Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6cacf71a-e2be-3119-b58f-b5cb3ce85fef.roa
File: 6cacf71a-e2be-3119-b58f-b5cb3ce85fef.roa (raw, json)
Hash identifier: qBIs6aCxOk25S3MTPVa5sWr/QnSMYrsBDym+pW92IRI=
Subject key identifier: 34:68:84:05:E7:04:36:1D:B9:32:5F:49:35:ED:DC:9A:40:86:3C:14
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858431D2164DB527362683E1FD500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6cacf71a-e2be-3119-b58f-b5cb3ce85fef.roa
Signing time: Mon 04 Sep 2023 18:37:56 +0000
ROA not before: Mon 04 Sep 2023 18:37:56 +0000
ROA not after: Sun 03 Dec 2023 19:37:56 +0000
asID: 834
IP address blocks: 23.26.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:1d:21:64:db:52:73:62:68:3e:1f:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 4 18:37:56 2023 GMT
Not After : Dec 3 19:37:56 2023 GMT
Subject: CN=a8a1ac51-160c-403b-aa24-d74f205b01a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:ba:22:1f:f3:00:01:fb:b2:b1:91:e8:19:
b9:0a:89:db:39:4c:7a:29:e2:dd:34:21:6a:06:88:
ae:cd:22:7c:96:2b:29:1c:48:66:cc:cf:96:82:9e:
bc:c8:67:27:77:bf:99:61:34:da:61:32:cd:b6:e6:
04:d0:57:ca:2e:85:54:b4:76:dc:ba:be:c4:89:f2:
c5:b1:fb:01:55:0a:66:72:f9:83:f5:45:20:50:12:
55:0b:1f:65:5e:cd:96:eb:c2:03:62:67:0e:89:50:
db:93:ee:b5:d0:59:94:5f:19:d9:83:10:a4:5e:b8:
d8:b3:e4:01:5a:14:f9:d4:6f:51:38:26:0e:5d:1f:
44:2e:27:3d:b5:46:b5:e1:b1:ec:e2:92:2c:6e:6d:
96:a4:07:ae:3c:64:ce:6e:07:ff:67:c5:17:a7:70:
63:6a:8b:02:8f:2d:a7:e5:4d:93:01:1d:6b:65:ad:
af:ef:b0:c4:67:dd:d1:fd:a6:3e:9e:cb:2d:e5:7b:
0f:fd:5c:31:8c:e5:6b:76:7d:82:23:27:ee:54:d4:
72:e3:a3:d5:79:93:7a:a0:19:55:a2:d9:b0:05:c5:
bd:62:9e:68:8e:85:6d:db:2e:6d:01:81:7c:20:e5:
08:e0:83:31:bd:42:2d:2c:c5:aa:06:b6:5b:67:18:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:84:05:E7:04:36:1D:B9:32:5F:49:35:ED:DC:9A:40:86:3C:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6cacf71a-e2be-3119-b58f-b5cb3ce85fef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:a4:f2:d6:3d:1c:c9:c1:77:6d:dc:66:b9:79:0a:35:6e:ae:
d2:5b:52:ec:1d:d6:e1:4d:2d:2b:69:eb:f1:d2:83:b4:99:87:
68:9b:12:20:71:37:02:9e:c9:3d:7a:7f:3a:34:c7:40:03:d3:
af:74:54:c7:0f:e0:14:18:6c:29:61:0e:d5:49:89:86:ed:7c:
16:3c:52:df:bc:c9:73:5a:5e:74:33:6c:cf:7e:b0:99:08:7a:
f4:a7:86:9d:c1:cb:40:99:9d:ff:28:04:23:24:d0:b9:3e:6d:
bf:26:fc:18:67:e8:13:ab:3e:85:e9:33:34:4f:eb:f3:dc:54:
05:b3:d1:68:e7:1d:78:5c:7f:0a:f6:56:2c:09:e6:ea:39:d0:
cb:a7:cc:50:83:62:3a:07:e7:92:21:1c:69:b5:ef:88:e0:8d:
29:3f:cb:38:7b:74:9c:d8:a1:2e:6a:54:7e:3c:13:58:25:01:
78:0b:02:57:20:37:93:29:23:d7:c6:bd:a5:68:c5:ae:74:6d:
7f:f5:70:0b:af:31:49:f6:82:d9:b8:03:9b:f9:2f:c5:4f:87:
5d:19:44:8b:24:4c:5e:9b:c4:61:91:db:33:fc:b7:ce:9f:ac:
bc:a7:80:8b:c2:5f:8e:3b:9f:1e:56:72:96:df:0a:65:82:3d:
a4:87:3d:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMdIWTbUnNiaD4f1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkwNDE4Mzc1NloXDTIzMTIwMzE5Mzc1NlowLzEtMCsGA1UEAxMk
YThhMWFjNTEtMTYwYy00MDNiLWFhMjQtZDc0ZjIwNWIwMWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1he6Ih/zAAH7srGR6Bm5ConbOUx6KeLdNCFq
BoiuzSJ8lispHEhmzM+Wgp68yGcnd7+ZYTTaYTLNtuYE0FfKLoVUtHbcur7EifLF
sfsBVQpmcvmD9UUgUBJVCx9lXs2W68IDYmcOiVDbk+610FmUXxnZgxCkXrjYs+QB
WhT51G9ROCYOXR9ELic9tUa14bHs4pIsbm2WpAeuPGTObgf/Z8UXp3BjaosCjy2n
5U2TAR1rZa2v77DEZ93R/aY+nsst5XsP/VwxjOVrdn2CIyfuVNRy46PVeZN6oBlV
otmwBcW9Yp5ojoVt2y5tAYF8IOUI4IMxvUItLMWqBrZbZxhNaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRohAXnBDYduTJfSTXt3JpAhjwUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmNhY2Y3MWEtZTJiZS0z
MTE5LWI1OGYtYjVjYjNjZTg1ZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6k8tY9HMnBd23cZrl5CjVurtJbUuwd1uFNLStp6/HSg7SZh2ibEiBx
NwKeyT16fzo0x0AD0690VMcP4BQYbClhDtVJiYbtfBY8Ut+8yXNaXnQzbM9+sJkI
evSnhp3By0CZnf8oBCMk0Lk+bb8m/Bhn6BOrPoXpMzRP6/PcVAWz0WjnHXhcfwr2
ViwJ5uo50MunzFCDYjoH55IhHGm174jgjSk/yzh7dJzYoS5qVH48E1glAXgLAlcg
N5MpI9fGvaVoxa50bX/1cAuvMUn2gtm4A5v5L8VPh10ZRIskTF6bxGGR2zP8t86f
rLyngIvCX447nx5WcpbfCmWCPaSHPaU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:46 2025 by rpki-client