Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfb0412b-3ea7-399b-b93c-444743fbc0f4.roa
File: bfb0412b-3ea7-399b-b93c-444743fbc0f4.roa (raw, json)
Hash identifier: KfKOcLBm2EbZh5QuU229B56Mv1kQN0hgKo7Yf7wkmmQ=
Subject key identifier: 5A:DC:61:08:36:48:72:AD:3D:8D:34:0B:29:EE:EE:C3:AA:72:ED:25
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843C29594B1A1D6BACC06AA9780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfb0412b-3ea7-399b-b93c-444743fbc0f4.roa
Signing time: Fri 03 Nov 2023 01:00:15 +0000
ROA not before: Fri 03 Nov 2023 01:00:15 +0000
ROA not after: Thu 01 Feb 2024 02:00:15 +0000
asID: 834
IP address blocks: 23.26.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c2:95:94:b1:a1:d6:ba:cc:06:aa:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 3 01:00:15 2023 GMT
Not After : Feb 1 02:00:15 2024 GMT
Subject: CN=9453c852-b275-425f-a92f-18cac66dc1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:5c:c2:64:6c:21:90:ff:ae:64:a2:e1:8e:
3b:4f:f9:37:3a:cb:3c:c2:33:2f:07:9b:cc:c6:06:
f9:fb:8b:18:29:5c:30:d2:c4:d2:25:f8:ec:49:8c:
08:84:81:05:a9:38:94:bd:02:50:47:d1:93:50:56:
ce:04:f8:31:b2:bf:16:a6:1c:ab:fd:4f:e0:c4:aa:
13:f0:7c:e9:6c:bd:aa:d5:b8:6c:ff:d9:1e:a2:6f:
31:af:c6:b5:72:14:dc:97:07:03:24:00:e2:c8:3d:
59:f8:61:c6:16:8d:3c:e5:e5:a9:76:95:8f:3a:cd:
ec:5c:fb:c1:43:06:6a:5c:be:b5:f8:f0:8c:36:d2:
74:51:da:6b:22:fb:94:e2:f7:aa:3e:03:ba:95:17:
c1:a0:f7:2b:98:ad:92:0c:fc:dd:60:3d:59:4b:47:
a7:51:f1:7f:31:93:3c:8f:28:02:f2:f9:76:f5:cb:
0b:1e:65:7a:d8:5b:49:ef:61:5b:b4:52:a0:30:86:
e6:f9:01:1f:8c:ec:af:45:1a:14:a7:2f:f4:6f:5d:
fa:2b:37:5b:2c:5f:66:11:b4:2d:f0:1d:60:2d:61:
26:f0:a2:79:4a:53:9b:38:70:b8:88:b3:86:80:d9:
3e:56:05:48:30:aa:9d:46:12:37:de:2e:54:0f:33:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:61:08:36:48:72:AD:3D:8D:34:0B:29:EE:EE:C3:AA:72:ED:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfb0412b-3ea7-399b-b93c-444743fbc0f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:04:b5:b6:fc:68:ce:34:c3:31:4d:4f:71:58:23:1c:b6:a9:
37:76:fd:cf:f3:31:af:ee:32:ee:86:5c:1f:93:a6:a2:e6:52:
5a:5e:50:bf:2e:51:1b:7a:5f:4d:49:54:33:97:3b:ec:12:45:
4c:5c:a4:ed:de:f9:b9:c3:04:99:35:8b:a0:f9:f0:e4:5e:9a:
3d:dc:6e:f6:05:fd:a5:f3:6f:11:28:69:69:1d:23:d4:38:74:
db:a9:19:58:bf:1a:8d:ae:8d:03:27:85:31:20:5b:e2:89:b1:
fe:8d:66:28:c6:e3:ad:97:e7:d1:2f:59:02:26:83:a8:3b:a5:
bd:24:aa:6c:b0:c0:fb:16:85:85:34:01:8c:4f:30:8f:01:f7:
3c:e9:09:16:e6:79:e6:72:88:c1:98:04:af:38:f1:f3:72:25:
52:92:40:55:c4:70:56:dc:af:ca:9a:d4:13:68:c7:b4:06:2d:
92:83:01:55:4e:13:b1:10:90:c5:1c:11:06:05:62:c2:9f:aa:
82:71:90:95:21:d1:23:ef:0e:47:a0:fe:58:22:27:36:1a:11:
41:f4:87:9b:a4:17:ed:21:57:c8:a2:0d:ad:5f:8f:56:2d:45:
f4:67:a5:9f:c5:e0:63:7c:f3:58:4f:e2:5a:4e:52:5f:65:2f:
1d:1c:b0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:21 2025 by rpki-client