Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88978520-d2c7-3745-96ce-90805b0b2cfa.roa
File: 88978520-d2c7-3745-96ce-90805b0b2cfa.roa (raw, json)
Hash identifier: moAw1W9BQDu4j8aJkUzlUvebY95reavbNfJsFiWKa5E=
Subject key identifier: E3:36:A7:EB:AE:31:2F:B2:5E:5A:14:54:C3:74:C2:48:0A:02:C6:47
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841EF74BD606AFDC9D07374A380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88978520-d2c7-3745-96ce-90805b0b2cfa.roa
Signing time: Fri 19 May 2023 17:11:44 +0000
ROA not before: Fri 19 May 2023 17:11:44 +0000
ROA not after: Thu 17 Aug 2023 17:11:44 +0000
asID: 49999
IP address blocks: 23.26.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ef:74:bd:60:6a:fd:c9:d0:73:74:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 19 17:11:44 2023 GMT
Not After : Aug 17 17:11:44 2023 GMT
Subject: CN=44d44502-3f48-4a4e-bd38-f8b727947771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:22:f2:72:e0:8b:6b:c8:b8:15:fa:37:4d:
2e:b3:eb:e8:d5:8a:50:84:15:14:ff:28:10:0d:10:
e4:49:7e:18:50:03:f1:7a:15:52:f7:4f:8f:c9:aa:
ae:f9:b3:4e:31:ce:ef:45:dd:b6:be:30:82:88:d7:
90:40:0c:b7:ca:cc:0a:34:53:6b:e9:c8:fb:60:1a:
b0:33:7f:86:b8:ff:32:0d:f1:b7:59:10:9f:81:77:
fc:1e:3e:9e:ca:fc:41:57:30:c4:89:ef:4b:f6:38:
3e:f9:d2:3f:88:d7:0f:8f:c8:dc:de:8e:44:f0:86:
b1:e6:cf:ac:8d:f6:73:2b:ef:cf:65:0e:d0:5c:bf:
be:5a:61:e6:33:00:06:a3:56:69:99:3d:8d:0e:73:
27:04:aa:c3:a7:81:1e:a8:02:fe:35:6d:cf:96:d5:
e6:e4:55:b6:87:e0:14:48:3d:52:58:2a:91:9f:c3:
65:52:ff:c0:b3:e2:27:eb:0c:7f:5c:ec:e9:ca:00:
33:75:e2:3c:ea:2a:58:90:7a:e6:bc:c6:ad:19:d2:
11:7f:61:f4:be:d8:60:42:a7:fb:28:14:70:2d:f2:
64:03:00:84:c8:62:57:f1:07:3a:a4:20:5e:22:a8:
55:04:0a:28:b8:c4:a5:10:62:ec:76:90:52:3a:5f:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:36:A7:EB:AE:31:2F:B2:5E:5A:14:54:C3:74:C2:48:0A:02:C6:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88978520-d2c7-3745-96ce-90805b0b2cfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:15:ac:b9:52:dd:d2:43:b4:55:37:06:68:36:a7:77:2d:96:
2a:14:96:52:fc:7e:85:26:b2:ee:1b:35:b3:9c:d9:1d:02:dd:
77:e4:55:b7:05:fe:82:18:1c:0c:57:e3:fd:67:db:5e:f8:34:
9d:da:67:f0:c1:94:ee:79:f9:a1:42:2c:94:ca:2a:0d:e2:88:
da:ed:2e:ae:ab:95:47:b1:be:8c:a6:58:68:c7:f2:bd:a4:7a:
03:ec:c6:aa:0d:7c:21:fa:fe:59:7c:5a:1e:80:46:ee:22:1a:
13:4c:0b:9c:20:c5:ab:16:45:7f:d5:bb:67:2f:31:e7:4d:5f:
a1:7a:ae:b4:ba:cb:6a:ce:17:f9:69:4f:e4:db:28:b7:74:10:
57:af:1c:9a:f9:2b:c3:c4:96:48:87:86:bc:c8:8a:ed:86:02:
c7:ce:c6:9b:98:f5:9f:57:80:02:75:bb:b0:14:b6:e8:36:41:
f7:b1:9f:7d:bf:fa:ea:56:f6:40:e5:73:bb:86:b5:67:53:25:
46:55:3d:cf:e4:a5:e3:f0:b5:ce:59:b5:16:1d:18:ec:3f:b6:
55:63:1b:a1:3d:83:ce:d2:c2:38:19:d9:64:1a:ed:15:46:dd:
8e:a5:d0:d4:6c:8c:b8:45:c2:66:57:d7:0d:84:b3:e6:27:40:
a4:a6:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:33:10 2025 by rpki-client