Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/acbd2714-781d-34f6-ac80-e66dbabd9104.roa
File: acbd2714-781d-34f6-ac80-e66dbabd9104.roa (raw, json)
Hash identifier: s8wT8g3A9bpdVHrNvOowqyYma1G2HJ/4I3xb+mjgipU=
Subject key identifier: 04:64:DD:E7:3A:AD:F5:82:10:08:10:0C:14:2D:C6:20:E1:65:7F:AE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C8FF827907FE4BEB3F14DC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/acbd2714-781d-34f6-ac80-e66dbabd9104.roa
Signing time: Wed 05 Feb 2025 20:03:23 +0000
ROA not before: Wed 05 Feb 2025 20:03:23 +0000
ROA not after: Tue 06 May 2025 19:03:23 +0000
asID: 11798
IP address blocks: 23.26.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:ff:82:79:07:fe:4b:eb:3f:14:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 5 20:03:23 2025 GMT
Not After : May 6 19:03:23 2025 GMT
Subject: CN=581fac0f-37d2-494b-bd02-83d2722421dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:2b:c5:a8:09:de:45:6f:35:29:31:64:2d:
f8:60:a6:a1:3b:6b:a2:6a:c4:d9:04:9b:91:5c:84:
f7:5b:d7:47:12:ec:cc:98:39:50:d2:96:12:72:3f:
f8:49:0a:57:4a:35:d8:56:24:e2:7e:6d:7f:d1:8f:
f8:bf:38:52:ab:01:e9:a8:4e:86:3c:c2:ab:87:8d:
62:20:98:de:41:f6:d7:b2:b0:19:b1:d1:ef:60:fc:
d7:15:ab:90:36:9b:d3:6f:55:81:cb:40:36:30:e2:
f9:49:7c:5d:f8:dc:25:88:f3:f8:c4:21:95:7a:7c:
81:81:89:43:3a:b7:a0:e7:97:44:a0:4e:20:64:18:
f5:fe:d7:6d:4b:4f:f8:00:50:ac:4a:c1:ef:84:0b:
50:b7:c1:bc:c7:68:1c:e9:4b:08:ba:36:e1:bc:44:
15:79:48:d9:0e:29:13:d0:21:18:8f:9a:ca:4f:6d:
35:1a:4f:5e:87:32:2f:5c:98:4b:df:73:4a:4f:38:
99:39:91:28:bc:09:af:95:7f:cd:4c:d8:25:b7:18:
33:6d:03:ad:5a:24:3c:53:7c:36:8b:6f:9a:1d:7e:
ae:21:ac:60:30:5d:61:27:8b:7d:0d:20:06:dd:94:
7a:76:8a:62:02:95:3d:f4:4c:28:66:c5:71:11:97:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:64:DD:E7:3A:AD:F5:82:10:08:10:0C:14:2D:C6:20:E1:65:7F:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/acbd2714-781d-34f6-ac80-e66dbabd9104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:fd:dc:6c:5d:42:a3:01:db:2b:3f:de:1a:05:2f:8e:e8:d6:
f6:90:e0:08:55:25:f9:4c:d6:35:be:32:fd:f6:91:7f:f5:31:
4a:80:ed:7b:6f:3f:4b:e0:46:71:22:ca:80:05:b8:d7:88:27:
3e:23:e1:f0:a9:2f:53:9b:3d:0f:52:99:e1:bf:b7:71:d6:da:
3d:91:93:e7:76:fc:d2:b8:09:92:7e:5a:df:64:b3:3b:24:24:
ef:74:99:32:94:3c:75:b5:62:4e:1c:c7:8d:82:59:6b:de:8b:
1b:0c:18:b9:d5:a9:05:ca:32:94:b3:2a:53:10:79:4e:49:33:
4a:0e:01:f2:17:e7:85:a6:43:04:d3:c8:78:bc:49:11:df:e6:
f0:26:2d:c0:f2:f1:83:f6:94:a5:f7:cf:95:de:b5:7e:55:07:
12:54:de:e2:56:af:58:d4:e5:f4:2f:74:db:9f:57:6b:e6:d5:
b7:91:2e:a8:7e:4b:48:ef:0e:9e:21:4c:f5:30:f1:83:72:d4:
18:3b:2c:56:ee:af:10:2b:d5:6f:92:cf:59:17:75:3e:b8:00:
82:be:94:83:96:a2:82:32:c4:a2:2b:e0:f9:bd:76:55:ba:08:
7a:60:9b:ec:67:2c:5c:06:85:1f:7f:10:95:2c:ff:b8:9f:f6:
d8:3b:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:25 2025 by rpki-client