Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c17bc3b-e8b3-3f6d-bffc-c6042bb62ac2.roa
File: 8c17bc3b-e8b3-3f6d-bffc-c6042bb62ac2.roa (raw, json)
Hash identifier: kvMfoQyxoI5gT57oZm3FK+KSbKiS4rL+2sypPSqyOVQ=
Subject key identifier: 41:5D:1D:23:6F:D9:56:DF:91:2F:17:60:86:D4:4F:68:CE:AF:33:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584230E95D0BB20AF90A768BB298
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c17bc3b-e8b3-3f6d-bffc-c6042bb62ac2.roa
Signing time: Mon 12 Jun 2023 03:54:16 +0000
ROA not before: Mon 12 Jun 2023 03:54:16 +0000
ROA not after: Sun 10 Sep 2023 03:54:16 +0000
asID: 1239
IP address blocks: 23.26.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:30:e9:5d:0b:b2:0a:f9:0a:76:8b:b2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 12 03:54:16 2023 GMT
Not After : Sep 10 03:54:16 2023 GMT
Subject: CN=877be7e0-c50c-4ff8-85c9-2dee2ac64e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:0e:6b:8d:68:54:52:93:11:da:45:fd:ce:
4c:72:f9:b3:80:c1:ff:b3:65:dd:e0:7e:c0:4f:8e:
a7:d3:e2:08:58:04:f5:5b:35:16:cd:1f:9f:8f:63:
a4:1b:ad:0a:ba:f8:c9:3f:07:b6:23:11:91:41:a9:
1b:18:09:2b:02:b9:f0:f8:21:f9:3f:ba:e4:43:83:
74:59:5b:9a:aa:20:97:32:d8:c4:16:5c:49:e5:54:
75:93:03:63:4a:4c:93:9f:08:61:5d:a5:cf:cc:49:
00:03:3e:25:74:a4:e9:ec:49:00:b3:d2:c2:50:57:
fd:08:3c:d5:b7:4d:3a:38:00:67:35:c9:84:e3:6e:
2c:ef:7c:93:42:89:8d:9f:69:78:ca:ae:5b:76:df:
8f:33:05:55:ce:bb:be:15:83:22:0d:24:61:ef:51:
15:4b:a1:86:1b:cc:95:c8:90:c7:3b:a3:0e:1a:49:
17:cf:ee:19:56:33:a6:8f:c2:46:40:7e:74:d8:ba:
19:ab:dc:07:86:20:17:95:49:4d:44:cf:e8:95:e1:
66:7c:48:85:98:e9:7a:81:2a:95:58:68:f6:96:81:
de:eb:0a:cb:55:14:5e:b8:1a:2b:e9:c6:7e:fd:55:
67:d2:2c:15:8c:5c:e9:25:49:28:8b:09:aa:ab:83:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:1D:23:6F:D9:56:DF:91:2F:17:60:86:D4:4F:68:CE:AF:33:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c17bc3b-e8b3-3f6d-bffc-c6042bb62ac2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:61:f2:52:07:5c:c3:0e:9e:93:4d:8b:31:25:59:84:a9:ab:
e4:ad:7f:92:78:c0:cf:1a:4a:13:7f:71:ea:7e:bd:84:d0:55:
5b:a2:59:5e:21:6b:25:5a:31:72:fe:4b:b2:e3:fa:f0:0d:97:
d9:64:2e:b3:bd:f6:40:ec:73:bf:e8:84:f4:08:d7:2f:1e:c3:
09:2b:7f:3b:0a:0c:eb:71:2c:75:e7:f8:02:ad:c5:cc:eb:22:
95:3e:2c:17:40:46:c1:f3:a6:bc:45:b3:3f:56:be:01:7b:2d:
0f:ac:e2:cf:81:f4:91:4f:1a:9a:11:e1:c7:08:9b:7e:ea:a8:
3c:d0:aa:d6:ca:d7:8f:93:6d:b0:6d:4c:1a:d3:c9:2e:32:fb:
30:44:9e:3d:f2:b0:f2:f9:bf:5f:d7:95:00:32:2b:8e:da:0a:
c3:83:c0:17:29:25:24:3a:5e:35:30:f4:a2:ff:30:8e:8c:3f:
82:6b:a8:af:e5:40:cf:bf:5c:23:0a:c6:d6:d1:0b:26:f8:4c:
ae:70:df:bb:06:66:f6:00:2e:ca:da:d0:54:c5:4d:0d:cf:62:
56:da:05:64:a3:00:4d:79:41:09:43:ee:cb:2e:6f:46:a5:56:
d0:0b:a5:0a:a9:8a:b6:06:25:3f:65:6e:34:e6:ba:fe:5f:60:
67:e7:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:25 2025 by rpki-client