Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89f2bf6d-fefd-3599-8c2d-3dc76887fe7e.roa
File: 89f2bf6d-fefd-3599-8c2d-3dc76887fe7e.roa (raw, json)
Hash identifier: d1vqIDue/SqiOglOqUAuuO5nmCqW2YdK2eVbRQlOWfs=
Subject key identifier: 10:DC:6C:13:71:31:AB:E0:F3:75:68:E0:21:59:F5:9E:A8:79:62:38
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BEF3EA7C21657A8133647B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89f2bf6d-fefd-3599-8c2d-3dc76887fe7e.roa
Signing time: Wed 02 Aug 2023 01:00:17 +0000
ROA not before: Wed 02 Aug 2023 01:00:17 +0000
ROA not after: Tue 31 Oct 2023 01:00:17 +0000
asID: 49999
IP address blocks: 23.26.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:f3:ea:7c:21:65:7a:81:33:64:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 2 01:00:17 2023 GMT
Not After : Oct 31 01:00:17 2023 GMT
Subject: CN=398a0848-0c7d-453d-b30e-e5a112ee9767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9e:64:08:20:62:19:35:19:44:04:b3:23:00:
c1:be:54:a8:e5:08:e5:28:dc:a0:c5:95:a7:c0:e7:
f4:79:27:00:52:59:30:d3:97:bb:88:39:da:b0:f2:
19:40:5f:87:39:e1:93:24:d5:45:e6:90:3b:73:9c:
ae:27:f4:be:7b:fa:f4:ce:c8:f5:f2:62:c2:47:dc:
c5:d8:1f:48:0b:27:bd:d9:cb:7e:cd:41:0a:f5:cc:
67:6a:f6:f3:4a:ef:fd:64:4f:eb:7c:b2:0b:b3:cb:
52:c1:01:a3:60:77:da:22:35:7e:49:ef:fe:45:4b:
4e:25:9d:bb:0a:b9:9c:d1:cf:ce:d1:63:ca:15:98:
f5:8c:40:00:a5:80:03:0c:c2:52:14:3e:e0:dc:df:
f2:ec:3a:35:c4:2c:d3:16:0f:dd:25:2c:79:96:7d:
ce:ce:34:25:ec:32:cb:d4:8c:5b:86:ce:b7:2c:5e:
3d:d3:46:8f:b4:50:b5:ad:7b:00:9c:90:0f:d2:31:
e7:bb:e5:1e:14:f8:f1:17:f6:d6:5e:bf:74:8e:88:
16:dd:b0:04:fd:21:fb:67:2f:28:43:ff:45:83:8d:
74:99:9f:db:75:6a:f9:e3:ef:5f:f0:0e:a5:88:1b:
64:a1:17:22:4f:5a:41:86:ec:2f:9f:71:f4:70:af:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DC:6C:13:71:31:AB:E0:F3:75:68:E0:21:59:F5:9E:A8:79:62:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89f2bf6d-fefd-3599-8c2d-3dc76887fe7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:fc:63:bc:bb:a7:ca:5d:f7:ed:2e:2c:16:c9:68:50:90:27:
f5:75:f4:f2:1c:fc:33:4d:40:3a:83:2a:4d:eb:c6:41:b3:a7:
a9:5c:49:3d:c1:d3:a6:11:86:e6:e3:e8:94:eb:dc:c5:bc:fb:
9b:e6:7f:4e:3e:40:bd:a5:25:33:9b:ce:68:ee:70:29:5a:86:
02:f9:a7:b0:80:1f:3f:73:4c:50:bd:eb:30:46:a9:a3:20:f3:
cd:db:0f:18:b1:1f:ff:07:a5:01:b7:10:cb:ae:53:fb:17:c0:
d6:da:b8:f7:4c:ec:18:84:c9:a9:ac:dc:2f:f7:54:2c:e7:27:
1d:4a:54:8c:ae:4b:40:d0:b7:64:4b:5a:46:19:34:dc:44:0e:
df:0f:84:2f:fd:6a:cb:d8:55:37:0d:e8:6c:af:36:0a:af:e8:
29:13:7c:47:0d:32:5a:c0:92:26:d9:98:bc:60:b4:0f:7c:e6:
9d:fe:6e:99:75:91:3a:1b:c6:f4:a7:b4:e1:9e:b0:51:5a:06:
5d:d3:ae:f1:50:61:1e:fa:9e:95:f3:c1:77:bb:f7:2b:de:0d:
e5:d0:f1:d7:63:fd:8b:dc:23:42:02:42:d5:aa:f0:8a:cc:bf:
04:e5:f1:80:55:9f:a4:ab:25:35:6a:f8:04:85:85:42:27:33:
b6:25:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:25:53 2025 by rpki-client