Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1d1966c-0c5b-3e9d-8a6f-e9ec3563a8d2.roa
File: a1d1966c-0c5b-3e9d-8a6f-e9ec3563a8d2.roa (raw, json)
Hash identifier: eJgcvd7lkh5NihaZUUn1JcnRf3M+zkuihX5fhahHb7k=
Subject key identifier: A5:56:95:D6:7D:15:C4:2E:50:12:D1:E5:75:29:3A:54:D7:F6:9A:D0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846DD2A177BF870097706963F90
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1d1966c-0c5b-3e9d-8a6f-e9ec3563a8d2.roa
Signing time: Tue 13 Aug 2024 15:51:28 +0000
ROA not before: Tue 13 Aug 2024 15:51:28 +0000
ROA not after: Mon 11 Nov 2024 16:51:28 +0000
asID: 834
IP address blocks: 23.26.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:dd:2a:17:7b:f8:70:09:77:06:96:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 13 15:51:28 2024 GMT
Not After : Nov 11 16:51:28 2024 GMT
Subject: CN=a049afdb-1814-4fdf-a428-81e79582590c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:d3:e1:44:60:5e:fe:ff:d4:fa:5b:d8:13:
20:af:45:68:ec:e7:be:b6:fa:51:25:02:38:a3:cf:
0c:6d:89:31:7c:40:87:d9:de:01:06:20:96:36:8f:
d3:0a:b6:13:19:1f:53:c2:1e:5d:77:bf:0e:97:34:
7a:0d:87:17:27:71:a8:76:01:37:95:8b:89:32:6e:
7a:be:5c:1a:60:33:9f:9a:c7:0e:48:70:0c:e5:4a:
a0:d5:f6:89:9a:c4:d4:67:56:57:14:2d:b3:25:cd:
0f:f3:36:a9:b7:e1:85:7b:8c:0b:93:20:dd:61:22:
72:a2:43:81:10:8a:5f:01:19:97:8d:9b:94:a9:04:
7a:23:7d:41:c0:18:3e:ec:21:d6:bc:e5:ea:4b:5b:
9b:11:c5:b2:f5:7a:28:3f:87:7b:34:02:ed:78:1a:
81:8b:b3:56:ea:e7:3c:e1:75:29:46:c1:da:c0:ea:
d0:48:2b:6a:98:a5:05:d4:25:9d:b3:6f:d8:50:b6:
99:f6:0f:ad:4b:57:69:ff:f0:6d:35:11:20:82:74:
6f:4b:3e:79:55:0b:2f:66:27:48:66:73:d9:af:c4:
68:47:29:c1:06:74:e3:9c:0d:b5:82:19:41:fa:f3:
e5:8b:61:2a:d6:65:1d:78:01:df:76:7a:94:12:d3:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:56:95:D6:7D:15:C4:2E:50:12:D1:E5:75:29:3A:54:D7:F6:9A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1d1966c-0c5b-3e9d-8a6f-e9ec3563a8d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f3:69:e6:ae:ed:4c:b4:26:c1:03:d1:ed:db:07:d6:cb:33:
4c:ca:aa:00:4b:ec:c2:3b:12:cc:6f:05:c9:26:fc:5f:26:be:
e6:86:ca:1b:98:43:be:da:b9:f4:ab:b9:0e:46:25:26:dc:bd:
b5:53:aa:3b:4b:43:56:e5:5b:08:5d:a4:2b:cf:84:54:c6:7e:
33:d6:47:96:6a:67:c6:f1:7c:65:ca:86:9b:90:18:1c:e7:c1:
c5:f0:38:df:6f:c1:18:f9:03:c3:0c:3f:22:a9:31:75:01:5b:
ec:d3:b9:35:c1:ff:24:06:af:12:5d:11:44:03:19:ae:78:53:
71:18:be:e6:43:41:0a:21:6d:ee:66:46:58:30:a6:59:95:12:
3e:eb:33:12:fc:8c:6e:ab:a5:4e:7f:13:75:ce:a9:7d:1f:d8:
fd:c6:6c:ac:98:56:2b:56:17:c7:22:d0:f4:e7:aa:51:c4:06:
8d:21:f9:4d:c2:c0:30:74:50:de:dd:57:a1:b4:30:e7:ac:35:
5c:45:22:61:83:a5:a5:00:a4:84:1b:6e:d0:e1:80:af:f1:00:
7c:f4:52:21:0b:40:aa:8f:06:dc:b7:1a:18:15:0f:ea:83:8d:
02:79:89:9a:bb:7d:cc:e8:b4:84:74:34:50:bb:df:7d:8a:3d:
cf:b4:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:45 2025 by rpki-client