Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/612629e0-2659-33d4-a73f-bb88fe1f746b.roa
File: 612629e0-2659-33d4-a73f-bb88fe1f746b.roa (raw, json)
Hash identifier: Rf1wN6KYQVUO0aZFI342fOirhBS98OlDSoaHCA1HBZo=
Subject key identifier: 78:E5:2B:20:C7:F4:6B:7A:A0:73:BF:61:6C:54:08:F9:D4:AA:6E:87
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848BDF81C1EFFF5324A26B75578
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/612629e0-2659-33d4-a73f-bb88fe1f746b.roa
Signing time: Sat 01 Feb 2025 21:14:35 +0000
ROA not before: Sat 01 Feb 2025 21:14:35 +0000
ROA not after: Fri 02 May 2025 20:14:35 +0000
asID: 834
IP address blocks: 23.26.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:f8:1c:1e:ff:f5:32:4a:26:b7:55:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 1 21:14:35 2025 GMT
Not After : May 2 20:14:35 2025 GMT
Subject: CN=4b3c9253-7113-41f1-8aeb-a405039883ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:2b:05:d6:d0:4e:be:5d:9e:e9:4e:2a:00:
b7:a6:9e:4d:ee:d1:a3:2b:98:07:97:9d:42:03:af:
db:ad:7c:18:a1:f3:f5:57:b3:2f:2d:6c:60:a1:fa:
9f:a4:5f:b8:72:86:b7:19:bf:a7:d1:74:7c:ab:e3:
36:3a:71:08:84:d6:07:dd:b7:43:a2:12:06:b4:c0:
07:7e:58:91:72:1a:88:2b:6b:63:d9:21:c6:57:33:
5e:7c:89:bd:93:03:24:ca:08:6e:a6:e8:8b:62:56:
db:eb:fa:41:41:00:9d:40:a1:b6:09:f2:05:18:db:
07:9d:8d:e5:e8:c8:9d:75:d9:d4:10:38:80:ad:64:
9a:17:f5:f9:88:15:37:97:2d:3a:94:24:b0:df:b4:
9d:32:fd:0c:23:c5:44:ba:3f:2c:d4:2d:ed:1e:e1:
69:36:23:6c:f9:ef:bf:28:6b:ff:73:15:1c:87:31:
5e:d6:4b:43:63:e8:5c:cb:c5:51:d8:4d:61:f5:27:
d0:54:fb:46:bc:42:88:7a:b1:d9:4d:89:54:b7:4e:
92:4b:db:77:76:79:6f:6f:5d:6c:3f:c4:6d:13:3f:
46:d1:bb:39:2c:15:3e:09:b3:e7:1a:02:26:4b:bd:
ee:11:0f:2a:16:96:f0:f8:49:94:74:40:0d:a0:b1:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E5:2B:20:C7:F4:6B:7A:A0:73:BF:61:6C:54:08:F9:D4:AA:6E:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/612629e0-2659-33d4-a73f-bb88fe1f746b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:57:5e:f2:d6:e3:56:69:fc:93:a4:ad:f7:a5:a3:84:58:b5:
e3:c3:aa:00:2e:8d:e6:f8:19:83:82:7c:4b:46:73:70:90:a5:
6b:ab:84:af:f6:66:9e:dc:a5:c7:61:98:92:cd:01:5d:0f:05:
e7:16:93:91:e7:e4:b6:60:6a:76:e5:a9:0d:0e:65:97:7b:d5:
dd:3e:54:7f:99:f2:a4:c0:cf:26:e2:8f:f8:0f:62:40:0d:1c:
1a:c5:ef:a8:8c:a6:c2:ec:2d:0b:3c:77:17:f4:b3:e3:23:7b:
b0:c9:44:61:13:ca:49:d1:c0:b1:c1:ed:5a:8c:19:82:e0:87:
21:9e:ad:d4:1f:51:66:7a:a1:ec:a0:4e:06:50:4f:57:2d:1a:
8a:94:ec:8a:bc:fc:d1:b6:55:f7:12:7b:78:54:29:c3:53:29:
de:35:2e:a5:7b:16:8e:9b:ae:24:04:6b:af:8f:0e:5f:25:72:
91:60:76:67:da:e7:c1:65:5f:2a:f7:b7:92:5a:e1:d0:22:82:
97:64:b6:cc:1f:00:d8:a3:c4:0a:d4:bd:23:1f:54:33:cb:2d:
07:0f:37:11:ac:00:38:27:b8:3b:c4:06:84:e3:4e:d9:48:3e:
4d:4b:d7:77:76:8d:9a:6d:98:83:9d:ee:d4:54:e7:22:f9:3c:
a7:b2:35:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:38 2025 by rpki-client