Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c9a96d2-f0b4-3018-9965-5ac97bfc2574.roa
File: 7c9a96d2-f0b4-3018-9965-5ac97bfc2574.roa (raw, json)
Hash identifier: AEtcm1N/84no1+GBbpROkf3v+c+1sdC4LAl/7pqKQag=
Subject key identifier: 37:F2:02:45:7C:47:B6:08:B2:89:FD:9F:58:0E:33:23:43:0D:CF:DD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583D5880D1E677D0A5C7F095FD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c9a96d2-f0b4-3018-9965-5ac97bfc2574.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Wed 26 Jun 2024 04:00:00 +0000
asID: 61317
IP address blocks: 23.26.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:58:80:d1:e6:77:d0:a5:c7:f0:95:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Jun 26 04:00:00 2024 GMT
Subject: CN=d1ae82e2-5f76-4eb7-9e92-d6f045d6bbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:8b:55:47:6f:c8:32:61:ae:ed:f9:fc:71:
d8:54:06:40:61:69:00:b5:41:ec:cf:ec:6f:91:aa:
4f:d5:7e:29:7d:54:d0:fd:22:d8:c6:72:83:89:9f:
77:30:96:e9:52:41:0a:c5:f3:78:72:1a:7c:0f:eb:
6a:6b:42:74:27:88:7b:36:63:ca:fb:84:2e:02:72:
83:81:87:98:0a:49:1f:aa:4f:08:1b:d6:a7:42:a0:
6b:3d:55:97:67:24:1e:51:0b:a5:be:bb:a5:dc:c0:
0a:ac:46:22:e5:0f:75:76:1e:89:fc:b4:4e:ed:c3:
e0:c9:ba:8e:8d:f5:07:c7:9d:66:1b:5a:ac:51:23:
7b:2b:73:75:37:49:33:55:83:4b:d6:50:ec:c7:26:
d0:ad:f6:60:bf:e2:6c:0e:22:b3:45:11:27:59:9f:
77:de:70:f8:a5:9b:4d:3d:ac:4c:00:f1:a7:aa:46:
31:f6:c2:69:c5:98:58:45:50:4e:e5:df:9d:d9:05:
82:e2:d7:d7:4a:9f:7d:1f:e2:d2:ce:21:fb:35:f0:
af:7f:c0:0c:aa:84:08:b7:c8:45:e2:fc:3f:52:05:
36:47:9c:42:a5:b1:7c:e4:1e:95:37:85:a5:54:12:
81:05:68:e5:3f:be:eb:ba:f6:26:93:73:f5:7f:2f:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F2:02:45:7C:47:B6:08:B2:89:FD:9F:58:0E:33:23:43:0D:CF:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c9a96d2-f0b4-3018-9965-5ac97bfc2574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:33:3b:8b:d5:a7:b4:e7:0a:ad:80:f6:ea:bd:ad:d5:4a:99:
2c:b4:52:71:e4:ac:13:40:ca:75:42:9a:a6:d7:9c:33:70:dd:
a6:99:7c:35:21:24:84:3d:85:c0:6c:95:77:58:fb:19:de:1e:
26:b7:b8:40:03:c4:53:fa:0a:07:b5:dc:8d:74:c1:12:bf:59:
14:e2:e2:a8:81:82:75:11:b3:39:67:82:81:a5:80:af:6c:7a:
8f:f6:cc:4c:93:20:18:cc:8d:1b:5f:40:35:1c:49:d4:be:30:
d9:6c:8e:9b:34:b8:0c:d0:6b:1f:b8:47:d8:87:27:85:68:69:
1a:94:78:be:34:ac:a4:b9:14:5c:de:ab:9b:b5:87:9e:63:65:
42:18:d3:49:00:1d:ee:2e:d5:75:b6:cd:56:3d:e7:c2:26:39:
64:f5:5d:96:04:3f:75:f7:ef:4a:80:72:3c:8a:99:f1:1e:86:
c2:8f:13:9a:f6:db:42:36:d3:89:f3:c2:d0:6b:25:69:d8:8b:
0f:9b:b5:27:d2:03:94:f5:13:ce:5b:13:01:53:d9:79:d6:24:
4b:76:e7:75:93:f5:31:b1:70:ce:fd:83:d6:65:86:58:01:cb:
c7:d1:10:d8:c2:4c:bc:14:36:02:ef:0e:7b:81:ab:a8:03:e6:
2d:73:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:11 2025 by rpki-client