Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/800b0498-aa72-348a-b636-8e626d61b22b.roa
File: 800b0498-aa72-348a-b636-8e626d61b22b.roa (raw, json)
Hash identifier: rTnuk+PXr6KMjeEUKSMP/4fZwdINNO9Y29kvpeLEy6k=
Subject key identifier: 28:95:C7:0B:68:B3:AB:B0:10:87:7D:CA:E9:7A:5C:30:90:38:69:36
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842ADB02C11AFCEE443B4C47340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/800b0498-aa72-348a-b636-8e626d61b22b.roa
Signing time: Wed 26 Jul 2023 20:35:04 +0000
ROA not before: Wed 26 Jul 2023 20:35:04 +0000
ROA not after: Tue 24 Oct 2023 20:35:04 +0000
asID: 834
IP address blocks: 23.26.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ad:b0:2c:11:af:ce:e4:43:b4:c4:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 26 20:35:04 2023 GMT
Not After : Oct 24 20:35:04 2023 GMT
Subject: CN=3b40c112-2b99-4f14-b8e3-0677896c1dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:0d:6c:46:95:d3:4e:91:78:57:fa:0e:b5:
bd:3b:6e:68:18:41:08:29:f8:83:75:52:2c:95:e2:
26:7a:54:f7:3f:35:f4:72:00:09:a5:22:93:ed:91:
62:a5:3c:ef:26:ca:8d:58:98:45:47:8a:90:16:d5:
39:4f:61:49:a0:8c:a7:76:72:ad:d8:1b:46:ca:6a:
af:9e:93:4b:09:73:c9:b4:bb:7f:c9:f6:92:89:da:
d5:5b:47:5d:7c:5a:dd:82:c8:cb:08:e6:71:81:46:
26:e9:2a:87:8c:33:3f:ab:a0:0f:8c:cb:25:a2:2c:
93:28:90:bc:72:99:5c:93:94:3c:6a:ed:00:9d:aa:
c9:a8:9f:2d:55:1f:bc:b8:39:c6:78:d2:e2:ce:dd:
48:db:84:0c:89:04:ab:6e:af:99:5c:94:c9:b2:b0:
ad:34:16:2a:aa:af:30:2d:f5:b6:c9:ae:ae:2b:7e:
45:df:f7:fb:af:be:a1:f7:43:3a:b9:ec:42:57:45:
aa:38:51:7f:8c:96:31:3c:4d:e9:b3:a4:20:7b:e1:
ae:c2:e6:f7:3c:db:0e:36:9c:e1:ba:45:25:7d:5c:
b3:32:79:08:8a:c7:a0:56:49:f2:d5:0e:ed:82:02:
7b:4f:a9:43:6b:2a:ed:b4:9f:b2:be:9a:a3:87:80:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:95:C7:0B:68:B3:AB:B0:10:87:7D:CA:E9:7A:5C:30:90:38:69:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/800b0498-aa72-348a-b636-8e626d61b22b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:2a:75:1f:99:fc:73:9e:55:59:3a:74:0c:cd:16:ca:93:e3:
bd:5f:7e:ef:e4:a7:40:71:65:1f:1c:f6:e3:bd:2a:7b:e0:88:
7a:b3:79:d2:7b:92:54:bb:53:d8:54:ec:98:68:ec:dd:a7:b9:
22:95:82:8d:3b:f5:0a:30:62:4b:f4:24:af:ea:31:2e:4c:08:
15:29:f9:66:8a:ed:a3:e0:e9:eb:6f:a2:d1:58:50:7f:06:35:
68:b7:59:cd:68:6c:6a:f4:3a:11:2a:fd:21:de:e3:e6:eb:92:
cc:13:fa:a3:93:58:c0:9a:36:40:3b:91:93:7c:74:37:16:4f:
cd:52:74:17:3c:3a:7f:a8:aa:90:04:03:0e:75:0d:63:49:86:
52:8f:6a:3f:4b:2c:df:08:f2:c2:f0:5d:3c:6c:be:34:50:de:
e3:0a:43:35:3b:26:79:5b:e0:3d:46:5f:9d:f0:8d:7a:71:7d:
fc:3b:5f:c7:d8:d2:96:af:09:fc:15:02:79:9c:79:fc:c8:c6:
4f:b0:6d:a9:67:4c:48:16:ab:8e:98:f5:7b:7d:68:0b:89:3d:
d3:93:94:5c:d9:c2:28:c2:29:df:a1:8f:db:5a:05:98:18:29:
74:1e:b2:45:d9:a0:e4:25:fc:26:5e:f6:73:c9:dd:bc:d8:4a:
8e:f5:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:55:11 2025 by rpki-client