Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18f26c8f-3cab-3e5f-b965-910653d41ba0.roa
File: 18f26c8f-3cab-3e5f-b965-910653d41ba0.roa (raw, json)
Hash identifier: EiTccpFsVlAChHJ1DTFpLCDZeTqFJXAqk/Q6YadSPYY=
Subject key identifier: F7:BE:5A:E0:B0:90:FF:A5:C1:96:2E:ED:35:95:8A:78:37:3D:9F:D7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A619192A672E2F2A3BB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18f26c8f-3cab-3e5f-b965-910653d41ba0.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 212238
IP address blocks: 23.26.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:61:91:92:a6:72:e2:f2:a3:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=dd186375-1da4-472d-8810-f3685341b7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:5f:c2:dc:30:24:98:29:af:34:b2:95:a6:
fc:c5:15:0a:f4:85:f7:d6:42:eb:06:74:30:ec:9e:
c0:0f:08:55:03:a6:c4:21:95:db:dc:5f:bb:25:f0:
b0:2d:a1:12:10:7e:de:d3:74:57:65:85:e6:16:e3:
04:c2:a8:ff:1d:f2:68:4d:8e:8c:01:20:00:49:41:
39:7c:02:db:d8:cd:a9:28:9b:8b:6c:aa:98:5d:e7:
1b:b3:d4:f5:d6:51:ba:03:85:74:7a:2c:93:ec:7a:
ee:80:5d:54:75:68:da:47:20:f4:72:f9:17:13:77:
87:97:5f:b9:b7:09:b5:04:25:87:ac:41:5c:38:a9:
20:05:e0:fc:04:f3:2f:a4:0b:35:de:8c:62:6d:b3:
d5:45:23:54:09:4a:b9:cb:46:35:5c:68:bd:e3:bd:
94:17:55:d8:18:a2:24:5f:f1:c6:7c:60:43:f0:28:
cd:c6:26:80:9b:ab:c1:af:f2:53:d1:23:5f:4f:ba:
fd:d3:15:6a:b2:f7:7a:38:a2:d7:62:ba:58:fb:c2:
0f:64:db:66:20:e9:c4:ca:91:46:c3:ff:a2:93:db:
22:9c:b3:3a:f3:3b:3a:e5:f4:90:91:05:31:83:88:
c8:71:44:c5:0a:ff:82:d3:cb:aa:ed:fe:84:27:e3:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:5A:E0:B0:90:FF:A5:C1:96:2E:ED:35:95:8A:78:37:3D:9F:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18f26c8f-3cab-3e5f-b965-910653d41ba0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:87:8a:cb:2c:d4:25:88:e5:62:b3:15:bd:e6:fe:81:6a:fd:
02:f6:5f:d1:a7:d9:07:8e:da:80:b4:a9:b6:07:ea:11:8f:a7:
86:bb:c6:35:7b:e8:8b:8b:bf:35:10:4c:4a:c9:fc:88:70:65:
d8:f2:0a:2e:57:af:3a:d0:03:28:b4:5f:4f:f3:dc:09:f6:c5:
54:1a:45:10:70:26:0e:08:96:9d:1a:94:5e:71:04:e3:10:4b:
48:6c:14:b4:aa:9e:33:43:97:57:34:54:69:46:5e:58:6b:2d:
ba:45:32:59:d9:4c:c5:61:a0:10:de:30:0b:8b:88:6d:b4:ae:
fa:b5:d6:03:e1:f2:bc:f9:b8:92:be:f4:d1:35:91:eb:46:f4:
5a:ea:c5:62:69:1f:03:59:9d:1e:cb:36:d7:d6:25:bc:25:9f:
0f:b4:61:e7:78:f0:82:fd:c4:74:1a:f0:e1:62:87:37:7e:b7:
83:a2:0e:56:6c:d3:6e:d3:cb:db:f4:ed:e8:b0:56:91:77:c6:
7f:33:39:19:70:fe:39:d3:0b:cf:f7:fa:44:3b:e3:af:44:cb:
a2:21:2d:a9:b6:1f:0a:9a:f7:36:57:16:e4:e3:aa:be:45:8b:
76:e8:9c:65:17:f0:3f:9b:12:47:8b:79:e3:b5:a6:49:5f:9c:
5a:5a:c5:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaXCmGRkqZy4vKjuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDcxOTEzMDAzNVoXDTI0MTAxNzEzMDAzNVowLzEtMCsGA1UEAxMk
ZGQxODYzNzUtMWRhNC00NzJkLTg4MTAtZjM2ODUzNDFiN2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQdfwtwwJJgprzSylab8xRUK9IX31kLrBnQw
7J7ADwhVA6bEIZXb3F+7JfCwLaESEH7e03RXZYXmFuMEwqj/HfJoTY6MASAASUE5
fALb2M2pKJuLbKqYXecbs9T11lG6A4V0eiyT7HrugF1UdWjaRyD0cvkXE3eHl1+5
twm1BCWHrEFcOKkgBeD8BPMvpAs13oxibbPVRSNUCUq5y0Y1XGi9472UF1XYGKIk
X/HGfGBD8CjNxiaAm6vBr/JT0SNfT7r90xVqsvd6OKLXYrpY+8IPZNtmIOnEypFG
w/+ik9sinLM68zs65fSQkQUxg4jIcUTFCv+C08uq7f6EJ+NA7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPe+WuCwkP+lwZYu7TWVing3PZ/XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMThmMjZjOGYtM2NhYi0z
ZTVmLWI5NjUtOTEwNjUzZDQxYmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCHisss1CWI5WKzFb3m/oFq/QL2X9Gn2QeO2oC0qbYH6hGPp4a7xjV7
6IuLvzUQTErJ/IhwZdjyCi5XrzrQAyi0X0/z3An2xVQaRRBwJg4Ilp0alF5xBOMQ
S0hsFLSqnjNDl1c0VGlGXlhrLbpFMlnZTMVhoBDeMAuLiG20rvq11gPh8rz5uJK+
9NE1ketG9FrqxWJpHwNZnR7LNtfWJbwlnw+0Yed48IL9xHQa8OFihzd+t4OiDlZs
027Ty9v07eiwVpF3xn8zORlw/jnTC8/3+kQ7469Ey6IhLam2Hwqa9zZXFuTjqr5F
i3bonGUX8D+bEkeLeeO1pklfnFpaxeM=
-----END CERTIFICATE-----
Generated at Sun May 11 13:56:11 2025 by rpki-client