Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38bf8f60-a04d-34ea-a9d3-e23801d0524b.roa
File: 38bf8f60-a04d-34ea-a9d3-e23801d0524b.roa (raw, json)
Hash identifier: LEE7DQy0pJr0oxTeDN/noppb4R9O9yqL3CViNr4RhnA=
Subject key identifier: 0B:AE:6A:E7:0A:C1:54:0E:E8:88:E3:A0:2B:D5:0F:69:E8:77:79:ED
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584851A58493FD674FBA567D1FC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38bf8f60-a04d-34ea-a9d3-e23801d0524b.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 63801
IP address blocks: 23.26.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:84:93:fd:67:4f:ba:56:7d:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=8bea1bd9-1804-40b7-8d58-f141ff1bd813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:90:62:7b:58:7e:b1:6b:5e:4b:08:05:bd:
2b:e7:04:d5:f8:f9:d2:66:f2:c1:51:ad:75:43:31:
40:07:cd:e4:2b:f0:51:4a:ba:09:5a:57:14:0d:35:
96:30:fa:14:01:d8:b1:5f:bb:6d:27:88:18:c1:41:
0a:ab:36:07:9f:62:47:5c:13:cc:3f:c7:a0:65:4e:
9d:c4:fe:dc:01:7b:e9:d8:9c:c7:51:29:a1:7c:03:
7b:c6:a7:e3:a3:bd:76:05:57:cd:56:e6:d7:f9:2c:
1f:b2:cf:5c:c0:78:5b:2f:62:cf:49:af:ad:59:ab:
1d:5c:16:db:cd:3e:d7:6c:8c:05:14:33:fc:66:c3:
57:4e:08:28:d0:13:14:b5:3d:49:64:05:9a:6e:ac:
56:56:b5:02:04:ce:80:fe:8a:b4:1c:31:a9:cb:fb:
76:76:57:0f:6f:46:1e:c6:54:4f:28:5f:d7:1f:33:
45:d7:b1:23:db:10:2d:15:f1:87:4a:6c:05:9b:a6:
61:4e:2c:9b:d2:f9:8a:8b:fb:59:d4:00:f2:d6:18:
81:04:d1:84:cf:a5:40:00:54:88:95:19:ee:80:f7:
d3:3e:4f:f6:e3:7c:94:47:65:d0:64:a0:85:66:e0:
78:3d:6e:77:b8:50:7d:b3:ca:3e:7b:2f:3b:8f:79:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AE:6A:E7:0A:C1:54:0E:E8:88:E3:A0:2B:D5:0F:69:E8:77:79:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38bf8f60-a04d-34ea-a9d3-e23801d0524b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:fc:5d:48:51:f7:6f:9c:2a:1a:98:17:a3:cd:b3:1f:e8:c2:
ff:fc:9a:c7:13:26:f5:e9:8a:77:45:c3:a5:e2:7f:38:92:76:
cd:93:f8:57:3a:3b:47:10:d4:52:d0:a6:8b:d9:fb:ff:a0:63:
70:96:86:ca:08:e7:db:7b:8a:c3:d5:27:dc:28:f4:4b:c4:3c:
e0:02:85:6e:f0:d6:65:30:e1:48:cc:4f:ef:2f:78:dc:5e:8c:
6c:6a:5a:41:3d:36:13:8b:9c:25:0c:66:c1:d4:b0:c8:44:71:
13:22:d1:69:71:bb:92:5f:8f:a4:09:c0:39:f7:52:f8:f3:be:
73:15:f8:db:e2:d6:08:53:a7:d7:20:27:23:50:27:6f:f1:be:
c7:5a:88:7f:1d:78:39:b4:ca:11:4d:76:41:55:8e:d5:93:f1:
bc:86:2b:53:54:a0:2f:b8:d1:92:80:2c:5a:5a:41:7f:78:e6:
ad:86:db:a6:4c:74:8f:63:ec:cb:54:e4:18:cd:9d:7b:b0:d4:
3e:9f:a2:56:6d:83:da:13:91:dc:c2:6a:ed:89:52:ae:7b:6d:
38:57:30:28:10:92:11:07:6d:d9:c8:4d:76:98:35:f5:d9:41:
9f:d6:fb:de:c7:1f:65:b0:21:7b:20:89:bd:ba:26:a5:b1:9b:
ad:4e:52:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpYST/WdPulZ9H8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
OGJlYTFiZDktMTgwNC00MGI3LThkNTgtZjE0MWZmMWJkODEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7qQYntYfrFrXksIBb0r5wTV+PnSZvLBUa11
QzFAB83kK/BRSroJWlcUDTWWMPoUAdixX7ttJ4gYwUEKqzYHn2JHXBPMP8egZU6d
xP7cAXvp2JzHUSmhfAN7xqfjo712BVfNVubX+Swfss9cwHhbL2LPSa+tWasdXBbb
zT7XbIwFFDP8ZsNXTggo0BMUtT1JZAWabqxWVrUCBM6A/oq0HDGpy/t2dlcPb0Ye
xlRPKF/XHzNF17Ej2xAtFfGHSmwFm6ZhTiyb0vmKi/tZ1ADy1hiBBNGEz6VAAFSI
lRnugPfTPk/243yUR2XQZKCFZuB4PW53uFB9s8o+ey87j3nKEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuuaucKwVQO6IjjoCvVD2nod3ntMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzhiZjhmNjAtYTA0ZC0z
NGVhLWE5ZDMtZTIzODAxZDA1MjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAP8XUhR92+cKhqYF6PNsx/owv/8mscTJvXpindFw6XifziSds2T+Fc6
O0cQ1FLQpovZ+/+gY3CWhsoI59t7isPVJ9wo9EvEPOAChW7w1mUw4UjMT+8veNxe
jGxqWkE9NhOLnCUMZsHUsMhEcRMi0Wlxu5Jfj6QJwDn3UvjzvnMV+Nvi1ghTp9cg
JyNQJ2/xvsdaiH8deDm0yhFNdkFVjtWT8byGK1NUoC+40ZKALFpaQX945q2G26ZM
dI9j7MtU5BjNnXuw1D6folZtg9oTkdzCau2JUq57bThXMCgQkhEHbdnITXaYNfXZ
QZ/W+97HH2WwIXsgib26JqWxm61OUhg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:51 2025 by rpki-client