Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02d23693-9874-3c74-be1b-172512267302.roa
File: 02d23693-9874-3c74-be1b-172512267302.roa (raw, json)
Hash identifier: v2zwvc/kG+vabRvNFZ3vMXdx9z093yRa2khjgxBq2Sw=
Subject key identifier: F5:36:67:AE:38:1D:EE:1D:D8:E1:95:4D:59:E6:AF:1D:AD:7D:1B:A4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E5429F985BF989AC2CA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02d23693-9874-3c74-be1b-172512267302.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Tue 08 Aug 2023 06:22:48 +0000
asID: 834
IP address blocks: 166.0.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e5:42:9f:98:5b:f9:89:ac:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 8 06:22:48 2023 GMT
Subject: CN=dd5d84cf-857e-44e4-932a-e50c760960df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:7c:bd:aa:3d:4d:e0:ad:9f:c6:f2:f3:ed:
99:9c:6a:2f:79:40:a9:6f:46:99:57:f3:73:f1:77:
07:a8:5d:a6:ee:b9:6c:da:56:df:d8:cd:e3:6b:7e:
56:ce:f7:10:c0:00:ef:b3:e3:31:bd:a9:fa:b7:22:
bf:b5:c2:a5:f8:06:34:32:31:75:ef:01:9a:05:7b:
74:b7:73:8b:af:e0:b4:0f:a0:0d:cf:76:e9:64:f4:
8e:aa:1a:30:d9:99:07:08:9e:77:c7:0a:ad:c0:e1:
b9:40:1e:9b:a6:f6:fe:61:50:30:32:22:96:12:1c:
6a:16:b0:8d:a0:2f:09:8c:25:55:4e:cb:dd:c4:de:
92:fb:ee:03:a0:13:05:8d:d6:af:91:69:18:27:5e:
4b:7a:e8:54:95:de:70:81:4e:0c:6f:c0:40:cb:f7:
41:24:64:5a:ea:9f:b5:72:59:0e:dc:d7:08:dc:6f:
62:83:a0:f9:af:91:c2:a5:09:9c:6c:a4:20:1d:ee:
ca:a1:95:66:a6:2f:a2:5e:59:e7:97:ae:72:b1:2d:
3f:cc:08:dc:9f:1b:ee:0b:94:83:cd:b6:f3:16:dd:
c2:c6:82:8b:d5:06:47:3b:98:af:3b:96:8e:08:8e:
19:83:59:8a:d4:af:d1:66:79:c1:ac:c3:cd:00:94:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:67:AE:38:1D:EE:1D:D8:E1:95:4D:59:E6:AF:1D:AD:7D:1B:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02d23693-9874-3c74-be1b-172512267302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:b9:39:25:fb:e0:11:2f:ae:59:5e:46:d6:e5:8a:81:6e:b0:
d2:93:20:07:5c:b3:5a:23:35:92:2c:95:2b:4f:5a:48:5c:d4:
35:0a:a9:61:1f:06:99:bb:45:6f:e8:81:1d:eb:6f:ee:83:f6:
76:87:86:dd:3a:f6:db:bc:ed:2a:99:63:9f:e3:9d:4f:93:2c:
71:fb:ec:f5:d1:c1:2e:bd:d5:32:50:31:a4:10:5e:93:b1:71:
57:a2:a7:b4:2d:24:e6:ec:4e:39:5c:93:df:90:e6:0c:e0:96:
9b:53:2b:94:a1:89:f0:42:61:2f:4a:50:e1:9a:ae:f0:7c:58:
5a:12:8f:64:8f:61:73:3b:e1:73:bb:c8:e3:f9:79:83:f0:bf:
96:1c:6d:9e:63:1c:a2:3a:bc:16:38:a0:46:5c:9a:13:c9:8c:
7b:43:2a:49:93:68:3c:62:ed:d3:de:52:a0:6b:ff:99:bb:44:
89:6b:68:ce:cb:da:e1:8f:07:83:4d:15:9d:b4:d4:34:60:cf:
2f:82:9e:6c:fe:07:3d:00:dc:9c:18:07:04:54:f8:35:ef:93:
d3:c0:27:28:a5:41:39:28:11:0a:7a:1d:f0:61:81:94:f2:9a:
88:e3:59:ea:f3:f4:9a:8b:4b:d7:a2:0b:68:31:0b:bf:66:57:
5a:6e:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:49:41 2025 by rpki-client