Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/756e1209-4dc2-36ea-9986-e44215e4d734.roa
File: 756e1209-4dc2-36ea-9986-e44215e4d734.roa (raw, json)
Hash identifier: Oc5wGRJVbf8MXb4JPqDkRtU7mj8TknJvpHq0fTO5qew=
Subject key identifier: D0:6B:0A:E4:0B:C4:DF:16:1C:1B:12:3C:C0:BC:77:12:B1:7D:9C:77
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA421B3D0088A0D13105500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/756e1209-4dc2-36ea-9986-e44215e4d734.roa
Signing time: Mon 27 Jan 2025 18:04:03 +0000
ROA not before: Mon 27 Jan 2025 18:04:03 +0000
ROA not after: Sun 27 Apr 2025 17:04:03 +0000
asID: 11798
IP address blocks: 23.26.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:21:b3:d0:08:8a:0d:13:10:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:03 2025 GMT
Not After : Apr 27 17:04:03 2025 GMT
Subject: CN=d7834b26-c5f3-4fa0-8571-5b27d45c58d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:32:45:14:33:18:a8:a4:ec:43:a1:d8:23:
ab:a4:1a:58:0e:ff:89:24:0a:8f:ab:1f:60:16:06:
bb:b8:af:12:9c:a5:52:4e:b6:05:81:86:b5:fd:b9:
2e:ce:ae:12:fc:79:bb:f6:21:69:6c:50:5e:f8:6e:
0c:c2:be:67:ca:33:23:0a:d2:91:80:e9:95:b5:90:
57:e0:41:d7:39:b6:46:86:21:c1:03:50:93:40:b5:
64:fa:83:84:2b:d5:85:97:14:c1:3f:08:f5:f8:7a:
cd:fa:69:bc:f4:33:4d:8c:1b:97:e7:4c:20:65:9b:
0e:e5:52:f8:f6:c2:0e:74:82:dc:5a:21:91:13:b9:
49:04:ed:65:ff:e9:ab:8e:e0:07:b0:3b:7c:5d:7c:
74:ec:6d:3f:df:46:e0:47:9a:b8:7d:ba:9b:81:e1:
2d:1c:3b:f2:67:1e:ef:22:af:3b:f8:10:08:c4:bc:
e5:de:a1:f7:cc:c2:62:bc:32:cd:e5:5e:ff:d5:33:
e8:72:9c:31:35:2e:8f:78:0e:17:ca:84:0a:89:2a:
35:1a:bb:c4:e8:ed:54:8c:f7:64:30:2a:e9:d5:e2:
e2:a1:d8:b7:36:a1:be:23:38:9a:11:c1:f3:55:fb:
d1:61:cc:8f:87:01:67:e7:60:e5:01:84:16:96:67:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6B:0A:E4:0B:C4:DF:16:1C:1B:12:3C:C0:BC:77:12:B1:7D:9C:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/756e1209-4dc2-36ea-9986-e44215e4d734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:0c:58:92:2a:4a:93:9d:e0:c9:d8:ca:41:5b:1d:a3:f3:59:
58:f8:86:b5:fb:fc:47:3f:f9:e7:2b:17:a7:80:f4:1a:38:c9:
63:38:ce:c5:83:7d:43:05:f0:eb:e3:8b:88:80:52:6f:2b:cb:
05:a1:49:d3:2e:51:b4:92:67:4b:a3:bc:b2:a1:d8:ff:15:4b:
dd:e3:b0:25:61:f0:ca:a0:12:85:07:8c:04:47:de:fb:13:46:
ab:14:f2:ad:d2:dc:c4:88:1a:a4:aa:95:ca:dc:b9:cd:08:64:
ad:df:fb:8d:a5:07:84:82:2a:1e:62:9b:fe:0c:1d:13:c1:9b:
d6:83:e1:57:2e:5f:11:1d:58:0d:46:c5:58:b3:80:df:be:21:
82:29:f7:0f:4b:48:a0:6c:ad:28:6b:71:ee:b6:19:63:94:0d:
9f:14:c1:06:71:49:da:f2:ec:c8:30:d6:4b:c9:7c:3c:b1:58:
0b:1d:31:81:ce:e4:74:a2:b1:87:ca:65:52:c0:f7:52:35:c9:
bd:c5:45:0e:26:c5:80:98:cb:38:59:3a:b7:4b:05:c8:1d:5e:
10:70:5f:59:10:e9:a8:ce:a7:8c:15:06:09:32:90:fb:94:90:
ef:59:55:ff:ec:3e:ee:5e:20:07:60:e5:8a:9b:e2:bd:a4:b4:
01:77:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:14:05 2025 by rpki-client