Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bbfe3d34-e1cc-3706-8011-9b1e2dad31c1.roa
File: bbfe3d34-e1cc-3706-8011-9b1e2dad31c1.roa (raw, json)
Hash identifier: RjjDTRhawM+9pIniOBjcjH2xBbhUMj27u9gv35JnALk=
Subject key identifier: CB:31:7B:1C:17:9C:F3:10:13:96:45:77:A3:AE:BE:7F:95:FF:2D:C2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583D68D2EBDC5B6BC79C4F594D88
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bbfe3d34-e1cc-3706-8011-9b1e2dad31c1.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Tue 02 Jul 2024 04:00:00 +0000
asID: 49999
IP address blocks: 23.26.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:68:d2:eb:dc:5b:6b:c7:9c:4f:59:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Jul 2 04:00:00 2024 GMT
Subject: CN=4574cd62-29fe-433f-ad74-8938e5c72a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:db:8b:54:dd:64:7c:58:9c:29:29:9a:a9:
1d:fa:65:57:50:5b:66:52:32:e1:87:ae:8f:5a:10:
8a:97:ca:de:06:25:a3:18:8e:75:e0:3a:01:16:29:
69:f1:8a:61:ef:ac:a9:f5:40:31:a7:40:a4:01:3b:
a1:9d:4b:74:52:03:c8:75:38:f6:c6:d5:58:a5:a1:
7c:96:36:89:0a:5d:a5:08:a5:cb:ce:e5:7a:83:73:
f6:06:ee:b8:8a:e9:bf:01:e6:49:ad:08:7b:55:0a:
13:70:b1:d1:78:9f:e5:02:82:19:ec:6c:c4:b3:f2:
19:86:d9:57:2d:3f:77:07:5f:bb:3c:49:88:0f:3a:
92:42:d6:af:a0:43:fe:93:a7:48:b3:7b:b1:ae:36:
da:a8:82:0d:96:55:7e:b9:1e:86:52:dc:09:c5:40:
48:71:d9:06:ad:0a:7c:5b:f5:a5:b5:11:c0:88:c9:
21:f4:05:bf:82:62:2c:4f:45:c8:44:f8:9c:13:13:
61:39:8f:60:f0:d6:17:b5:cd:d2:6e:09:2f:44:d9:
a5:39:75:eb:f4:b1:48:f6:b8:1d:eb:99:ea:09:86:
58:90:a0:89:63:2f:ff:71:a2:09:8b:5d:e1:11:2c:
62:98:fa:6e:e3:d4:17:e3:c1:a4:5e:07:8b:ac:b3:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:7B:1C:17:9C:F3:10:13:96:45:77:A3:AE:BE:7F:95:FF:2D:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bbfe3d34-e1cc-3706-8011-9b1e2dad31c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:1f:38:29:16:13:fe:7b:2e:9f:90:fe:95:48:a5:51:31:85:
34:0f:2e:07:b2:ff:10:b0:47:88:4b:37:ae:b6:99:b1:bc:cd:
a6:a8:7d:3e:b2:f5:a1:b2:4b:80:5e:07:61:f3:d6:81:73:fc:
7a:c1:0c:56:19:56:ff:c7:34:51:3e:2d:80:93:2a:12:79:39:
13:c6:55:86:10:ab:e1:35:1f:08:c0:28:f9:e8:78:00:4c:fb:
ae:89:9a:30:14:6e:5b:a1:08:67:bb:65:ae:09:f6:2d:b4:27:
ee:dc:08:3e:65:14:f2:5c:d4:b3:2b:dc:7c:58:29:20:ac:3a:
61:09:bc:3a:ab:d5:8e:40:02:f8:f5:75:20:33:f2:db:68:40:
2a:89:a8:56:68:8a:65:53:ba:97:ba:13:25:e9:e2:39:63:ad:
f1:6b:cb:10:a6:bf:bb:54:4d:0d:4f:28:34:ac:42:da:8b:0d:
e5:a1:c0:80:ac:d2:51:0b:1c:7e:c3:3c:e0:fa:06:04:98:14:
78:88:c0:79:44:47:64:a6:3c:e7:0e:79:3a:db:97:26:a6:cc:
31:c0:5d:f7:b4:6e:ee:d4:ce:b5:ca:8b:32:b9:2f:33:aa:9f:
8a:0a:8b:d3:90:25:1e:76:2e:3c:20:57:37:0b:35:09:07:e2:
2e:f8:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:49:54 2025 by rpki-client