Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5be5dac6-a85c-305d-82d8-60c044056c1e.roa
File: 5be5dac6-a85c-305d-82d8-60c044056c1e.roa (raw, json)
Hash identifier: K6Yft3WQ7snx4QjBXR8XqvwaOcWvSK73Tuu5tPhWhEM=
Subject key identifier: A4:6F:0D:F2:3C:85:83:85:3A:7C:35:37:6A:63:37:CF:E4:F0:7C:8B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B06ABAE346D011D3E495C7C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5be5dac6-a85c-305d-82d8-60c044056c1e.roa
Signing time: Tue 28 Jan 2025 00:44:12 +0000
ROA not before: Tue 28 Jan 2025 00:44:12 +0000
ROA not after: Sun 27 Apr 2025 23:44:12 +0000
asID: 834
IP address blocks: 23.26.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:6a:ba:e3:46:d0:11:d3:e4:95:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 00:44:12 2025 GMT
Not After : Apr 27 23:44:12 2025 GMT
Subject: CN=38417e35-28f6-4c86-ac63-08cb0bdf8a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:22:52:e6:3e:8b:52:a4:d0:04:9d:1f:f0:
8a:e7:a1:7a:5a:0d:78:91:fa:43:8f:16:fe:d8:d3:
6a:af:f5:2c:41:13:31:46:c5:22:4b:97:2d:7c:16:
b3:f3:84:7a:21:ff:65:37:c7:ca:21:f9:90:8d:b8:
77:52:63:01:57:24:64:e4:80:59:69:4a:e6:b0:ce:
6a:cd:f0:0a:bd:6d:6c:1f:93:16:31:84:48:44:0c:
09:ff:c3:03:05:95:9a:dd:18:6c:9c:5c:44:28:e5:
2e:36:f6:35:e5:08:f2:72:08:ac:2a:a7:2b:b8:2a:
f3:0f:e7:0e:1e:bb:c6:2f:f7:23:4e:a4:9d:93:a3:
e0:3d:4d:a7:5e:95:b2:7d:6c:ac:f1:85:27:b1:02:
13:37:2a:f2:44:88:de:08:0d:1f:7b:68:7c:f1:fa:
14:2d:5f:2d:78:f3:51:7a:38:3f:3b:49:fb:ab:da:
2b:b0:f4:3b:4c:ea:ec:23:17:be:cb:c0:83:e5:45:
56:19:ef:b3:d5:67:c4:10:a6:bc:67:5d:0e:57:39:
75:bd:a9:64:6b:74:7c:54:bb:c6:97:08:6d:9f:f5:
07:f0:7d:e4:d6:8a:93:c8:d7:e7:ed:65:18:0a:e3:
de:53:37:cb:3c:e5:a1:0a:a2:3c:40:5c:01:93:48:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6F:0D:F2:3C:85:83:85:3A:7C:35:37:6A:63:37:CF:E4:F0:7C:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5be5dac6-a85c-305d-82d8-60c044056c1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:b8:4d:5c:39:43:71:b4:61:5c:e1:af:72:07:39:4c:9c:f8:
3d:c3:90:c0:43:8a:28:3f:c9:75:59:18:76:2a:64:3a:17:57:
e6:82:bd:04:53:da:1a:c3:eb:67:e1:8f:82:32:62:61:5f:0b:
74:5a:f6:99:cd:19:36:92:1c:02:56:c0:cb:5d:07:23:32:5b:
7c:63:fe:83:05:59:e3:d9:2e:7b:0f:e3:bd:34:09:25:04:45:
72:29:80:d4:fa:a4:7f:35:e0:92:31:88:bf:17:aa:11:57:ca:
10:16:6a:bd:18:c0:d8:22:b2:5e:64:a2:ec:15:71:5e:eb:18:
90:fd:1d:b2:85:e3:6a:da:91:ab:85:ed:24:45:ff:97:85:d0:
6e:14:b1:82:64:51:7d:8d:5b:e1:53:5b:31:84:47:82:51:66:
1c:47:b9:01:6d:63:b9:c3:6a:7f:b1:91:e8:56:34:02:f4:fe:
87:8e:87:44:f1:ce:8f:ac:a4:41:6d:3e:e1:7e:6e:97:d6:33:
b6:a9:13:fc:fe:ed:b7:ea:0d:6d:90:57:30:ac:de:25:f6:e9:
97:b3:15:fe:ee:7b:15:c8:27:63:3c:26:70:53:0d:75:4e:4f:
d7:34:38:ff:ce:b9:92:e0:5c:a7:2f:ae:94:85:a8:a4:ca:7f:
99:80:9d:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiwarrjRtAR0+SVx8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyODAwNDQxMloXDTI1MDQyNzIzNDQxMlowLzEtMCsGA1UEAxMk
Mzg0MTdlMzUtMjhmNi00Yzg2LWFjNjMtMDhjYjBiZGY4YTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr14iUuY+i1Kk0ASdH/CK56F6Wg14kfpDjxb+
2NNqr/UsQRMxRsUiS5ctfBaz84R6If9lN8fKIfmQjbh3UmMBVyRk5IBZaUrmsM5q
zfAKvW1sH5MWMYRIRAwJ/8MDBZWa3RhsnFxEKOUuNvY15QjycgisKqcruCrzD+cO
HrvGL/cjTqSdk6PgPU2nXpWyfWys8YUnsQITNyryRIjeCA0fe2h88foULV8tePNR
ejg/O0n7q9orsPQ7TOrsIxe+y8CD5UVWGe+z1WfEEKa8Z10OVzl1valka3R8VLvG
lwhtn/UH8H3k1oqTyNfn7WUYCuPeUzfLPOWhCqI8QFwBk0hRFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRvDfI8hYOFOnw1N2pjN8/k8HyLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWJlNWRhYzYtYTg1Yy0z
MDVkLTgyZDgtNjBjMDQ0MDU2YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFC4TVw5Q3G0YVzhr3IHOUyc+D3DkMBDiig/yXVZGHYqZDoXV+aCvQRT
2hrD62fhj4IyYmFfC3Ra9pnNGTaSHAJWwMtdByMyW3xj/oMFWePZLnsP4700CSUE
RXIpgNT6pH814JIxiL8XqhFXyhAWar0YwNgisl5kouwVcV7rGJD9HbKF42rakauF
7SRF/5eF0G4UsYJkUX2NW+FTWzGER4JRZhxHuQFtY7nDan+xkehWNAL0/oeOh0Tx
zo+spEFtPuF+bpfWM7apE/z+7bfqDW2QVzCs3iX26ZezFf7uexXIJ2M8JnBTDXVO
T9c0OP/OuZLgXKcvrpSFqKTKf5mAnUw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:06:39 2025 by rpki-client