Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61f900e8-4ba0-3205-a6d1-2b0540f0619c.roa
File: 61f900e8-4ba0-3205-a6d1-2b0540f0619c.roa (raw, json)
Hash identifier: vc+mmV9M9WUyD1hArKqaRhObcqBaUZ+L2zBFmMVv2Zo=
Subject key identifier: 1A:C2:37:88:9D:D8:CA:9D:E4:D7:CB:71:FA:3A:E3:82:DA:3A:37:85
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584766138D8F6E9E6BC57B44E9B8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61f900e8-4ba0-3205-a6d1-2b0540f0619c.roa
Signing time: Tue 01 Oct 2024 16:51:48 +0000
ROA not before: Tue 01 Oct 2024 16:51:48 +0000
ROA not after: Mon 30 Dec 2024 17:51:48 +0000
asID: 834
IP address blocks: 23.26.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:66:13:8d:8f:6e:9e:6b:c5:7b:44:e9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 1 16:51:48 2024 GMT
Not After : Dec 30 17:51:48 2024 GMT
Subject: CN=8df79a75-b1f4-47e6-a289-9f130ab31c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:68:1d:0d:b8:f9:43:88:72:aa:38:b7:0e:
4c:9a:30:31:3c:dc:72:74:e2:5a:74:dd:9a:71:b3:
b4:b9:67:59:73:b1:eb:a7:5c:39:d1:cf:a6:c9:26:
5c:fd:51:3c:ef:7a:a5:22:c4:14:0b:3a:28:20:6b:
a6:fb:de:f9:57:85:d4:83:db:d8:07:f9:79:b3:6a:
3b:72:10:43:ed:2e:a1:c0:5c:0d:ea:34:ef:5c:ca:
d1:4a:20:27:44:b9:a8:60:e4:27:a1:c8:d0:aa:96:
5e:2f:c3:b7:da:ea:0d:4f:0c:99:7e:2a:83:e5:d0:
da:06:89:3c:ad:1e:25:17:df:31:72:dc:e8:58:cf:
28:94:bc:5c:28:44:32:26:fb:99:56:a5:0b:7f:ed:
36:5b:41:00:31:96:f0:8f:79:4f:40:17:05:cd:ad:
90:a7:be:c1:21:bd:65:47:b7:53:7e:72:07:ae:67:
6a:19:e5:52:a0:65:9e:a9:4c:b0:b9:c2:79:db:e5:
68:96:d1:2f:2f:5c:07:5e:ab:da:14:31:45:dd:49:
d4:d2:e7:5c:d6:0e:f2:3c:56:ec:e7:22:d2:54:cf:
d2:d1:5f:5f:4c:ce:03:b5:e8:e1:34:2a:f3:9c:5c:
25:09:05:25:89:bf:26:bc:11:77:a2:ad:4b:82:cf:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:37:88:9D:D8:CA:9D:E4:D7:CB:71:FA:3A:E3:82:DA:3A:37:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61f900e8-4ba0-3205-a6d1-2b0540f0619c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:f7:d7:da:49:49:84:ef:6d:5a:98:30:6f:29:b4:0d:56:9d:
cf:3e:2d:4b:3d:38:1e:cf:55:f9:3b:d1:c3:49:d2:91:40:f9:
2b:76:2c:4e:16:32:ac:1d:04:99:05:da:e9:1c:94:be:24:0f:
9e:c5:b1:1f:f9:92:59:60:db:c8:a8:6b:d8:33:4d:a8:aa:d4:
96:48:48:5c:7d:82:96:84:75:ad:58:40:7d:0c:d7:d5:19:be:
9e:65:8e:da:36:51:e4:1e:42:d6:f2:6f:a5:9b:47:0f:aa:65:
2c:93:3d:de:6e:dc:64:15:d9:e3:ac:e4:72:1d:bc:fd:e5:c2:
a3:3e:05:c8:03:b8:da:a7:7d:72:5a:24:46:d3:ba:93:70:68:
5b:01:ad:b2:aa:1f:cd:a1:2b:a4:8e:aa:fa:9a:68:5c:22:7a:
bd:b7:7c:cb:a6:cc:b0:24:47:b8:0f:43:97:40:88:6c:59:c4:
f9:cd:e0:9f:3a:43:0f:df:ed:e4:c5:32:bd:61:c8:2a:b0:64:
e6:14:a0:dd:1a:dc:41:d3:e2:b8:80:59:13:96:1d:1e:c5:e6:
8d:00:e7:44:08:f6:ea:fb:17:22:e9:e8:7c:56:df:68:0c:14:
cd:1c:2e:fe:1d:4a:22:40:8c:b6:e5:31:d9:c1:02:3c:a4:00:
4b:a3:9d:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdmE42Pbp5rxXtE6bgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTAwMTE2NTE0OFoXDTI0MTIzMDE3NTE0OFowLzEtMCsGA1UEAxMk
OGRmNzlhNzUtYjFmNC00N2U2LWEyODktOWYxMzBhYjMxYzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCFoHQ24+UOIcqo4tw5MmjAxPNxydOJadN2a
cbO0uWdZc7Hrp1w50c+mySZc/VE873qlIsQUCzooIGum+975V4XUg9vYB/l5s2o7
chBD7S6hwFwN6jTvXMrRSiAnRLmoYOQnocjQqpZeL8O32uoNTwyZfiqD5dDaBok8
rR4lF98xctzoWM8olLxcKEQyJvuZVqULf+02W0EAMZbwj3lPQBcFza2Qp77BIb1l
R7dTfnIHrmdqGeVSoGWeqUywucJ52+VoltEvL1wHXqvaFDFF3UnU0udc1g7yPFbs
5yLSVM/S0V9fTM4DtejhNCrznFwlCQUlib8mvBF3oq1Lgs8RDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrCN4id2Mqd5NfLcfo644LaOjeFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjFmOTAwZTgtNGJhMC0z
MjA1LWE2ZDEtMmIwNTQwZjA2MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxo5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADT319pJSYTvbVqYMG8ptA1Wnc8+LUs9OB7PVfk70cNJ0pFA+St2LE4W
MqwdBJkF2ukclL4kD57FsR/5kllg28ioa9gzTaiq1JZISFx9gpaEda1YQH0M19UZ
vp5ljto2UeQeQtbyb6WbRw+qZSyTPd5u3GQV2eOs5HIdvP3lwqM+BcgDuNqnfXJa
JEbTupNwaFsBrbKqH82hK6SOqvqaaFwier23fMumzLAkR7gPQ5dAiGxZxPnN4J86
Qw/f7eTFMr1hyCqwZOYUoN0a3EHT4riAWROWHR7F5o0A50QI9ur7FyLp6HxW32gM
FM0cLv4dSiJAjLblMdnBAjykAEujnQo=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:21:03 2025 by rpki-client