Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/843f0003-c86e-3127-bfc4-96ab468b25d3.roa
File: 843f0003-c86e-3127-bfc4-96ab468b25d3.roa (raw, json)
Hash identifier: WTKavCvLpnyP7V4KdY8Qr4dLK1tD48cyv+NOreBvPAA=
Subject key identifier: C6:30:93:83:92:D9:1F:B9:24:A1:FD:19:72:45:CA:0E:34:3E:BB:57
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584766138C5A7A8953CE2E6CD280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/843f0003-c86e-3127-bfc4-96ab468b25d3.roa
Signing time: Tue 01 Oct 2024 16:51:47 +0000
ROA not before: Tue 01 Oct 2024 16:51:47 +0000
ROA not after: Mon 30 Dec 2024 17:51:47 +0000
asID: 834
IP address blocks: 23.26.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:66:13:8c:5a:7a:89:53:ce:2e:6c:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 1 16:51:47 2024 GMT
Not After : Dec 30 17:51:47 2024 GMT
Subject: CN=4d7ed618-3bd2-4813-a516-7e534dc31ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:9a:5a:b2:43:06:15:bb:b7:22:c4:26:da:
31:1f:b5:78:13:68:25:05:c1:5b:4e:99:f5:b0:f1:
9d:52:6b:89:45:03:64:5d:bb:99:31:11:ce:d7:2a:
4c:a9:f2:3b:30:2a:9d:21:84:19:fa:52:93:2a:e2:
ea:25:29:f8:c7:e0:f2:97:03:b3:3f:c8:92:50:bd:
30:41:c9:63:66:e8:07:50:dc:b9:c6:9c:a0:f4:30:
a1:ab:ab:27:de:7e:fc:c3:81:bd:fc:f3:27:9b:82:
89:45:89:6a:77:be:1b:2d:4e:85:01:27:fe:06:f7:
d1:52:2e:28:cc:c1:de:7e:49:3d:6a:f7:99:0a:b0:
e4:56:3e:e4:74:0e:39:eb:ea:64:15:d8:41:4f:fa:
b5:41:ac:e0:83:d8:df:72:f7:3f:e8:f0:62:14:78:
d6:85:b1:12:48:0d:3b:b6:0b:b8:e4:9d:06:7b:d6:
5a:73:2c:4a:8b:c5:69:e4:1e:67:13:75:43:a5:b8:
05:58:4d:7b:12:73:65:bf:f7:fc:29:60:8e:26:a4:
20:78:d3:cc:75:30:c0:28:7b:71:f0:c2:bc:df:c7:
f7:0c:8e:20:a1:1d:55:ab:e2:26:2b:98:7f:f0:6a:
7c:68:2c:f1:6b:f9:fc:cd:4c:33:15:f8:5f:1d:fb:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:93:83:92:D9:1F:B9:24:A1:FD:19:72:45:CA:0E:34:3E:BB:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/843f0003-c86e-3127-bfc4-96ab468b25d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:80:39:d8:c8:10:68:20:d0:c0:5d:dd:ab:7c:68:af:a6:39:
f6:f4:ec:68:65:c3:a6:ae:75:14:78:f5:af:93:ae:24:ac:cb:
51:25:3f:32:e8:0f:af:8d:87:23:a3:5f:c3:cb:e3:e8:94:5a:
a1:1d:8b:25:ed:60:88:85:7f:bc:84:38:5a:5b:a8:ff:9a:3f:
c6:47:93:54:c3:9e:b2:a9:03:09:8f:59:b1:30:0b:01:17:ce:
e6:30:dd:08:cd:4c:09:e7:f9:46:b3:c2:3e:4e:dc:82:f9:ca:
66:95:a6:e5:c7:9c:84:85:59:af:d3:fd:98:40:ff:a5:1c:3a:
5d:43:7f:66:e5:6b:c9:5a:e8:21:bb:d1:13:05:79:55:99:48:
05:72:57:59:af:4d:3e:c9:12:b0:61:45:bb:e3:fd:a1:d7:a7:
22:fa:ee:b9:a1:e9:16:ca:fe:5a:6e:a9:2f:af:da:4b:dc:f0:
1d:92:4f:ac:31:6e:2d:1e:07:79:dc:5a:e7:b8:e1:12:87:60:
a7:d7:05:89:b2:6d:a4:3b:01:03:1f:96:d6:cd:07:e5:7b:b0:
17:55:f1:40:aa:87:c4:11:63:0b:7a:2c:37:97:27:c2:b0:b3:
18:87:ac:ae:49:8e:8a:d3:2f:8c:33:2b:23:18:31:92:a4:0c:
ad:da:3c:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdmE4xaeolTzi5s0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTAwMTE2NTE0N1oXDTI0MTIzMDE3NTE0N1owLzEtMCsGA1UEAxMk
NGQ3ZWQ2MTgtM2JkMi00ODEzLWE1MTYtN2U1MzRkYzMxZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3KaWrJDBhW7tyLEJtoxH7V4E2glBcFbTpn1
sPGdUmuJRQNkXbuZMRHO1ypMqfI7MCqdIYQZ+lKTKuLqJSn4x+DylwOzP8iSUL0w
QcljZugHUNy5xpyg9DChq6sn3n78w4G9/PMnm4KJRYlqd74bLU6FASf+BvfRUi4o
zMHefkk9aveZCrDkVj7kdA456+pkFdhBT/q1Qazgg9jfcvc/6PBiFHjWhbESSA07
tgu45J0Ge9ZacyxKi8Vp5B5nE3VDpbgFWE17EnNlv/f8KWCOJqQgeNPMdTDAKHtx
8MK838f3DI4goR1Vq+ImK5h/8Gp8aCzxa/n8zUwzFfhfHfsi3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYwk4OS2R+5JKH9GXJFyg40PrtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODQzZjAwMDMtYzg2ZS0z
MTI3LWJmYzQtOTZhYjQ2OGIyNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxowMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2AOdjIEGgg0MBd3at8aK+mOfb07Ghlw6audRR49a+TriSsy1ElPzLo
D6+NhyOjX8PL4+iUWqEdiyXtYIiFf7yEOFpbqP+aP8ZHk1TDnrKpAwmPWbEwCwEX
zuYw3QjNTAnn+Uazwj5O3IL5ymaVpuXHnISFWa/T/ZhA/6UcOl1Df2bla8la6CG7
0RMFeVWZSAVyV1mvTT7JErBhRbvj/aHXpyL67rmh6RbK/lpuqS+v2kvc8B2ST6wx
bi0eB3ncWue44RKHYKfXBYmybaQ7AQMfltbNB+V7sBdV8UCqh8QRYwt6LDeXJ8Kw
sxiHrK5JjorTL4wzKyMYMZKkDK3aPNM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:57 2025 by rpki-client