Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/01fdd0da-2482-3cba-82de-2510d15dfb25.roa
File: 01fdd0da-2482-3cba-82de-2510d15dfb25.roa (raw, json)
Hash identifier: +3UYUFdDfPR+AL5H2Bzb4zif/oeo2rifhaJokVcKnHs=
Subject key identifier: 34:CA:92:A3:53:8F:38:6F:14:BB:46:94:1A:BC:94:12:A4:D0:AB:35
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844150E895DFB50E107483BBD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/01fdd0da-2482-3cba-82de-2510d15dfb25.roa
Signing time: Sat 02 Dec 2023 14:00:21 +0000
ROA not before: Sat 02 Dec 2023 14:00:21 +0000
ROA not after: Fri 01 Mar 2024 14:00:21 +0000
asID: 46573
IP address blocks: 166.0.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:15:0e:89:5d:fb:50:e1:07:48:3b:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 14:00:21 2023 GMT
Not After : Mar 1 14:00:21 2024 GMT
Subject: CN=a9dae16f-4837-4405-9f3e-3505f2a28ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:ec:a5:58:ab:35:c4:0c:5d:06:4c:1f:cb:
05:91:60:3c:54:c6:22:80:53:5d:b2:ba:b2:e1:6c:
42:6e:15:07:55:ed:dc:30:9a:dd:2b:26:1e:b6:6a:
77:df:54:c1:28:b5:2a:d2:d3:e3:b7:1f:e1:e3:6b:
a0:2c:b8:5d:79:56:cd:95:c3:ef:74:ac:11:b4:33:
e5:a3:c1:f9:66:50:d0:ef:09:38:df:0d:f3:a7:17:
38:a7:35:7e:3f:2e:ef:27:c6:a8:95:a9:61:d4:12:
8c:27:8a:49:cd:f7:b3:23:ac:61:49:ee:52:f4:f1:
5e:6a:eb:c0:68:30:22:45:35:5f:23:7c:d3:b8:14:
6e:32:3b:26:67:3b:77:b0:a6:52:b7:72:90:4d:f6:
c3:10:1d:77:42:52:dc:2f:44:e9:a8:10:f3:68:fb:
77:95:93:ce:de:67:f5:c7:ff:d2:bd:9b:42:c0:c8:
bc:6c:e0:d3:23:28:f8:5c:c7:00:1d:3c:78:15:f9:
36:73:66:40:3c:73:58:17:9c:08:d6:12:b6:73:91:
d0:a9:53:6c:85:d1:6d:00:f0:bd:d1:55:82:e4:74:
38:ca:19:5a:27:0a:81:6d:c4:2a:da:ad:7f:31:2f:
56:b6:6d:df:be:32:f1:a3:52:20:72:51:e3:e4:60:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:92:A3:53:8F:38:6F:14:BB:46:94:1A:BC:94:12:A4:D0:AB:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/01fdd0da-2482-3cba-82de-2510d15dfb25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:4a:94:71:ff:f2:70:d9:69:bd:cb:b2:6f:01:f5:4f:5c:c9:
75:8a:3e:c5:fb:96:ce:3d:11:1a:d5:b7:66:5b:6d:aa:91:4c:
8a:8d:64:a3:64:37:84:6e:2e:82:c2:17:52:63:20:a9:20:d3:
c1:58:e7:65:03:45:e5:df:a2:26:79:f6:c0:58:b9:41:ca:e8:
42:88:96:8d:9c:e6:37:82:ba:ce:d3:5e:8f:1c:15:96:32:b3:
2e:39:d3:5a:6b:ef:90:c0:eb:9f:2a:d1:67:4b:57:39:a6:06:
46:9f:db:c8:8f:62:8a:9b:da:41:1c:77:b2:7a:2f:c6:fb:82:
05:fc:df:57:21:22:33:99:f2:e4:ba:27:98:5e:1c:8b:7c:bd:
08:8a:6e:19:f4:71:1e:c5:2e:f0:85:a1:7c:73:85:5b:0c:f2:
c0:42:70:96:b8:59:2c:b9:28:1b:2b:4f:d9:23:37:19:1a:4e:
2f:dd:d2:f7:a4:58:84:55:89:71:44:8e:c6:fc:29:3d:bd:3e:
a7:31:4d:81:34:b6:36:ff:97:be:cd:32:fd:8f:18:6c:f7:29:
aa:08:60:05:dc:a1:8b:98:90:76:76:f4:39:0d:96:56:0d:5d:
24:e7:23:5f:e3:f1:45:da:fa:d8:d7:a3:ed:6e:b6:da:33:ff:
69:b4:55:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:27:02 2025 by rpki-client