Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b4627c5-9a1f-3149-9de7-7d486a026877.roa
File: 4b4627c5-9a1f-3149-9de7-7d486a026877.roa (raw, json)
Hash identifier: A9VicABe90fbtyA6uIhx/2tN2GeIMZT0R5bPdx76tmw=
Subject key identifier: EA:21:62:E8:21:12:56:7C:8D:AD:D6:4F:D2:6E:7C:B8:AF:CE:A7:30
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584826D7C0E9991976B8807CB400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b4627c5-9a1f-3149-9de7-7d486a026877.roa
Signing time: Mon 09 Dec 2024 18:02:19 +0000
ROA not before: Mon 09 Dec 2024 18:02:19 +0000
ROA not after: Sun 09 Mar 2025 17:02:19 +0000
asID: 834
IP address blocks: 23.26.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:d7:c0:e9:99:19:76:b8:80:7c:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 9 18:02:19 2024 GMT
Not After : Mar 9 17:02:19 2025 GMT
Subject: CN=219cd1db-7133-42c9-b990-ade9cc7c5c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:99:db:e0:87:37:4e:a4:fb:eb:e6:60:b3:
f7:1f:64:af:02:21:06:c5:c8:d0:c8:37:99:01:15:
0f:89:b1:6d:b8:71:16:e5:8c:37:82:4f:99:d3:40:
12:27:af:bb:2b:91:dc:cd:85:f9:0e:ba:c5:de:23:
17:1e:e8:1f:a2:e0:c8:83:b2:2c:59:29:c3:22:1e:
39:58:a5:12:3d:fa:52:2e:da:04:c9:06:9e:a0:92:
d1:e6:f1:43:84:93:40:e2:26:b4:92:bd:61:d9:5c:
fc:97:15:c6:81:7f:0e:c8:ad:88:3f:1c:17:af:04:
84:ef:93:ed:45:f5:71:91:66:38:08:7f:52:37:9e:
13:52:9d:d7:95:40:71:67:93:ee:5f:1b:5f:0c:f5:
ac:a1:9c:e4:c9:d3:03:30:87:61:00:27:d9:2e:4f:
36:45:cc:9a:f6:c4:a3:11:74:b5:41:ac:ea:0f:f6:
db:b1:36:68:1f:6e:9f:65:87:1b:08:3e:3c:70:cb:
b1:92:fa:75:fa:64:71:be:26:1c:8e:df:4d:d2:64:
fe:dd:ad:39:b8:56:00:03:1e:38:bb:a7:e6:1f:c3:
e1:31:a0:b4:73:6e:e4:74:70:0d:5e:19:0e:33:52:
81:b4:1a:e5:36:98:3e:7c:0a:32:24:96:bb:ec:0e:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:62:E8:21:12:56:7C:8D:AD:D6:4F:D2:6E:7C:B8:AF:CE:A7:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b4627c5-9a1f-3149-9de7-7d486a026877.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:a1:83:34:4c:75:d2:21:98:ea:1c:95:11:6d:02:5a:4e:ed:
13:31:ee:43:2f:c2:42:ad:ca:ed:7d:7d:b8:1b:b5:d9:94:fa:
65:01:d7:81:f4:62:81:50:d5:61:19:8f:69:be:b9:c5:4b:65:
d2:06:19:55:a2:c9:43:41:2a:29:71:f9:48:40:4a:5e:14:bc:
dd:d2:f7:88:47:d6:95:46:b5:59:59:66:fe:4f:68:38:5d:c6:
2e:19:ed:72:29:b2:73:81:41:1d:ef:40:ec:8b:49:7c:fe:0e:
b4:f1:56:ec:19:b4:4b:e5:5d:49:b7:66:46:51:f3:8f:cf:79:
e1:ec:14:1e:8d:49:90:5a:c6:99:f0:e3:c0:b7:15:7d:cb:0b:
e0:98:23:eb:e7:95:7e:93:47:7c:64:56:0f:bf:8c:d2:c4:9d:
4b:cf:30:94:8a:ee:15:4c:bb:d0:b6:d8:11:56:d6:e4:09:f0:
d5:f0:63:ad:83:51:27:62:a8:c7:f8:fd:4a:fa:f0:3a:a5:24:
6a:97:e6:34:c4:01:dc:62:4c:2a:b1:6b:af:91:9c:a9:80:fa:
b7:72:76:ba:0b:26:d6:c1:00:e3:40:d5:d7:83:f0:4c:f2:1e:
9a:0d:0c:be:38:9c:db:61:76:b8:88:3a:de:db:61:d6:96:62:
e2:e2:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:01:05 2025 by rpki-client