Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b1519c41-fa56-34e4-b53e-5bbdbe5dcd46.roa
File: b1519c41-fa56-34e4-b53e-5bbdbe5dcd46.roa (raw, json)
Hash identifier: mG0/PIv5ERMG3AJh0A0kD2pms4qpRHw6dxqaU0UT/QM=
Subject key identifier: AE:50:BA:19:0F:26:B3:5D:68:0E:D4:D9:B1:E8:EC:84:B2:AA:44:3C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858446C688DAE4F740A58DC7D53C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b1519c41-fa56-34e4-b53e-5bbdbe5dcd46.roa
Signing time: Tue 02 Jan 2024 20:57:06 +0000
ROA not before: Tue 02 Jan 2024 20:57:06 +0000
ROA not after: Mon 01 Apr 2024 19:57:06 +0000
asID: 834
IP address blocks: 23.26.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6c:68:8d:ae:4f:74:0a:58:dc:7d:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 2 20:57:06 2024 GMT
Not After : Apr 1 19:57:06 2024 GMT
Subject: CN=024081e6-7b3c-4113-8c5d-c28a7db35931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:74:80:f5:33:7e:2d:86:bf:00:bf:29:61:22:
2f:16:54:58:ee:2d:16:fe:92:f8:55:13:27:30:63:
66:36:1a:c8:2e:fb:d8:de:40:c9:df:22:b7:e5:66:
3b:ee:d7:94:27:7e:13:86:1d:d9:d5:28:29:f6:98:
5a:0e:d7:c2:94:be:37:ae:ac:9e:c6:8a:aa:42:cc:
7d:f9:af:c0:8f:5f:31:ac:2b:65:16:b2:e8:04:8c:
e8:9d:c5:41:82:93:1f:23:25:8b:f9:84:06:2e:7c:
e2:38:e9:62:37:03:f3:8c:d4:92:00:e1:5f:21:09:
69:c4:e6:19:be:f3:6e:82:2e:e9:9c:27:52:e4:60:
b2:ad:89:10:cb:d9:e2:8f:e1:ca:5d:76:76:b4:26:
ec:f6:46:5f:ec:34:9e:e6:33:b2:3f:d9:eb:6c:b0:
39:6d:d2:dd:85:c2:43:45:56:03:a7:8b:87:26:fd:
4b:6e:ee:62:a8:2a:23:25:70:7f:c4:de:48:c8:70:
a4:c4:98:aa:1a:93:1b:25:2c:e4:28:3b:74:69:33:
e9:9b:4b:01:0d:ec:b6:de:4b:eb:78:63:3b:f7:6f:
95:c6:3f:92:74:34:f6:b4:4d:3e:b9:9b:37:80:e9:
d2:86:1d:0c:52:0e:f9:c7:cb:88:41:56:1f:23:a1:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:50:BA:19:0F:26:B3:5D:68:0E:D4:D9:B1:E8:EC:84:B2:AA:44:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b1519c41-fa56-34e4-b53e-5bbdbe5dcd46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:3f:15:0d:22:97:49:34:a3:35:fe:dd:75:9b:13:b4:60:6b:
73:a6:63:37:e1:a6:53:ef:a7:b4:7e:96:bc:9f:cd:7b:15:36:
e3:b6:90:fc:2f:93:df:99:a0:9d:99:ba:39:76:bd:4d:64:cf:
38:d1:5c:44:e9:ae:31:2f:e5:b5:01:27:24:cc:cf:87:34:75:
48:3b:63:48:22:df:48:8d:b9:09:e8:c7:5a:3a:03:bf:63:4d:
95:70:35:40:0e:b6:9c:21:a0:37:d9:e6:f7:a0:c9:64:36:16:
08:5d:36:62:92:6b:11:8f:dd:01:f9:58:4e:5b:67:40:a0:67:
8c:0c:72:b6:a2:cb:e0:92:a0:44:8b:ca:3e:d2:0e:75:a6:2d:
c1:58:91:49:ec:45:86:97:ea:5f:09:70:1a:52:69:1b:07:4d:
a4:a3:3a:4a:f2:14:80:f0:cf:17:a5:47:2b:eb:07:83:e7:d9:
ab:4d:99:dd:4e:eb:08:11:43:22:16:91:dd:0e:e7:10:1d:b4:
ba:25:8e:6b:34:2e:c6:f3:4a:61:1a:24:c0:30:2b:98:ad:96:
5f:3c:e1:d9:23:8d:3d:10:92:00:98:23:17:7e:ca:be:42:68:
a8:1c:75:54:18:f1:bd:3c:82:33:34:3f:de:74:93:9c:49:a2:
50:b8:ba:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:42 2025 by rpki-client