Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b342c66-36fb-3b27-906d-a5340679a00d.roa
File: 1b342c66-36fb-3b27-906d-a5340679a00d.roa (raw, json)
Hash identifier: TZxK9ROCW9l6mkjFZL0tr+5G42ARGvZdyJDpE6RhwZ0=
Subject key identifier: D5:AC:03:73:0A:11:8F:81:81:0D:62:9E:13:86:81:6F:EA:F7:2B:03
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A5FA785B1FBACE95B4860
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b342c66-36fb-3b27-906d-a5340679a00d.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 212238
IP address blocks: 23.26.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:5f:a7:85:b1:fb:ac:e9:5b:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=90c4240a-7bea-4c73-8399-f93ededc62f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:8a:f7:e9:c2:dc:6c:d6:54:50:24:df:cb:
4e:f0:42:1e:f7:4d:47:84:63:8c:cb:b2:20:6a:41:
5f:2c:ae:31:76:21:75:11:18:bb:e5:39:e7:bf:1c:
ce:64:5b:0f:2b:e3:6d:ae:d8:21:f6:8f:f1:a3:b8:
ce:bd:dd:c7:8f:d5:d9:14:2c:1e:78:ad:c6:0e:b9:
fa:10:63:09:6a:80:f8:d6:6a:11:14:e8:75:cb:0e:
ad:7b:75:62:aa:ac:a5:5b:ef:54:21:b9:8d:84:d0:
e5:de:23:0c:a6:24:b1:c8:13:0c:00:21:77:25:58:
64:3f:f7:57:cd:12:70:fe:01:6f:35:1c:da:d3:05:
6a:80:78:87:fb:a9:db:9a:25:f0:c5:3d:38:fa:9b:
47:9e:cd:ac:9d:7b:ca:9b:81:20:3d:e6:bf:ce:d2:
30:7f:44:20:82:f8:08:ba:59:17:ea:b6:1b:ef:1b:
8b:de:9b:98:3d:ff:40:cf:75:f7:8b:84:69:6d:66:
2b:6e:86:96:08:35:ce:a7:60:7e:0d:5b:e9:97:29:
86:1a:4b:7f:f4:51:ac:11:9f:99:d9:0a:fc:e7:5b:
eb:aa:b7:56:ea:7e:ae:48:bd:7b:11:e2:94:fc:2d:
4f:86:3a:dc:87:3f:71:6c:6e:af:15:e4:e6:b3:35:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:03:73:0A:11:8F:81:81:0D:62:9E:13:86:81:6F:EA:F7:2B:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b342c66-36fb-3b27-906d-a5340679a00d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:fb:30:5b:99:9e:0d:3e:9d:3c:6d:38:f7:54:5f:79:3a:cf:
02:b4:ca:62:94:f5:fa:07:dc:b6:59:c8:8b:77:13:0a:fd:c9:
74:f3:c2:67:f6:60:f1:78:05:cf:e0:5f:60:a5:49:24:9e:2d:
45:c1:f9:9c:01:3d:ff:c6:6d:35:db:9c:81:19:62:b7:8e:52:
c0:c0:cc:38:05:30:90:fe:01:9c:8b:c3:f7:a4:62:1b:77:39:
e3:9a:d2:79:33:15:0d:03:ed:e2:ee:9e:3f:cd:c1:cd:16:64:
8c:d1:24:ed:9b:d7:b0:5f:e2:8e:2d:d2:45:77:fa:81:7d:7a:
2c:52:2f:43:a9:87:8a:73:b1:35:c2:98:65:9e:7e:dc:4e:b8:
9e:76:f4:e7:3c:58:ed:01:20:6f:41:a1:1e:3b:67:5a:f4:4d:
76:b2:fe:37:00:9c:0f:01:01:d5:04:fe:34:7a:5d:bb:1d:95:
b6:78:05:64:3a:30:27:4d:1a:14:6a:30:02:ca:8b:64:d1:d4:
1b:b7:75:b8:1e:69:ec:9e:d8:61:72:c4:f6:38:fe:a8:4e:21:
ce:8a:24:50:b1:37:bf:1f:c6:7e:c5:a7:96:67:bc:69:60:92:
c7:04:88:d6:9b:b3:e6:34:a0:ad:a3:fb:80:31:fb:0d:e6:6f:
67:54:59:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaXCl+nhbH7rOlbSGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDcxOTEzMDAzNVoXDTI0MTAxNzEzMDAzNVowLzEtMCsGA1UEAxMk
OTBjNDI0MGEtN2JlYS00YzczLTgzOTktZjkzZWRlZGM2MmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OCK9+nC3GzWVFAk38tO8EIe901HhGOMy7Ig
akFfLK4xdiF1ERi75TnnvxzOZFsPK+Ntrtgh9o/xo7jOvd3Hj9XZFCweeK3GDrn6
EGMJaoD41moRFOh1yw6te3ViqqylW+9UIbmNhNDl3iMMpiSxyBMMACF3JVhkP/dX
zRJw/gFvNRza0wVqgHiH+6nbmiXwxT04+ptHns2snXvKm4EgPea/ztIwf0QggvgI
ulkX6rYb7xuL3puYPf9Az3X3i4RpbWYrboaWCDXOp2B+DVvplymGGkt/9FGsEZ+Z
2Qr851vrqrdW6n6uSL17EeKU/C1Phjrchz9xbG6vFeTmszXaAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWsA3MKEY+BgQ1inhOGgW/q9ysDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWIzNDJjNjYtMzZmYi0z
YjI3LTkwNmQtYTUzNDA2NzlhMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxohMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAED7MFuZng0+nTxtOPdUX3k6zwK0ymKU9foH3LZZyIt3Ewr9yXTzwmf2
YPF4Bc/gX2ClSSSeLUXB+ZwBPf/GbTXbnIEZYreOUsDAzDgFMJD+AZyLw/ekYht3
OeOa0nkzFQ0D7eLunj/Nwc0WZIzRJO2b17Bf4o4t0kV3+oF9eixSL0Oph4pzsTXC
mGWeftxOuJ529Oc8WO0BIG9BoR47Z1r0TXay/jcAnA8BAdUE/jR6XbsdlbZ4BWQ6
MCdNGhRqMALKi2TR1Bu3dbgeaeye2GFyxPY4/qhOIc6KJFCxN78fxn7Fp5ZnvGlg
kscEiNabs+Y0oK2j+4Ax+w3mb2dUWR4=
-----END CERTIFICATE-----
Generated at Sun May 11 13:41:12 2025 by rpki-client