Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c45b8b8-6c47-3c92-bc35-8b65a97c5969.roa
File: 8c45b8b8-6c47-3c92-bc35-8b65a97c5969.roa (raw, json)
Hash identifier: E3/nNQDAM+GkUd7ly2+qoQhnDWcXK0PWHihRtRK2IIk=
Subject key identifier: 34:23:8D:91:4A:53:6C:73:CE:B5:2A:AB:F8:14:86:9F:7D:69:35:FF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584304BF0EA9F27FC06D5FC85690
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c45b8b8-6c47-3c92-bc35-8b65a97c5969.roa
Signing time: Sun 27 Aug 2023 01:00:22 +0000
ROA not before: Sun 27 Aug 2023 01:00:22 +0000
ROA not after: Sat 25 Nov 2023 02:00:22 +0000
asID: 834
IP address blocks: 23.26.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:04:bf:0e:a9:f2:7f:c0:6d:5f:c8:56:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 27 01:00:22 2023 GMT
Not After : Nov 25 02:00:22 2023 GMT
Subject: CN=9cd15631-2059-4d9d-85d9-d04487e33283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:17:38:cf:6c:ac:95:e3:e9:7c:58:92:18:
d1:e6:93:cc:bc:0a:ce:06:e1:c5:77:64:3b:d1:59:
6b:03:1e:54:76:0f:67:b5:31:25:2a:6c:09:ed:17:
0a:4d:32:c9:f9:1b:cd:63:42:c2:42:ba:ca:26:4c:
84:84:a3:a5:26:77:b6:d0:5b:a7:8a:82:66:43:44:
51:6d:f7:6e:9d:89:fd:c3:92:84:ec:e0:9f:bd:67:
14:2e:08:52:7b:a4:73:74:1f:c6:27:ff:8b:c8:3f:
4a:3b:17:20:7d:65:7b:a1:a8:76:18:80:51:20:cd:
7f:cd:a6:a1:f8:fa:2a:54:67:6f:c4:2e:ff:4e:eb:
16:2a:b4:65:91:90:05:c8:c2:eb:3d:68:5a:01:d8:
09:34:9d:0c:c6:f6:61:ab:25:6a:66:34:68:40:fc:
da:20:97:c6:e9:52:c3:35:7e:56:05:7d:27:fb:40:
1a:87:38:d2:c9:11:0a:cf:e2:19:b3:31:34:06:fa:
2b:9b:dd:6d:ae:31:a9:4c:6a:e7:73:ec:84:59:25:
80:fe:14:51:cc:a4:fa:0e:0f:87:99:bd:5b:d6:24:
ed:2d:40:a0:67:92:0a:61:8a:40:1c:81:32:75:42:
95:35:5d:2c:6a:3e:69:03:55:fc:0e:a7:74:9f:b8:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:8D:91:4A:53:6C:73:CE:B5:2A:AB:F8:14:86:9F:7D:69:35:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c45b8b8-6c47-3c92-bc35-8b65a97c5969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:ae:42:fb:a7:96:a7:53:2d:cc:ad:84:50:b7:95:35:a3:89:
1d:f0:d1:9e:cd:2d:79:36:78:25:41:80:6f:ae:52:a3:70:d6:
99:1e:26:96:1e:fb:91:63:bc:8b:a1:7c:e8:05:df:dd:72:94:
30:4a:8f:6e:56:b7:a2:49:7d:b3:e6:4b:58:c6:87:f2:a5:93:
bb:42:70:2c:0b:3c:5d:c1:34:ce:5a:4e:ed:30:bf:e1:4b:b8:
0e:cb:9c:97:18:09:cb:63:3f:4b:cf:6a:2f:03:6a:1e:5f:2b:
7f:be:b5:4a:4f:d3:c7:4e:6d:cb:b5:1c:1f:8c:1b:91:cc:cd:
a4:86:e6:da:cc:88:d1:ae:20:e2:06:8b:fc:6c:99:f8:e9:b5:
35:9b:b9:f9:dd:94:ad:a2:33:f4:65:35:90:98:e9:92:fa:5a:
c9:0e:30:cd:fd:8b:bc:c6:40:7d:b2:5b:e3:31:26:84:48:e4:
c0:19:68:c5:48:55:62:43:b5:5d:fa:7d:fb:10:33:16:3a:92:
85:94:2a:18:9c:6b:35:de:06:66:6b:eb:f0:e7:0b:76:cc:1f:
7f:ca:ca:30:3e:c9:bd:f6:40:67:54:2f:ab:9d:38:fb:f3:71:
a8:be:cc:01:80:58:fb:7e:db:20:8c:94:1f:fe:67:a9:73:40:
20:37:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:30:54 2025 by rpki-client