Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b9163a9-3c09-371a-9489-d53d7bdacb3c.roa
File: 8b9163a9-3c09-371a-9489-d53d7bdacb3c.roa (raw, json)
Hash identifier: EXGq5+Z6fkC9o1L6WGVOArYgg0pHMrK+8rFIg1nu+pE=
Subject key identifier: 74:FF:0D:93:CE:83:B1:DF:8B:EA:43:01:2E:E0:C2:A4:6E:87:81:93
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858427EA6B935C99B228FB6507C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b9163a9-3c09-371a-9489-d53d7bdacb3c.roa
Signing time: Mon 10 Jul 2023 00:13:02 +0000
ROA not before: Mon 10 Jul 2023 00:13:02 +0000
ROA not after: Sun 08 Oct 2023 00:13:02 +0000
asID: 400863
IP address blocks: 23.26.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:7e:a6:b9:35:c9:9b:22:8f:b6:50:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 10 00:13:02 2023 GMT
Not After : Oct 8 00:13:02 2023 GMT
Subject: CN=663b66bc-c4af-4715-a01d-43a47f182635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:83:20:38:6a:df:1b:c3:3e:49:95:cc:be:
fd:ec:31:df:0f:87:f2:e4:83:5e:a6:dd:19:be:a4:
da:14:bc:4f:e9:d3:03:b8:b0:99:85:58:0d:f9:d8:
1c:58:74:40:84:b1:70:3b:18:3c:7a:63:10:92:f8:
57:06:ac:40:15:c2:a7:34:bd:ea:50:98:46:df:1e:
82:f2:60:96:06:46:d0:cc:95:7f:12:e6:5e:fc:aa:
f0:be:fa:61:e4:6e:45:c4:95:06:98:81:f1:7a:74:
89:ab:b7:c1:f1:81:10:b0:51:a5:ca:14:d3:18:9f:
d9:5f:c9:ab:37:f6:e1:e7:2e:9c:25:8c:0a:c6:90:
4d:96:6b:1c:ac:64:1d:0a:db:77:ae:2a:9e:fc:57:
68:4c:75:f4:3a:9b:1f:5e:38:a0:c5:8f:1c:f7:38:
84:61:0a:e5:4d:10:1d:f6:91:67:7a:b2:0a:2c:50:
83:99:3d:da:21:b8:c2:8b:cb:6b:84:b6:18:60:83:
6e:e5:b2:8b:73:58:c6:40:eb:5f:ae:65:51:09:74:
4e:c4:4f:7b:91:37:16:91:e0:12:ad:e6:c8:29:33:
f7:2e:c7:f3:71:7e:8d:a4:64:93:6f:34:ab:1b:26:
90:db:b5:ea:f4:18:8e:fb:1b:b6:71:b2:be:d6:26:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:0D:93:CE:83:B1:DF:8B:EA:43:01:2E:E0:C2:A4:6E:87:81:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b9163a9-3c09-371a-9489-d53d7bdacb3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:d6:95:1f:60:32:1a:ec:a8:6d:fa:da:99:cb:c7:bf:f3:30:
51:b4:ae:f0:5c:03:d5:93:33:ba:7a:62:a8:aa:20:93:46:8a:
d8:57:32:13:7c:51:67:c4:a1:42:e8:04:9e:99:62:f3:95:e2:
e9:fa:89:4c:24:e2:e1:dd:47:af:47:43:b4:73:b6:75:35:56:
32:15:11:49:48:35:53:7b:2c:90:69:3a:2f:0f:9b:65:3c:08:
49:6b:d5:27:06:67:11:77:b8:53:fc:68:3b:5f:dd:53:8e:59:
33:31:cf:c3:bd:84:e5:fb:be:2b:3d:9c:ab:b6:99:01:a6:ef:
e1:64:30:c1:00:9d:7b:c0:7e:da:c8:b8:83:81:c4:08:07:a7:
63:d9:a9:c7:4e:d9:5f:dc:99:84:d0:93:13:59:2e:7b:f6:ea:
80:af:a4:9c:b4:f7:94:14:d8:89:2d:92:26:7d:8c:35:d7:40:
bc:f7:d0:cf:3a:fb:5f:62:a4:4f:f7:a2:d5:e0:3f:16:24:2c:
c2:49:79:30:81:53:95:2a:80:32:40:1c:13:9e:47:0c:f0:8e:
eb:2b:f8:e4:dd:71:a7:dd:c0:88:1c:9c:bd:03:91:e9:ae:8b:
fd:d3:7d:3e:e9:c8:61:19:e4:1b:41:6d:72:f0:8f:aa:42:22:
b3:6d:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:03:47 2025 by rpki-client