Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1cf8013-dbdd-3836-ae8a-c3527ddfeca9.roa
File: c1cf8013-dbdd-3836-ae8a-c3527ddfeca9.roa (raw, json)
Hash identifier: wxGBxOL0UVwDVd9LQ+Zh7SkD6mXGB+qa8nhov/7sXks=
Subject key identifier: 10:C5:94:B2:20:60:C6:65:3B:8D:B2:A5:FC:7D:50:3D:02:8C:46:6B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843D54AFA0BABCDF9587394FC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1cf8013-dbdd-3836-ae8a-c3527ddfeca9.roa
Signing time: Thu 09 Nov 2023 17:50:27 +0000
ROA not before: Thu 09 Nov 2023 17:50:27 +0000
ROA not after: Wed 07 Feb 2024 17:50:27 +0000
asID: 11798
IP address blocks: 23.26.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d5:4a:fa:0b:ab:cd:f9:58:73:94:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 9 17:50:27 2023 GMT
Not After : Feb 7 17:50:27 2024 GMT
Subject: CN=90503e7a-6ca7-481b-9223-8244ec461d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:ef:5d:aa:0d:29:87:7f:42:56:47:6b:49:
1f:b1:56:9e:b3:44:be:b2:b8:bf:a4:ef:65:43:6c:
2a:3d:49:84:0b:f1:bd:d3:f2:4d:9e:0e:95:e5:2d:
4e:af:d3:4a:87:3b:4e:eb:5f:b8:3d:ce:e6:05:96:
17:2c:44:a2:00:f7:c5:69:97:9f:dd:fc:31:30:07:
08:b6:68:36:95:57:76:96:ba:6b:11:c2:92:7a:c7:
5a:1c:44:9f:b7:c3:4a:4b:79:36:19:ee:7c:2d:91:
4c:ec:ad:f7:21:70:60:ad:e9:4a:a9:05:7e:c7:ec:
af:9b:6e:96:e6:bb:a7:95:93:0e:db:af:13:dd:44:
0f:ef:70:09:be:78:68:6a:64:9f:6b:8c:1c:82:da:
02:63:1e:f2:fb:0b:aa:bb:37:39:0a:17:ce:6b:a1:
62:fd:cc:a6:82:0f:eb:6b:b9:c7:68:32:62:c0:8d:
b9:f1:2a:68:8b:e2:1a:c5:d1:15:22:47:02:39:16:
06:3c:b1:a7:9d:53:41:56:28:90:29:a5:4a:35:d5:
54:cf:38:90:db:ac:59:0d:e5:ad:1d:c9:87:b5:33:
cc:57:3f:ab:28:f6:eb:f4:91:f9:e8:ae:06:7e:b4:
36:87:8d:a1:ae:59:e5:17:1a:6c:e4:60:4c:b0:d1:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C5:94:B2:20:60:C6:65:3B:8D:B2:A5:FC:7D:50:3D:02:8C:46:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1cf8013-dbdd-3836-ae8a-c3527ddfeca9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:49:0d:66:2f:b1:a1:13:44:09:52:04:9a:21:1b:3d:11:1c:
eb:fb:3a:84:a2:00:98:a2:a7:b9:73:7c:4c:fd:69:30:f5:01:
52:52:4e:eb:18:22:49:74:36:0e:c0:dc:7d:68:ba:de:ca:77:
f3:c2:8a:21:f7:7c:7c:f1:8a:a6:2b:4c:b0:e0:1d:18:24:1f:
66:e3:e4:90:33:97:37:8f:21:80:97:c5:77:31:9b:fe:2f:df:
5e:31:2b:c8:9d:7a:e3:72:b5:e2:ed:e6:41:3b:58:7d:96:fb:
27:f6:4b:fd:4f:ef:70:12:ab:ac:cc:a5:4f:3b:b6:33:c6:de:
ee:19:fb:29:e8:81:9c:d5:6d:47:70:e6:04:ae:f9:0b:ab:63:
55:89:2b:a9:c1:7c:a9:39:00:46:b8:7a:e2:08:51:de:fc:70:
89:0a:7c:ba:dc:ee:7d:96:33:40:ff:61:74:6a:24:db:7b:2c:
74:87:3e:00:3c:82:92:ce:23:c3:33:a5:b7:24:ec:c7:96:2c:
d3:f6:42:3d:d1:e0:ca:5a:90:45:b7:01:78:2a:df:77:90:90:
c4:77:11:16:c0:4e:31:f6:27:bf:2b:a8:59:d8:92:3d:a2:e2:
c9:3d:54:c2:28:c2:a1:2f:b9:84:2a:95:c7:c3:bc:7c:79:37:
02:10:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:34 2025 by rpki-client