Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9cc0b83-b2e1-3649-9aad-42e82a389e0f.roa
File: e9cc0b83-b2e1-3649-9aad-42e82a389e0f.roa (raw, json)
Hash identifier: Nm+rDTGlUEFa7BbfsDDVbcH5O8iXTWn9Ra0lguRev94=
Subject key identifier: E8:CC:46:07:E3:B5:92:C8:C8:42:F9:99:CF:BC:11:3D:42:B6:67:3F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584766138F834B548A8E524B2200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9cc0b83-b2e1-3649-9aad-42e82a389e0f.roa
Signing time: Tue 01 Oct 2024 16:51:49 +0000
ROA not before: Tue 01 Oct 2024 16:51:49 +0000
ROA not after: Mon 30 Dec 2024 17:51:49 +0000
asID: 834
IP address blocks: 23.26.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:66:13:8f:83:4b:54:8a:8e:52:4b:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 1 16:51:49 2024 GMT
Not After : Dec 30 17:51:49 2024 GMT
Subject: CN=ec3e578b-6f86-4c8b-b040-aae4da4dd2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:e6:b2:4d:a1:d7:9a:0e:b7:73:51:b1:7d:
2d:1f:e5:cf:43:29:d3:40:31:23:91:1d:0f:25:df:
f9:6e:fe:26:49:67:f6:f1:bc:35:9a:d6:26:5e:71:
a9:13:ce:cf:7c:96:37:0c:62:67:18:d9:31:2b:92:
ab:e4:5d:10:6d:46:93:e5:35:5a:e4:6c:b8:12:60:
9e:b4:7a:71:0f:36:4d:aa:53:84:ff:93:3b:09:3d:
7d:c3:12:1a:fe:f6:2f:fd:4d:4f:9a:79:d6:af:7a:
dc:95:6a:52:cf:ab:45:eb:d2:6a:7e:cf:ef:1e:d8:
9f:9c:e7:4e:87:e0:03:8b:16:f4:c4:75:59:76:69:
24:80:a9:50:80:48:2b:30:1f:d7:e8:11:b8:b9:d3:
0d:cd:af:d5:e0:2d:11:e6:eb:f7:05:c1:cd:95:6c:
f8:ca:3a:10:3c:9b:71:4c:40:e8:65:0a:d5:ed:fd:
fe:ae:d3:4d:d4:ed:26:b2:41:71:f7:6f:6c:24:f3:
76:0f:6d:fe:ea:7f:35:f4:c4:89:7b:c0:4c:9e:11:
1f:27:0d:43:1f:62:ed:ea:39:14:d4:48:f4:89:3e:
28:e3:34:13:33:8a:c1:1d:74:cd:4f:e4:b9:73:2e:
e7:78:41:f2:d8:99:ec:f4:97:21:7e:ca:bf:df:b4:
57:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:46:07:E3:B5:92:C8:C8:42:F9:99:CF:BC:11:3D:42:B6:67:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9cc0b83-b2e1-3649-9aad-42e82a389e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:68:51:80:d4:bb:09:55:0c:9d:79:1a:8e:f6:a9:a6:c9:f4:
cf:e1:9c:ff:96:0e:9e:cf:a8:1f:99:28:fe:8d:4a:ee:19:0e:
46:f6:f9:4a:f9:ce:f1:4b:df:3a:f8:5c:b4:41:7e:cd:fe:8e:
68:2a:1f:cf:b2:6a:91:e9:4d:78:52:16:35:e8:f1:c2:5e:f2:
fa:f8:28:73:c2:54:fe:af:0c:b4:d8:25:77:0d:aa:b9:a7:11:
a0:5e:98:a1:8e:10:de:ab:7f:d7:c8:80:11:cc:ba:dc:35:21:
e7:78:32:5a:98:2e:8f:21:c7:dc:cf:12:b7:8e:03:89:03:7e:
8f:e0:b8:a9:90:9e:23:b6:0b:4d:12:51:5b:fc:f2:fc:05:73:
2f:96:0e:f7:46:a7:07:d3:ec:c5:8b:3a:1e:11:05:ea:a2:95:
38:34:c3:81:91:0d:d7:30:9c:5f:1f:30:2f:e4:90:dc:2d:60:
2c:e1:c4:a7:0b:ab:52:b9:5d:e3:54:b4:cc:89:96:d8:a8:49:
fd:cf:52:6d:4a:f5:ec:29:c6:f5:7f:94:a6:a6:30:0b:dc:e8:
2a:5a:b1:bc:0f:98:b4:d1:72:e5:1d:20:bc:6c:88:76:ad:62:
06:e7:6f:c5:10:94:b6:f4:38:0b:94:2d:c1:8b:d4:93:05:0d:
29:73:31:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdmE4+DS1SKjlJLIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTAwMTE2NTE0OVoXDTI0MTIzMDE3NTE0OVowLzEtMCsGA1UEAxMk
ZWMzZTU3OGItNmY4Ni00YzhiLWIwNDAtYWFlNGRhNGRkMmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCTmsk2h15oOt3NRsX0tH+XPQynTQDEjkR0P
Jd/5bv4mSWf28bw1mtYmXnGpE87PfJY3DGJnGNkxK5Kr5F0QbUaT5TVa5Gy4EmCe
tHpxDzZNqlOE/5M7CT19wxIa/vYv/U1PmnnWr3rclWpSz6tF69Jqfs/vHtifnOdO
h+ADixb0xHVZdmkkgKlQgEgrMB/X6BG4udMNza/V4C0R5uv3BcHNlWz4yjoQPJtx
TEDoZQrV7f3+rtNN1O0mskFx929sJPN2D23+6n819MSJe8BMnhEfJw1DH2Lt6jkU
1Ej0iT4o4zQTM4rBHXTNT+S5cy7neEHy2Jns9Jchfsq/37RX/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjMRgfjtZLIyEL5mc+8ET1Ctmc/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTljYzBiODMtYjJlMS0z
NjQ5LTlhYWQtNDJlODJhMzg5ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALFoUYDUuwlVDJ15Go72qabJ9M/hnP+WDp7PqB+ZKP6NSu4ZDkb2+Ur5
zvFL3zr4XLRBfs3+jmgqH8+yapHpTXhSFjXo8cJe8vr4KHPCVP6vDLTYJXcNqrmn
EaBemKGOEN6rf9fIgBHMutw1Ied4MlqYLo8hx9zPEreOA4kDfo/guKmQniO2C00S
UVv88vwFcy+WDvdGpwfT7MWLOh4RBeqilTg0w4GRDdcwnF8fMC/kkNwtYCzhxKcL
q1K5XeNUtMyJltioSf3PUm1K9ewpxvV/lKamMAvc6CpasbwPmLTRcuUdILxsiHat
Ygbnb8UQlLb0OAuULcGL1JMFDSlzMbE=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:16:12 2025 by rpki-client