Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/71e565b8-00cc-3e3a-b849-e058d7c200da.roa
File: 71e565b8-00cc-3e3a-b849-e058d7c200da.roa (raw, json)
Hash identifier: Uywq0qoul05E7/wzGen1d3NWBz6vTXjQimxyu3o1ZFw=
Subject key identifier: 17:AB:89:A0:1A:C6:8C:36:F5:F1:A7:23:52:89:0A:0A:4B:F6:DC:E0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584766138C0B4B206D155B449BC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/71e565b8-00cc-3e3a-b849-e058d7c200da.roa
Signing time: Tue 01 Oct 2024 16:51:47 +0000
ROA not before: Tue 01 Oct 2024 16:51:47 +0000
ROA not after: Mon 30 Dec 2024 17:51:47 +0000
asID: 834
IP address blocks: 23.26.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:66:13:8c:0b:4b:20:6d:15:5b:44:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 1 16:51:47 2024 GMT
Not After : Dec 30 17:51:47 2024 GMT
Subject: CN=dd20ab6d-9478-47c9-9209-c3372a6b5154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:ea:52:c6:ba:f1:a6:fb:c6:ef:c9:ad:5d:
51:24:b7:c7:69:93:4d:b5:cf:33:df:03:fb:6d:cd:
7f:bf:00:38:dc:1b:8e:b5:96:50:66:a9:9c:4c:5a:
fe:7a:13:a0:51:e1:7b:98:1a:46:46:68:d4:83:07:
0e:ab:47:23:ae:a6:0f:90:81:5a:49:ca:91:1a:c5:
0c:31:e7:3e:18:68:58:df:3a:f8:dd:71:bf:a7:8c:
5b:b4:24:99:08:50:96:19:d3:34:3c:b3:00:c0:11:
88:62:2d:bf:ee:f9:19:58:cc:c1:6a:ed:43:79:91:
9a:8d:95:4a:cc:46:31:61:a4:28:cb:d6:1e:6f:ee:
52:75:c9:5e:a4:70:38:8b:76:f3:48:16:c0:eb:c6:
a7:fb:e5:1b:0a:44:67:cb:82:f7:ca:04:57:01:6c:
3f:b9:de:c2:f0:02:19:9d:b1:88:4d:0a:6a:78:db:
cc:26:9f:d7:ae:86:28:22:56:eb:62:61:af:c7:e3:
3e:31:24:57:07:1a:9b:b5:4b:20:27:34:28:42:11:
31:55:9f:d7:eb:77:8a:c0:59:90:41:39:6d:3f:eb:
34:84:04:37:cd:65:7b:54:9a:25:cc:6c:2b:aa:ee:
f1:b2:ba:ad:03:d7:fe:04:72:15:fc:21:97:d3:5e:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:89:A0:1A:C6:8C:36:F5:F1:A7:23:52:89:0A:0A:4B:F6:DC:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/71e565b8-00cc-3e3a-b849-e058d7c200da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:c8:72:2c:ea:16:d6:d1:0a:67:01:cf:4e:56:66:34:ee:2b:
85:d8:54:e1:d5:45:86:d5:97:96:b1:a9:17:8e:cd:ef:4d:cc:
03:1b:9b:bc:3d:ad:f8:c1:cb:4a:3b:f9:2d:8d:bd:19:88:d0:
05:3a:c9:e3:b8:d4:e5:2a:a5:c6:0f:0f:5a:a5:09:86:f6:0a:
05:9d:2d:9c:d8:a7:cd:12:28:45:e7:55:a0:0f:03:37:af:67:
a0:a2:d7:c8:f3:06:cc:4f:29:35:da:45:65:6a:54:e9:9d:f6:
c6:26:38:5f:20:e4:e0:be:0f:78:19:e1:23:74:7b:28:87:d1:
9d:13:57:68:be:79:88:c5:f9:4d:ca:67:65:7d:1b:7c:5f:e8:
81:d4:11:b5:f6:34:d6:60:bc:73:fc:c2:c1:df:41:3a:19:ba:
05:7f:c9:4e:63:ec:50:71:25:28:aa:36:b9:32:96:98:8e:b5:
42:6a:17:97:64:42:96:b0:a0:f9:6b:49:7d:68:99:23:86:0e:
f8:f3:1a:ea:7a:eb:1b:fd:57:79:ea:25:39:4e:a9:80:a3:be:
a4:98:71:73:0c:10:20:b9:95:ba:54:d6:cd:7d:94:b0:7e:da:
81:a9:d4:b7:a7:89:6b:cf:c3:b1:5c:17:bf:a1:ae:9c:30:fc:
c1:e6:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:18:18 2025 by rpki-client