Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/507724db-2397-3234-9cf1-25eb1a37cec9.roa
File: 507724db-2397-3234-9cf1-25eb1a37cec9.roa (raw, json)
Hash identifier: /YSHO8PI30n5KzM+JHOhih4/PJo4VR/tavUU/8gZwPY=
Subject key identifier: 5F:D2:EC:27:F6:FB:0A:62:FC:D2:04:FC:FF:0A:82:54:AA:C1:BE:1A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848CBAFE29CB30AADD6FB6155A8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/507724db-2397-3234-9cf1-25eb1a37cec9.roa
Signing time: Thu 06 Feb 2025 19:10:22 +0000
ROA not before: Thu 06 Feb 2025 19:10:22 +0000
ROA not after: Wed 07 May 2025 18:10:22 +0000
asID: 401152
IP address blocks: 23.26.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:af:e2:9c:b3:0a:ad:d6:fb:61:55:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 6 19:10:22 2025 GMT
Not After : May 7 18:10:22 2025 GMT
Subject: CN=7e8fc66f-d90a-45f8-bb49-6c4c89397cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:b7:8b:a1:e7:b4:82:8b:39:04:43:62:2b:
55:f1:55:a6:52:dd:da:96:72:f9:f9:34:8b:d6:93:
b5:a8:32:02:d9:19:d0:22:d5:65:f2:68:8e:01:ad:
7e:e9:cb:ae:d5:be:65:98:a7:2b:98:ae:1c:cf:82:
23:83:0d:06:79:3e:61:82:81:ba:ce:06:93:1d:8c:
ad:e6:13:5b:57:6a:0e:00:6a:96:1f:20:22:51:06:
fa:11:38:d1:61:5b:ae:07:4f:5d:ae:29:a9:18:21:
3c:22:eb:1e:34:cb:46:92:8c:f5:07:ff:4e:41:54:
f0:cd:79:ff:93:86:a1:48:07:46:e7:e7:11:f8:8b:
14:f3:9d:1b:07:01:db:e7:97:d5:10:54:53:7a:01:
ce:dd:c5:9f:7f:4e:72:51:02:01:13:98:5f:46:2c:
fb:bc:c0:4f:e1:c2:51:b1:4f:2e:91:01:14:92:2f:
22:6a:4e:c1:df:f3:6c:32:78:3c:7f:34:33:cf:ae:
21:9f:4b:c7:3c:bb:34:b1:96:04:e3:76:08:aa:4d:
e3:e3:cb:7f:1d:e1:d9:3e:21:5a:67:c5:c6:7e:d4:
25:39:73:6a:5b:15:af:97:99:85:40:a0:04:fd:a8:
37:3b:a7:67:47:86:88:f9:19:54:de:64:2d:99:e9:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:EC:27:F6:FB:0A:62:FC:D2:04:FC:FF:0A:82:54:AA:C1:BE:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/507724db-2397-3234-9cf1-25eb1a37cec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b5:2c:99:0f:5d:0e:f6:82:92:c7:7f:47:f9:93:12:c4:e3:
0a:db:03:a4:05:5f:0a:46:aa:37:f5:a6:ca:24:6a:5c:50:22:
ef:7f:3c:0d:bb:ee:0e:4a:c8:f2:6a:e0:25:1f:de:30:4e:fa:
3d:df:a5:a7:35:61:62:d1:22:b1:13:92:5b:11:fb:ad:8b:e3:
ee:71:8a:df:b9:a5:60:ad:fe:f6:87:f3:47:01:df:5c:58:05:
d5:a3:e6:93:0d:6c:0c:7c:8a:59:cb:31:6e:b6:ac:cc:9e:dd:
3f:4e:78:9d:b9:0e:98:e1:66:2d:e1:5a:8f:f8:df:6f:c2:83:
f0:97:52:1d:80:e4:d7:c2:a3:26:eb:79:17:8a:02:23:58:0c:
78:ca:29:ff:92:2b:f3:23:14:52:b0:d8:04:cc:f9:4a:1f:3b:
51:c8:2b:c5:5d:53:54:9d:8f:55:1c:08:fd:3b:bd:99:70:88:
c8:5c:77:9f:26:c2:d3:fa:19:7b:66:ff:84:5d:47:40:21:c2:
22:45:28:4c:22:ce:86:f7:f8:4f:38:43:18:e4:8d:33:93:72:
e2:1c:20:05:da:e3:40:80:c2:73:36:5b:5d:b1:54:47:21:ee:
02:66:bf:d6:4f:13:5d:3a:97:6b:73:39:be:cb:84:a5:18:a7:
5c:c1:41:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLr+Kcswqt1vthVagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwNjE5MTAyMloXDTI1MDUwNzE4MTAyMlowLzEtMCsGA1UEAxMk
N2U4ZmM2NmYtZDkwYS00NWY4LWJiNDktNmM0Yzg5Mzk3Y2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg23i6HntIKLOQRDYitV8VWmUt3alnL5+TSL
1pO1qDIC2RnQItVl8miOAa1+6cuu1b5lmKcrmK4cz4Ijgw0GeT5hgoG6zgaTHYyt
5hNbV2oOAGqWHyAiUQb6ETjRYVuuB09drimpGCE8IuseNMtGkoz1B/9OQVTwzXn/
k4ahSAdG5+cR+IsU850bBwHb55fVEFRTegHO3cWff05yUQIBE5hfRiz7vMBP4cJR
sU8ukQEUki8iak7B3/NsMng8fzQzz64hn0vHPLs0sZYE43YIqk3j48t/HeHZPiFa
Z8XGftQlOXNqWxWvl5mFQKAE/ag3O6dnR4aI+RlU3mQtmekkXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/S7Cf2+wpi/NIE/P8KglSqwb4aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTA3NzI0ZGItMjM5Ny0z
MjM0LTljZjEtMjVlYjFhMzdjZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAS1LJkPXQ72gpLHf0f5kxLE4wrbA6QFXwpGqjf1psokalxQIu9/PA27
7g5KyPJq4CUf3jBO+j3fpac1YWLRIrETklsR+62L4+5xit+5pWCt/vaH80cB31xY
BdWj5pMNbAx8ilnLMW62rMye3T9OeJ25DpjhZi3hWo/432/Cg/CXUh2A5NfCoybr
eReKAiNYDHjKKf+SK/MjFFKw2ATM+UofO1HIK8VdU1Sdj1UcCP07vZlwiMhcd58m
wtP6GXtm/4RdR0AhwiJFKEwizob3+E84QxjkjTOTcuIcIAXa40CAwnM2W12xVEch
7gJmv9ZPE106l2tzOb7LhKUYp1zBQak=
-----END CERTIFICATE-----
Generated at Fri May 9 05:54:07 2025 by rpki-client