Feb 2025 17:50:54 +0000
ROA not before: Wed 12 Feb 2025 17:50:54 +0000
ROA not after: Tue 13 May 2025 16:50:54 +0000
asID: 834
IP address blocks: 23.26.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dc:48:8c:40:5d:f4:f0:d2:b3:71:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 12 17:50:54 2025 GMT
Not After : May 13 16:50:54 2025 GMT
Subject: CN=2d22fa7e-7610-4e44-8e67-b048a81dbfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:74:23:ea:1b:ca:06:f3:15:ef:3b:ea:f4:
72:59:97:74:90:6b:97:9a:ee:51:3d:de:52:4c:c9:
8e:3d:1a:94:e0:ac:1d:e4:85:10:fb:6c:e1:6a:eb:
96:dd:fc:88:09:4d:db:6b:8a:70:da:1e:7b:29:61:
bf:2b:ed:85:f0:cd:1d:3a:b5:ce:28:68:83:03:75:
37:f1:14:03:70:79:2c:70:86:04:47:f9:02:10:85:
ad:80:23:c0:e3:e1:0d:15:e2:d9:e6:4f:6a:44:31:
e5:fc:2c:95:6a:e6:2d:f2:e4:e9:10:cb:82:a6:ca:
b8:76:85:6e:fc:56:36:6f:19:6f:48:17:66:07:32:
86:44:05:3d:8e:39:d0:3a:95:9b:08:bf:f6:40:26:
fc:1e:c7:4a:e1:62:d4:65:6e:7a:e3:2d:5d:81:32:
a7:f3:7d:69:c5:64:31:52:5d:c6:69:4e:09:cb:0b:
b7:5e:c3:a9:e7:93:47:81:55:6c:43:84:9f:f7:c0:
bf:b0:7a:da:66:06:6d:6f:6f:84:97:66:25:26:f5:
4f:0f:04:b3:ae:36:06:f4:75:3c:b3:24:b9:44:d7:
ea:82:58:be:a5:21:1c:d2:d1:33:5f:f4:aa:f3:b2:
59:8e:40:60:ed:23:83:34:f5:81:0d:3f:14:74:03:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:3B:80:24:45:83:52:52:4B:B9:78:D1:10:54:7C:8B:5B:D7:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/455e29be-3522-3ace-8744-81e3eef315ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:62:51:f3:f9:19:cc:57:e5:5a:d6:4a:f6:86:2b:49:aa:09:
1b:18:76:75:af:10:21:69:6f:5a:3a:00:7e:41:03:84:de:33:
ba:97:af:c5:e1:96:98:32:cd:f5:ef:84:fb:c6:09:9c:68:54:
f0:dc:02:cf:8d:ea:98:9d:0c:47:aa:c9:a6:ea:cb:86:5b:70:
ab:6f:75:75:b4:22:2a:79:82:31:7a:5f:df:c6:b5:2c:c5:02:
ce:cd:a5:73:cb:5a:d9:91:65:c7:0b:12:98:d5:2a:2f:71:41:
b8:5c:02:a6:b6:2a:e3:f1:ef:93:75:d1:c9:8e:e4:30:cd:ec:
c7:da:5a:3b:a9:72:1a:4c:2b:44:e4:e0:6f:05:4a:93:08:b2:
9d:4b:1b:d2:86:30:25:75:af:da:cb:b2:d4:f9:22:98:e4:27:
e8:8e:9d:11:ca:fa:f7:7f:f9:17:a3:e5:fe:9d:48:04:db:db:
6f:b4:b9:91:1a:7d:d4:07:cb:2f:f9:6f:aa:92:d6:1e:5f:e8:
b3:e0:74:7c:b5:2b:92:6c:2c:25:cb:94:0a:50:61:15:1b:84:
ed:ee:b9:2b:cb:93:c1:07:48:78:7a:3a:51:18:1b:f1:55:91:
15:07:59:8b:42:69:14:17:be:19:40:d5:1f:50:91:f5:b9:8f:
1c:9f:b8:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjcSIxAXfTw0rNxUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxMjE3NTA1NFoXDTI1MDUxMzE2NTA1NFowLzEtMCsGA1UEAxMk
MmQyMmZhN2UtNzYxMC00ZTQ0LThlNjctYjA0OGE4MWRiZmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg90I+obygbzFe876vRyWZd0kGuXmu5RPd5S
TMmOPRqU4Kwd5IUQ+2zhauuW3fyICU3ba4pw2h57KWG/K+2F8M0dOrXOKGiDA3U3
8RQDcHkscIYER/kCEIWtgCPA4+ENFeLZ5k9qRDHl/CyVauYt8uTpEMuCpsq4doVu
/FY2bxlvSBdmBzKGRAU9jjnQOpWbCL/2QCb8HsdK4WLUZW564y1dgTKn831pxWQx
Ul3GaU4Jywu3XsOp55NHgVVsQ4Sf98C/sHraZgZtb2+El2YlJvVPDwSzrjYG9HU8
syS5RNfqgli+pSEc0tEzX/Sq87JZjkBg7SODNPWBDT8UdAOpswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJjdO4AkRYNSUku5eNEQVHyLW9eaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDU1ZTI5YmUtMzUyMi0z
YWNlLTg3NDQtODFlM2VlZjMxNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtiUfP5GcxX5VrWSvaGK0mqCRsYdnWvECFpb1o6AH5BA4TeM7qXr8Xh
lpgyzfXvhPvGCZxoVPDcAs+N6pidDEeqyabqy4ZbcKtvdXW0Iip5gjF6X9/GtSzF
As7NpXPLWtmRZccLEpjVKi9xQbhcAqa2KuPx75N10cmO5DDN7MfaWjupchpMK0Tk
4G8FSpMIsp1LG9KGMCV1r9rLstT5IpjkJ+iOnRHK+vd/+Rej5f6dSATb22+0uZEa
fdQHyy/5b6qS1h5f6LPgdHy1K5JsLCXLlApQYRUbhO3uuSvLk8EHSHh6OlEYG/FV
kRUHWYtCaRQXvhlA1R9QkfW5jxyfuFg=
-----END CERTIFICATE-----
Generated at Wed Jun 18 21:58:29 2025 by rpki-client