Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ecd864d-10ed-373d-a385-18dcba81e8cd.roa
File: 8ecd864d-10ed-373d-a385-18dcba81e8cd.roa (raw, json)
Hash identifier: MBY/6IQnIDRpR3Paq8xMISipBSFQ1xL1tBxykNubdGI=
Subject key identifier: E8:54:9D:54:EC:3F:AA:E1:FB:72:13:62:1F:EC:C5:CE:80:A9:60:1C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843E598F04D62DE5688FBE7D3E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ecd864d-10ed-373d-a385-18dcba81e8cd.roa
Signing time: Wed 15 Nov 2023 14:00:21 +0000
ROA not before: Wed 15 Nov 2023 14:00:21 +0000
ROA not after: Tue 13 Feb 2024 14:00:21 +0000
asID: 834
IP address blocks: 23.26.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e5:98:f0:4d:62:de:56:88:fb:e7:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 15 14:00:21 2023 GMT
Not After : Feb 13 14:00:21 2024 GMT
Subject: CN=b88aa40a-9dc7-4874-99af-0e670a3279f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:81:e6:af:c4:e8:1b:af:41:8e:cc:f0:86:
49:03:57:c9:d5:9b:b2:f0:26:73:56:46:1c:5a:6c:
68:a5:d7:6b:08:1b:04:44:37:7e:aa:bb:e2:69:af:
13:bc:6b:6b:42:de:ba:1a:a4:99:88:ec:b2:63:7d:
9e:ee:76:5a:72:7c:b4:f3:84:7c:50:92:6b:99:5a:
91:09:e6:bb:7b:c1:24:7c:e2:3c:38:d3:d4:92:11:
86:0a:b9:39:6e:ea:43:e2:f8:f9:45:a5:b1:a4:8d:
90:be:b4:c9:46:50:00:40:91:62:20:87:c0:dc:a0:
03:25:46:c5:e8:86:9b:4f:82:20:56:a8:44:a6:ae:
f5:73:49:35:92:a8:13:0e:d7:94:05:93:42:f4:a9:
f3:9a:a1:cb:77:ba:2a:fc:82:4d:e8:23:03:98:81:
52:23:5a:4b:ed:64:66:61:6a:99:59:a0:ec:2a:eb:
44:f6:1c:01:8f:29:b3:c2:38:bd:16:23:67:e9:9a:
35:f5:4c:1f:2c:fb:c8:a2:ec:f9:78:5a:f8:3b:21:
4b:8e:f3:37:6e:4c:7d:8d:b5:cc:a8:ef:ac:d7:b4:
1e:f0:0d:f0:cb:7a:94:f4:44:6e:91:03:5c:fb:47:
da:4c:0b:06:e5:b5:8f:d4:02:f0:9a:32:37:e2:dc:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:54:9D:54:EC:3F:AA:E1:FB:72:13:62:1F:EC:C5:CE:80:A9:60:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ecd864d-10ed-373d-a385-18dcba81e8cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:f4:4e:cc:99:c2:7c:30:dd:49:9c:26:8d:38:82:81:31:03:
b0:20:55:0f:72:df:62:45:25:dc:92:10:5e:09:82:7a:4d:60:
91:5b:cf:54:eb:a1:61:72:a2:5f:b9:84:bf:33:73:e2:a4:5b:
c8:18:b3:25:da:70:67:b8:a3:14:c2:38:f7:25:ab:5e:5e:3f:
ed:ac:22:ba:9a:73:e2:f6:81:22:cd:71:9c:e7:77:8f:b4:26:
b3:1f:53:76:53:7f:9a:42:4e:cb:c4:ba:07:ad:ca:76:55:96:
08:13:db:12:96:25:8c:d9:f3:49:5f:bb:7a:90:83:69:fb:26:
19:3d:60:4a:81:50:c8:2c:82:6c:e4:74:cb:a0:fd:dd:6a:bb:
41:f3:96:a7:bb:1f:b1:1f:72:6e:1d:50:7c:f9:ab:12:e3:57:
55:b7:3d:f9:6a:db:6e:c8:ca:89:83:d8:a0:70:40:4c:19:8b:
68:90:dd:4c:40:a1:84:51:e5:bc:4f:ff:15:9d:0b:b4:6a:db:
d7:49:54:cd:40:07:32:cb:87:ec:70:b3:77:f2:7e:03:00:3e:
55:3b:52:37:a0:ea:64:9d:42:90:97:b4:57:8f:69:24:26:01:
c9:3e:fb:24:3d:0a:f0:b1:7c:c0:7e:1a:c6:70:fe:12:d2:ba:
2e:ad:19:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPlmPBNYt5WiPvn0+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTExNTE0MDAyMVoXDTI0MDIxMzE0MDAyMVowLzEtMCsGA1UEAxMk
Yjg4YWE0MGEtOWRjNy00ODc0LTk5YWYtMGU2NzBhMzI3OWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE2B5q/E6BuvQY7M8IZJA1fJ1Zuy8CZzVkYc
WmxopddrCBsERDd+qrviaa8TvGtrQt66GqSZiOyyY32e7nZacny084R8UJJrmVqR
Cea7e8EkfOI8ONPUkhGGCrk5bupD4vj5RaWxpI2QvrTJRlAAQJFiIIfA3KADJUbF
6IabT4IgVqhEpq71c0k1kqgTDteUBZNC9KnzmqHLd7oq/IJN6CMDmIFSI1pL7WRm
YWqZWaDsKutE9hwBjymzwji9FiNn6Zo19UwfLPvIouz5eFr4OyFLjvM3bkx9jbXM
qO+s17Qe8A3wy3qU9ERukQNc+0faTAsG5bWP1ALwmjI34tw8FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOhUnVTsP6rh+3ITYh/sxc6AqWAcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGVjZDg2NGQtMTBlZC0z
NzNkLWEzODUtMThkY2JhODFlOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxosMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKL0TsyZwnww3UmcJo04goExA7AgVQ9y32JFJdySEF4JgnpNYJFbz1Tr
oWFyol+5hL8zc+KkW8gYsyXacGe4oxTCOPclq15eP+2sIrqac+L2gSLNcZznd4+0
JrMfU3ZTf5pCTsvEugetynZVlggT2xKWJYzZ80lfu3qQg2n7Jhk9YEqBUMgsgmzk
dMug/d1qu0Hzlqe7H7Efcm4dUHz5qxLjV1W3Pflq227IyomD2KBwQEwZi2iQ3UxA
oYRR5bxP/xWdC7Rq29dJVM1ABzLLh+xws3fyfgMAPlU7Ujeg6mSdQpCXtFePaSQm
Ack++yQ9CvCxfMB+GsZw/hLSui6tGcc=
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:44:49 2025 by rpki-client