Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8d48fea1-6e06-33fa-a3b1-cbf0a43868f2.roa
File: 8d48fea1-6e06-33fa-a3b1-cbf0a43868f2.roa (raw, json)
Hash identifier: VXp4Z/ZmOI6yMN66lSptVT0noHNbyEU0k4otkfVVkYw=
Subject key identifier: 1B:A0:30:9F:05:26:82:A1:DB:AF:F5:DD:00:C2:29:B8:93:16:C8:95
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842CED611CFE4279501D515E680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8d48fea1-6e06-33fa-a3b1-cbf0a43868f2.roa
Signing time: Mon 07 Aug 2023 17:33:06 +0000
ROA not before: Mon 07 Aug 2023 17:33:06 +0000
ROA not after: Sun 05 Nov 2023 18:33:06 +0000
asID: 61317
IP address blocks: 23.26.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ce:d6:11:cf:e4:27:95:01:d5:15:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 7 17:33:06 2023 GMT
Not After : Nov 5 18:33:06 2023 GMT
Subject: CN=e7e2e556-8bdf-4be1-a5cd-3cadd039777b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:ef:89:af:82:f2:7c:58:35:da:39:d0:7d:
6f:5f:b6:d1:e4:73:70:b4:e1:1e:37:ad:4f:7d:64:
66:cb:a0:76:bc:8a:48:63:23:ce:06:08:68:f6:0a:
a0:6c:09:df:50:cf:f0:13:df:38:c3:f1:9f:26:83:
27:73:12:3f:d1:85:40:65:af:2f:f0:79:1c:13:92:
8e:b9:cd:0a:04:c2:f0:43:87:da:bf:6d:85:28:75:
ce:13:c3:ff:c1:6c:c0:a5:74:8a:ea:83:67:62:a9:
5c:c3:51:8e:50:ef:35:8a:8f:64:a3:2e:78:0f:d2:
75:15:79:be:83:82:43:d3:e9:d9:09:7b:a0:04:24:
d7:36:0c:8c:ff:7e:85:46:85:33:f6:7e:b9:da:ab:
12:8b:18:a1:74:e8:ef:bc:29:39:2c:09:55:99:ff:
c1:c6:c6:92:7c:4c:70:ac:bf:35:f1:71:27:f2:ea:
fd:94:9d:76:dc:49:6c:14:33:e4:b1:ec:79:75:12:
58:98:95:ec:16:21:fa:c1:90:31:84:de:58:a0:f8:
4c:26:a8:ca:c3:94:b4:52:a3:95:ea:fe:64:f3:0e:
96:10:5c:57:1c:fa:33:fa:46:8e:d6:c4:bf:26:7d:
85:e5:82:ee:f7:95:f2:1f:d1:0f:6b:d4:81:aa:69:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:30:9F:05:26:82:A1:DB:AF:F5:DD:00:C2:29:B8:93:16:C8:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8d48fea1-6e06-33fa-a3b1-cbf0a43868f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ab:30:ed:6c:41:fa:18:cd:a6:d4:a1:c6:7f:b9:f0:a0:00:
86:bd:78:b6:ba:cb:2d:5c:e6:84:0a:4f:4e:02:1f:a5:95:63:
b0:f9:78:2c:7c:ee:21:1e:63:16:0b:fc:eb:b2:b1:8a:5f:20:
ff:56:ff:13:41:1d:c8:11:47:bd:5f:0f:68:30:aa:dd:98:21:
e1:f9:5b:e7:4b:ed:93:c6:36:47:dc:13:be:12:9a:33:43:a0:
49:6f:bb:39:93:dd:66:17:94:55:72:c7:e4:fb:ab:86:d4:84:
18:80:20:23:96:e6:af:91:c0:c4:11:b2:17:d8:d1:e6:66:7f:
ed:a9:16:65:97:66:02:bb:15:79:71:6e:1c:53:d6:1a:67:d6:
d0:f9:96:4f:28:83:91:b1:9c:21:da:fe:28:c8:fc:97:1f:f4:
4b:d6:59:16:d0:74:51:4e:4c:87:d3:51:dc:aa:11:b7:69:9b:
2a:2e:6f:16:0c:f8:c0:c1:7a:8c:0b:28:5a:08:5a:f6:1c:cc:
3d:80:c9:dc:fe:e0:98:dc:db:f3:1e:3b:87:e6:d5:0b:1d:02:
75:5f:16:c1:69:e6:30:f3:d4:9f:9e:ca:d6:d0:9e:ab:e5:4c:
d6:d8:77:a3:bd:da:71:ea:be:dc:01:72:92:ee:fb:94:fb:27:
72:e0:2c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:32 2025 by rpki-client