Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9966fbb6-7ff5-3cb3-814a-075e2dcc5a67.roa
File: 9966fbb6-7ff5-3cb3-814a-075e2dcc5a67.roa (raw, json)
Hash identifier: zibYDvIjdfU7TppnQpI4saWQIegt+txrkEA83wE7Vug=
Subject key identifier: A8:FC:B3:D6:AD:44:70:EF:FB:99:18:63:D5:30:86:0D:28:AC:84:DF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B05AE32CF143116140A5E900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9966fbb6-7ff5-3cb3-814a-075e2dcc5a67.roa
Signing time: Tue 28 Jan 2025 00:12:17 +0000
ROA not before: Tue 28 Jan 2025 00:12:17 +0000
ROA not after: Sun 27 Apr 2025 23:12:17 +0000
asID: 11798
IP address blocks: 23.26.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:5a:e3:2c:f1:43:11:61:40:a5:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 00:12:17 2025 GMT
Not After : Apr 27 23:12:17 2025 GMT
Subject: CN=440761e5-6011-4701-95ed-2146a3b2e0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bd:e7:e0:50:0c:bc:ab:f8:4b:11:31:c0:d9:
ff:f0:24:26:b3:bf:2c:4d:83:93:4a:fd:69:1a:87:
b5:6f:a4:81:a3:5b:21:b8:8e:c5:72:38:09:79:c1:
19:55:0f:ca:8d:04:48:f2:2f:1a:25:1a:df:94:1e:
18:66:e7:ea:29:ef:11:73:a4:f5:30:a5:4d:f1:51:
48:e0:8e:9f:63:93:88:f5:6f:87:d4:fc:14:18:16:
d3:bb:06:25:c1:ec:c3:56:47:70:69:44:d6:05:5b:
94:98:1b:93:92:78:7a:4e:47:ae:1d:3a:61:af:d5:
21:c0:ba:90:89:28:07:da:22:a9:54:67:48:5e:26:
45:06:bf:3a:14:78:c3:8e:c3:64:2a:20:2a:d7:22:
c3:98:ec:8f:01:21:42:f7:5a:99:3d:1a:c1:a9:19:
c3:8d:67:c1:d4:de:a0:68:87:49:87:7d:e0:3c:58:
0e:84:44:1e:b3:45:9f:2c:23:6e:02:11:66:54:41:
94:01:70:e5:cf:70:1e:83:c3:e2:79:d2:5c:5e:2c:
9c:a5:08:c0:0f:85:e0:39:20:22:eb:ef:c7:90:78:
d8:f3:f4:2a:c4:9f:ce:60:69:59:55:08:0b:44:91:
5a:48:f0:56:56:2a:86:0a:6f:51:ef:ef:5b:8c:95:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FC:B3:D6:AD:44:70:EF:FB:99:18:63:D5:30:86:0D:28:AC:84:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9966fbb6-7ff5-3cb3-814a-075e2dcc5a67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:98:f8:e4:26:8f:3e:f9:54:89:a3:77:69:ad:f9:0c:10:34:
27:15:92:37:d0:b9:6b:bc:34:ec:21:1e:64:27:0e:a9:b1:c7:
59:c1:e6:3f:00:09:85:17:59:99:0c:0e:be:9d:69:cb:42:4c:
a4:96:39:8b:94:c3:79:96:29:04:92:2a:54:9d:c6:78:58:21:
6f:2b:49:9a:13:19:9b:99:2d:f1:43:6e:ef:6d:00:92:1d:7a:
46:96:47:bb:1b:71:44:61:b9:3a:cf:c4:ab:60:3c:5c:25:e8:
4e:08:a0:79:22:3c:d5:92:0f:5e:a3:96:da:57:b9:80:0c:6d:
f5:92:e1:19:5e:8c:49:b2:24:4e:35:4c:31:8e:67:08:86:26:
de:d1:b5:3f:90:08:2b:67:40:48:10:33:51:2c:73:99:77:83:
c8:25:e4:5b:28:7c:7a:cf:f3:cd:48:a2:3a:1a:2b:a9:c7:c7:
89:85:78:bb:13:b2:ab:06:fb:f5:13:66:99:f2:37:ca:c6:f0:
c7:e7:aa:1f:e8:24:b8:1d:ab:4d:87:04:0a:7e:34:70:78:f3:
eb:47:62:8c:94:7a:c3:54:3b:8e:c1:29:4d:3c:ca:62:9d:c9:
6a:3d:e0:30:bb:44:8c:49:64:eb:e7:08:d1:6b:c9:48:9a:c6:
d3:20:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:39:29 2025 by rpki-client