Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91b079e3-3342-3d10-b6ce-8a7b786c0bd8.roa
File: 91b079e3-3342-3d10-b6ce-8a7b786c0bd8.roa (raw, json)
Hash identifier: VCDCpR1ptk8PJg/sPjL11QpCBYJOQa04t66PFHY7/Ks=
Subject key identifier: 3E:7D:EB:35:DC:34:39:62:74:65:54:A4:71:C7:14:11:8D:50:93:ED
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858462E597C9C4A1C72D00C019B90
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91b079e3-3342-3d10-b6ce-8a7b786c0bd8.roa
Signing time: Wed 12 Jun 2024 01:00:25 +0000
ROA not before: Wed 12 Jun 2024 01:00:25 +0000
ROA not after: Tue 10 Sep 2024 01:00:25 +0000
asID: 42831
IP address blocks: 23.26.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2e:59:7c:9c:4a:1c:72:d0:0c:01:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 12 01:00:25 2024 GMT
Not After : Sep 10 01:00:25 2024 GMT
Subject: CN=2173a4e7-298b-471f-9540-756e70a715ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:6c:63:39:5c:56:d5:bc:21:56:05:9e:28:
3e:5f:bc:6b:cf:83:18:cf:73:6b:cf:3e:a1:71:27:
61:f4:7d:a4:46:f5:ab:d7:0c:fd:fb:97:d6:25:d8:
7a:02:0d:50:65:30:a7:7e:67:d4:ea:3b:3b:26:0c:
ff:f8:0f:68:7c:60:70:b9:db:25:a0:6b:41:a2:d7:
01:d4:86:61:a6:c2:92:72:21:10:9c:e8:cc:7d:d5:
8e:b7:16:f6:5c:a1:0c:00:14:e2:31:91:15:5f:b3:
1b:48:18:3d:10:da:f7:f9:34:93:bf:73:d7:37:a6:
96:18:2e:03:cf:a8:60:3e:56:11:3e:8d:18:91:a4:
13:e7:9a:02:bf:ce:f0:e2:06:31:52:36:f0:49:c0:
45:3c:a6:50:a4:50:aa:5f:98:7a:6a:4e:0d:14:8d:
c1:e7:8f:f1:c4:7f:3f:07:91:99:61:c1:0f:08:41:
7e:dd:bc:5e:63:60:52:f7:b4:42:ac:c1:c7:c2:44:
56:f8:90:e2:d5:12:78:8c:66:63:34:dd:84:c4:71:
56:87:02:f8:8a:bb:35:a1:d9:b2:d0:ab:e1:5f:d9:
07:c2:78:16:4a:2a:4c:e3:99:18:81:d2:66:07:d2:
ee:4b:eb:58:2b:a7:a5:b4:88:1e:0f:cd:86:56:7f:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:EB:35:DC:34:39:62:74:65:54:A4:71:C7:14:11:8D:50:93:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91b079e3-3342-3d10-b6ce-8a7b786c0bd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ee:c8:3c:4c:c7:a7:35:64:3a:eb:81:7d:ac:95:59:4c:c6:
6b:04:9a:c0:fe:3c:09:8d:97:d0:7b:b1:47:74:a8:aa:3c:4c:
03:46:e5:54:1c:c8:4e:bf:dd:5a:67:57:2a:17:cf:57:ad:29:
37:a5:19:54:a4:f0:af:fb:e1:a3:b9:ea:df:dd:5b:e6:76:d3:
fb:b3:fe:6b:d8:9d:e6:fb:99:b4:15:83:f3:29:ff:b2:91:0f:
76:20:d8:79:41:5a:42:a3:71:bf:c0:a4:5a:21:00:a1:c7:2e:
e6:f3:34:89:37:fe:d8:64:8b:1a:ef:27:18:fc:5f:72:06:d1:
1b:63:dd:55:c0:aa:ae:75:01:8c:9e:5b:6c:9c:8e:ed:a5:f7:
6f:31:39:0e:6c:6f:9c:83:7a:74:c2:c7:89:fd:19:87:50:6b:
e1:c2:06:36:7b:67:ef:80:6f:47:11:45:2c:1f:28:d8:d9:9e:
90:36:9c:1f:c8:be:79:be:b0:ab:c8:11:ef:b4:30:45:c3:ea:
c4:2e:47:97:2b:92:a7:bc:d4:7c:a1:59:98:78:6c:95:f8:28:
35:28:6e:36:93:f5:36:c9:7c:cc:9e:17:e9:57:d3:be:45:18:
ec:17:1d:7f:ca:12:fc:a9:7c:5a:b6:0d:5d:23:f1:38:ba:c3:
b1:7a:c3:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYuWXycShxy0AwBm5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDYxMjAxMDAyNVoXDTI0MDkxMDAxMDAyNVowLzEtMCsGA1UEAxMk
MjE3M2E0ZTctMjk4Yi00NzFmLTk1NDAtNzU2ZTcwYTcxNWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofJsYzlcVtW8IVYFnig+X7xrz4MYz3Nrzz6h
cSdh9H2kRvWr1wz9+5fWJdh6Ag1QZTCnfmfU6js7Jgz/+A9ofGBwudsloGtBotcB
1IZhpsKSciEQnOjMfdWOtxb2XKEMABTiMZEVX7MbSBg9ENr3+TSTv3PXN6aWGC4D
z6hgPlYRPo0YkaQT55oCv87w4gYxUjbwScBFPKZQpFCqX5h6ak4NFI3B54/xxH8/
B5GZYcEPCEF+3bxeY2BS97RCrMHHwkRW+JDi1RJ4jGZjNN2ExHFWhwL4irs1odmy
0KvhX9kHwngWSipM45kYgdJmB9LuS+tYK6eltIgeD82GVn+TqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD596zXcNDlidGVUpHHHFBGNUJPtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTFiMDc5ZTMtMzM0Mi0z
ZDEwLWI2Y2UtOGE3Yjc4NmMwYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnuyDxMx6c1ZDrrgX2slVlMxmsEmsD+PAmNl9B7sUd0qKo8TANG5VQc
yE6/3VpnVyoXz1etKTelGVSk8K/74aO56t/dW+Z20/uz/mvYneb7mbQVg/Mp/7KR
D3Yg2HlBWkKjcb/ApFohAKHHLubzNIk3/thkixrvJxj8X3IG0Rtj3VXAqq51AYye
W2ycju2l928xOQ5sb5yDenTCx4n9GYdQa+HCBjZ7Z++Ab0cRRSwfKNjZnpA2nB/I
vnm+sKvIEe+0MEXD6sQuR5crkqe81HyhWZh4bJX4KDUobjaT9TbJfMyeF+lX075F
GOwXHX/KEvypfFq2DV0j8Ti6w7F6w8A=
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:35 2025 by rpki-client