Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7538f170-eaba-3746-877d-ea2d4b0f1191.roa
File: 7538f170-eaba-3746-877d-ea2d4b0f1191.roa (raw, json)
Hash identifier: RloMQDU0dt9Pu2Zs9vvpw7tPpxXU/OUx/q0Awmo5HKQ=
Subject key identifier: CF:FB:7E:B9:B9:B0:3C:00:6E:08:CB:45:FE:6D:2D:6C:78:9A:C0:58
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BAC3E90B6E320F644DC3C700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7538f170-eaba-3746-877d-ea2d4b0f1191.roa
Signing time: Mon 31 Jul 2023 13:00:18 +0000
ROA not before: Mon 31 Jul 2023 13:00:18 +0000
ROA not after: Sun 29 Oct 2023 13:00:18 +0000
asID: 63023
IP address blocks: 23.26.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ba:c3:e9:0b:6e:32:0f:64:4d:c3:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 31 13:00:18 2023 GMT
Not After : Oct 29 13:00:18 2023 GMT
Subject: CN=603ab6f1-f92e-4a65-8b7d-571230de6ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:8b:51:65:0a:2d:8b:22:86:e1:6a:5d:f5:
01:20:96:75:70:f4:4e:f4:12:f6:ec:07:0e:a7:dc:
42:7a:9e:94:a0:3c:1e:47:91:e4:5e:79:01:99:63:
af:3b:72:47:33:ed:48:0b:6b:24:5e:19:ac:7f:2b:
d6:20:8d:3f:56:dc:be:34:6a:b5:d6:a7:14:92:4c:
00:c2:3d:fe:f1:6c:6d:da:fc:e8:67:18:30:94:5c:
f8:77:f4:7c:bd:3a:7b:a4:de:22:5d:f3:d6:4c:34:
8b:05:ed:3c:5a:9c:50:9d:68:6d:1a:1e:40:d8:4e:
44:c4:2c:09:c5:9b:37:3b:04:cf:26:3f:64:d4:2f:
73:82:06:90:a7:14:2d:d4:f8:8c:24:ac:03:92:c3:
d9:e4:bb:5e:9c:81:46:22:1e:c0:18:d7:f5:a3:a0:
48:7e:66:c1:33:8e:2d:cf:7e:0b:7a:39:3f:2e:dd:
00:d3:85:e5:a7:6c:41:75:8a:fe:ba:1d:48:22:e7:
d5:a7:c4:4b:f0:2b:16:db:88:65:b5:aa:9b:ba:8d:
f6:d4:ef:53:91:c9:0e:b3:57:1b:fa:24:58:3a:1e:
26:45:5d:1d:e3:8f:b9:d6:fd:a3:2e:22:ef:d4:89:
58:b8:04:81:85:91:1d:30:17:16:e4:21:9f:ef:03:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FB:7E:B9:B9:B0:3C:00:6E:08:CB:45:FE:6D:2D:6C:78:9A:C0:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7538f170-eaba-3746-877d-ea2d4b0f1191.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:6a:07:67:f4:a0:03:bc:34:2e:33:a3:de:e6:95:f1:20:c8:
3c:2e:25:55:2c:9e:a7:28:95:92:a8:3e:40:4d:35:7b:fa:f1:
bf:78:dc:d5:f9:79:ce:81:10:4f:0f:5c:68:bb:92:4e:2b:18:
32:84:7b:c0:85:2f:bc:91:32:fa:44:bd:02:f8:2c:7c:c4:ee:
a5:57:64:0b:a4:09:71:81:57:ff:19:6d:ad:74:26:e1:96:e6:
e0:dc:de:af:d9:e4:8f:70:10:6b:d0:39:1b:de:1b:35:01:66:
ee:9e:3f:4b:0c:15:06:61:62:75:7e:7a:68:59:3e:10:52:c6:
65:b9:f9:d5:d1:3d:95:57:46:c7:b7:20:f5:dc:19:f9:9d:b3:
eb:09:c2:a5:c1:a7:ef:0d:5e:08:ad:53:51:1b:68:32:8c:c1:
23:6b:b6:71:12:f5:8e:25:c2:32:1b:64:24:d4:ee:20:68:56:
22:7d:16:4b:3f:1b:58:fb:db:a3:70:a1:94:64:fb:f6:5c:4a:
27:f3:e7:47:29:32:de:69:3f:16:dd:57:d7:ae:d4:04:1e:46:
cd:f5:be:29:20:73:b5:49:a9:12:31:04:92:b5:a5:bb:4a:98:
d4:f2:b6:8a:76:8c:c9:41:40:fc:aa:f2:ef:91:87:e4:af:9e:
36:17:d1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:48:48 2025 by rpki-client