Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c6e6295-f171-3218-8b1c-b92578a9a474.roa
File: 7c6e6295-f171-3218-8b1c-b92578a9a474.roa (raw, json)
Hash identifier: XHgCKsmv+AlvSUgucxqPCHJ28rOyY7AtDg57H4+e9WM=
Subject key identifier: 4D:4C:BB:DC:E7:8A:3E:4D:96:07:9F:5A:97:5D:4A:44:0B:BF:E7:A8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E397719BC65A8901BCC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c6e6295-f171-3218-8b1c-b92578a9a474.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Mon 07 Aug 2023 05:44:12 +0000
asID: 139660
IP address blocks: 23.26.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e3:97:71:9b:c6:5a:89:01:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 7 05:44:12 2023 GMT
Subject: CN=fd5c164b-a077-4679-b0ba-1ba372a632c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:3a:fc:20:5e:d3:e7:5b:a2:21:51:e6:e7:
6d:b1:f9:d9:5c:82:4a:b8:e4:de:8f:09:a1:7f:1a:
87:f1:c0:7e:a8:42:eb:63:67:e9:b5:34:ef:75:e2:
99:af:31:59:2e:16:13:59:31:0d:db:95:30:d5:34:
dd:42:35:84:92:25:a1:ee:77:e6:e7:54:be:28:5a:
04:34:b4:66:58:9e:68:97:a3:d7:12:26:57:63:03:
a1:b4:0d:33:95:e8:c9:16:71:74:b3:43:4b:4e:e8:
23:7b:4c:7f:1a:a4:42:9a:f2:a3:d8:bc:5b:52:d9:
eb:a4:ae:7a:30:e2:07:cb:f6:21:d5:e6:f1:c7:12:
c8:17:55:6e:1b:a1:b8:6b:b1:9d:ce:40:0b:a1:c5:
14:1f:95:a1:b4:7d:b2:be:9f:97:d8:7f:de:8c:20:
9e:73:08:e1:f5:5d:67:96:82:0f:d2:da:87:e2:61:
9e:7c:a3:67:3c:a2:76:c8:4f:77:a4:1e:5b:22:f7:
a1:f9:5a:79:54:ef:b3:78:e9:67:c5:09:70:27:3e:
a7:60:04:4a:85:ec:4d:3f:98:18:86:30:15:ef:1c:
db:72:81:de:81:87:09:38:97:d6:ce:97:25:44:dd:
24:3c:fe:ba:8e:32:48:b1:9a:ef:44:a6:81:09:82:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:BB:DC:E7:8A:3E:4D:96:07:9F:5A:97:5D:4A:44:0B:BF:E7:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c6e6295-f171-3218-8b1c-b92578a9a474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:fa:c6:c8:17:f4:6b:a1:18:07:b5:c5:a9:a6:2a:e1:33:7e:
f9:fa:cd:bc:73:32:bc:7b:ec:9d:97:b0:5f:f0:b9:2e:b0:7b:
5d:28:4b:09:aa:31:86:bc:d4:d8:8b:d0:f1:ea:23:69:d7:14:
ba:02:12:12:36:84:9f:09:8d:d0:5f:6b:0e:f8:c3:ac:2c:c3:
18:da:c3:38:4e:8e:2d:a8:d3:ae:be:3f:7f:ca:f6:cc:b6:54:
a1:bb:47:6f:31:f6:07:2b:e5:59:36:f3:5e:f7:0b:9e:bb:04:
c2:3d:c1:71:cb:02:41:a5:cb:63:2d:98:f7:54:45:87:d3:94:
03:66:0f:6c:68:2d:ac:a9:77:70:68:09:7e:20:74:83:ee:3a:
60:48:29:a9:30:c4:66:06:18:c6:26:3d:cc:2f:7f:a1:21:38:
42:ec:e9:f6:17:11:f0:2f:99:74:e0:9a:94:f7:bd:dc:3d:bf:
c7:97:cd:fe:22:d9:c3:e4:d9:6e:8c:0d:ee:53:49:1e:26:87:
74:44:89:79:19:bd:a2:93:f8:ee:39:4b:f8:d7:fd:4d:a7:17:
f4:5f:63:36:80:f8:0f:27:db:51:ff:a6:bc:d0:a3:e9:04:51:
6b:22:fd:a0:0c:fb:30:df:e1:89:72:05:44:7c:25:83:3a:73:
5f:7d:37:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:48:05 2025 by rpki-client