Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70b73f85-0394-3788-b37f-039aba927335.roa
File: 70b73f85-0394-3788-b37f-039aba927335.roa (raw, json)
Hash identifier: tu4uyrOQwI+DHZsddMD8dEXlWaLtfjpZ0JS5ZxbyZhk=
Subject key identifier: 3C:C4:42:0E:82:84:19:1D:1E:9D:21:40:79:C8:50:0C:43:01:CE:FC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848FDF2496698E0BB5C42244100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70b73f85-0394-3788-b37f-039aba927335.roa
Signing time: Mon 24 Feb 2025 19:14:35 +0000
ROA not before: Mon 24 Feb 2025 19:14:35 +0000
ROA not after: Sun 25 May 2025 18:14:35 +0000
asID: 215224
IP address blocks: 23.26.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:f2:49:66:98:e0:bb:5c:42:24:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 24 19:14:35 2025 GMT
Not After : May 25 18:14:35 2025 GMT
Subject: CN=46755cfd-8147-4e34-94ae-31aeb69e6bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e0:f2:ec:4b:99:bc:02:c1:4d:5a:aa:8c:7d:
aa:f8:90:7b:ef:6f:0b:a3:3f:a7:4f:44:96:19:91:
63:bf:1c:8a:a6:6d:3d:a7:b1:a6:c2:f4:30:d7:f7:
6f:77:7f:cf:f4:3e:c8:4d:ce:cf:0f:88:24:42:aa:
c6:9f:44:56:5b:3b:a6:19:79:5e:8c:65:3a:fd:10:
69:a2:4c:bc:19:64:b2:e7:fc:7f:ce:4d:0f:7e:3f:
51:94:a4:4a:d0:06:41:7c:68:30:73:74:dc:5c:38:
f6:0a:66:17:6a:49:39:bd:20:5c:e2:df:e9:00:8c:
42:14:ee:5f:66:a4:cf:81:fc:49:30:4a:e8:0d:19:
ee:b9:6a:41:21:76:9d:6b:1d:fb:fb:39:22:76:71:
22:46:cc:e7:af:26:ae:1b:cc:79:91:65:fb:b4:a7:
20:c2:1b:2b:29:6a:5c:99:04:1c:54:cf:86:ea:f0:
a2:88:fd:f6:65:ea:55:71:fb:8b:80:0f:33:1d:12:
1c:6e:f9:02:fa:fc:4b:df:15:82:2d:39:5f:05:38:
a8:29:2e:34:7c:a0:e5:4b:06:88:db:6a:ed:78:83:
eb:4d:44:9e:f0:03:ed:d9:b1:34:3c:5d:41:b6:3a:
88:3b:a0:f5:65:9b:0f:f5:52:03:7f:18:c9:1d:fe:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:42:0E:82:84:19:1D:1E:9D:21:40:79:C8:50:0C:43:01:CE:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70b73f85-0394-3788-b37f-039aba927335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:10:42:8c:4c:7c:e8:94:ba:5f:95:fa:cb:ca:1f:49:b0:4c:
3d:35:95:1a:07:c3:f6:3f:1a:c8:fd:10:e9:96:73:bd:08:0a:
5a:b0:55:52:7d:86:b1:b0:57:0a:1a:32:66:25:37:77:8f:0d:
bc:42:ea:24:77:31:0d:fd:f6:15:5b:78:07:4a:57:25:e2:9e:
7d:17:83:e4:01:26:a9:ab:6f:13:14:81:f1:6e:16:88:46:3e:
40:9f:67:a8:45:a4:ab:27:53:02:1e:88:b2:5e:c0:7d:8e:0b:
eb:6d:d2:b9:54:b7:b2:eb:e1:f1:40:b5:10:fe:41:e8:21:48:
38:7a:c4:0b:86:88:80:45:8b:a9:98:ba:27:e0:95:96:dd:b8:
d6:e0:4b:64:21:cf:ed:68:57:78:bd:93:44:14:b8:80:3f:90:
fe:f8:09:b3:95:ab:f7:32:bc:2a:3f:7c:d8:5b:c4:9d:9e:4c:
e5:6c:92:68:ba:7a:4b:24:ab:8f:28:34:40:36:48:c3:c5:64:
c0:fa:45:b9:81:b7:40:03:b3:ff:55:84:66:55:48:ff:6d:43:
e0:4b:f5:6c:6a:aa:b4:9c:4a:c8:c8:ee:ca:7b:a9:ed:c8:ac:
a0:d5:73:f6:02:39:90:75:ab:7b:ad:01:07:5b:92:5b:05:08:
f4:0b:9c:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj98klmmOC7XEIkQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIyNDE5MTQzNVoXDTI1MDUyNTE4MTQzNVowLzEtMCsGA1UEAxMk
NDY3NTVjZmQtODE0Ny00ZTM0LTk0YWUtMzFhZWI2OWU2YmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+eDy7EuZvALBTVqqjH2q+JB7728Loz+nT0SW
GZFjvxyKpm09p7GmwvQw1/dvd3/P9D7ITc7PD4gkQqrGn0RWWzumGXlejGU6/RBp
oky8GWSy5/x/zk0Pfj9RlKRK0AZBfGgwc3TcXDj2CmYXakk5vSBc4t/pAIxCFO5f
ZqTPgfxJMEroDRnuuWpBIXadax37+zkidnEiRsznryauG8x5kWX7tKcgwhsrKWpc
mQQcVM+G6vCiiP32ZepVcfuLgA8zHRIcbvkC+vxL3xWCLTlfBTioKS40fKDlSwaI
22rteIPrTUSe8APt2bE0PF1BtjqIO6D1ZZsP9VIDfxjJHf6G7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzEQg6ChBkdHp0hQHnIUAxDAc78MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzBiNzNmODUtMDM5NC0z
Nzg4LWIzN2YtMDM5YWJhOTI3MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxp4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQQQoxMfOiUul+V+svKH0mwTD01lRoHw/Y/Gsj9EOmWc70IClqwVVJ9
hrGwVwoaMmYlN3ePDbxC6iR3MQ399hVbeAdKVyXinn0Xg+QBJqmrbxMUgfFuFohG
PkCfZ6hFpKsnUwIeiLJewH2OC+tt0rlUt7Lr4fFAtRD+QeghSDh6xAuGiIBFi6mY
uifglZbduNbgS2Qhz+1oV3i9k0QUuIA/kP74CbOVq/cyvCo/fNhbxJ2eTOVskmi6
ekskq48oNEA2SMPFZMD6RbmBt0ADs/9VhGZVSP9tQ+BL9WxqqrScSsjI7sp7qe3I
rKDVc/YCOZB1q3utAQdbklsFCPQLnNg=
-----END CERTIFICATE-----
Generated at Tue Jun 17 14:59:47 2025 by rpki-client