Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8cc60e7-2c23-30b0-9f90-4ad895e53c7b.roa
File: b8cc60e7-2c23-30b0-9f90-4ad895e53c7b.roa (raw, json)
Hash identifier: W2eR3zqkVrlZThcXe+jKY/twt5PORPwgktIBQ42OEsc=
Subject key identifier: BE:F6:EE:C2:47:08:7F:1F:35:2D:49:67:22:34:F9:7F:B2:BC:D7:44
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584640F6FB494DDB55B48BAB1540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8cc60e7-2c23-30b0-9f90-4ad895e53c7b.roa
Signing time: Tue 18 Jun 2024 17:02:23 +0000
ROA not before: Tue 18 Jun 2024 17:02:23 +0000
ROA not after: Mon 16 Sep 2024 17:02:23 +0000
asID: 834
IP address blocks: 23.26.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:40:f6:fb:49:4d:db:55:b4:8b:ab:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 18 17:02:23 2024 GMT
Not After : Sep 16 17:02:23 2024 GMT
Subject: CN=02c2b9cc-45c3-49fc-8b88-2f321bcbf7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:8b:f1:d6:60:39:f3:92:96:be:3d:ae:dc:
b9:bd:95:b6:24:fc:fb:c9:c8:0d:de:3c:44:b7:54:
e6:cb:94:02:c0:6c:9c:c8:cc:d8:1e:80:57:8c:bc:
2b:5d:8c:72:9f:37:9e:5b:18:ef:35:85:6e:6a:38:
a4:e8:e9:fa:8b:71:bd:96:a4:d7:48:ad:b5:11:1c:
82:dc:ae:a0:e5:a4:df:4c:1e:fa:da:ae:91:e8:e9:
11:6f:13:0e:21:d7:33:bc:12:60:7c:67:48:3d:6d:
71:cc:3c:9c:33:90:22:83:6d:5f:5d:52:df:57:89:
dd:6c:cd:e6:fd:31:77:ff:0d:08:06:a5:a7:51:35:
dd:b8:fb:20:71:bd:17:31:6e:93:a2:81:20:b3:87:
13:ca:33:00:53:ec:ff:19:2f:4f:3c:73:79:41:b2:
25:0b:c7:84:55:8d:6c:12:b5:5e:5f:72:e1:1c:7d:
c6:98:40:20:ea:00:9d:91:d5:4f:d5:a8:b9:47:3e:
0b:73:5d:40:28:3f:59:89:d7:12:f0:86:42:bc:f9:
ea:84:83:e4:30:24:4d:13:f2:25:cd:66:ba:53:96:
f5:18:9f:c1:84:47:1d:c7:78:14:6f:2d:b1:6f:01:
34:e1:dc:f5:a9:78:cf:bc:8c:92:9c:b2:54:07:d6:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:EE:C2:47:08:7F:1F:35:2D:49:67:22:34:F9:7F:B2:BC:D7:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8cc60e7-2c23-30b0-9f90-4ad895e53c7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e3:4e:d2:53:87:4f:82:79:c1:f9:b6:d6:4b:3c:03:fd:a7:
03:c1:1d:8d:1d:18:90:7e:ea:aa:ba:1e:a2:4c:73:d7:14:a0:
09:ba:58:48:39:b0:46:48:2a:a9:c4:a8:f2:68:c8:51:e1:70:
e3:50:2a:7d:2c:4c:bd:2a:67:4b:a2:cc:c3:5d:d3:3f:cc:5a:
00:b1:c0:31:14:fb:a8:7a:a4:b6:80:9e:e3:db:ea:ec:5e:b3:
de:c2:ef:83:2e:86:b5:da:a0:79:b9:47:82:92:fc:0b:cb:da:
c1:93:72:63:09:8c:0f:29:7b:94:80:bd:ae:7b:31:20:3a:1f:
64:eb:47:d6:48:01:dd:f3:73:18:11:49:6f:ef:b6:ce:10:d0:
c7:60:95:f8:5b:6b:63:7a:f9:f0:d7:64:bf:03:e1:4c:d7:44:
9b:a0:9e:1d:6c:95:ba:9e:f7:d6:e9:20:93:23:65:d2:be:6f:
f2:94:81:20:ff:e5:33:8e:a3:f9:87:9d:da:35:f5:a5:eb:9d:
98:08:56:50:96:cd:38:5a:6a:73:94:13:97:c3:15:e9:0f:30:
3c:53:9d:ec:13:68:cf:ea:fc:ee:ac:2c:ac:e9:62:18:89:19:
d7:39:96:33:0e:dd:63:d0:e8:ca:01:6e:6e:a6:c3:02:69:77:
d4:5a:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:15 2025 by rpki-client