Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03824d08-b305-3661-a8a5-76d4cafa5ed3.roa
File: 03824d08-b305-3661-a8a5-76d4cafa5ed3.roa (raw, json)
Hash identifier: m6pL2aeg9FENVKmROO1a9edeM2X39W1Xz/IarT1ZEFU=
Subject key identifier: AA:C8:C1:79:15:6B:6D:E4:CF:41:0E:CE:A6:AA:EF:BA:92:C4:F9:A3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A5E0731BE6E98EF4326A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03824d08-b305-3661-a8a5-76d4cafa5ed3.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 9009
IP address blocks: 166.0.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:5e:07:31:be:6e:98:ef:43:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=9d8bf3e0-b099-4896-b0cf-74486c9c082c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:2f:c0:9f:03:2c:50:38:e9:f5:8d:30:61:
f7:45:a7:9b:18:5b:6a:88:34:f7:34:25:9f:81:50:
7a:86:fb:c9:1f:c2:0d:27:03:ab:ca:b9:a0:ef:a0:
6d:eb:85:84:39:cf:a0:1f:7e:34:4e:8a:48:19:34:
b2:5c:b5:b8:af:eb:41:f6:ae:4a:d4:68:97:9e:1e:
c9:c9:9a:ab:4a:da:17:0a:73:10:c2:4b:c6:dc:23:
71:73:aa:2f:69:72:80:bf:6a:0f:b8:c2:47:9e:ba:
7a:69:a3:9a:1d:f7:e1:8f:16:5b:67:fd:ad:50:c0:
7e:9b:9f:23:a2:ce:f0:76:5e:06:e6:de:5a:cb:64:
e0:2f:b6:c4:81:c9:f7:bf:07:a6:e4:b4:0c:78:50:
9c:fe:88:a8:df:d4:fa:53:22:d0:f6:9a:0a:82:3d:
43:e8:44:77:12:ea:ba:d0:51:ee:e7:fe:a9:25:b3:
67:29:07:24:70:92:36:49:40:97:4c:6b:03:9e:58:
98:e8:4f:1f:b5:23:f9:59:46:55:87:41:e9:91:b4:
33:b4:2f:bc:0a:d5:bc:73:9a:a6:d4:64:ca:30:01:
af:96:12:33:85:81:5f:40:6b:49:9a:f0:4e:75:59:
93:f3:49:04:d2:fd:ae:7a:44:e8:41:bb:ce:8c:50:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C8:C1:79:15:6B:6D:E4:CF:41:0E:CE:A6:AA:EF:BA:92:C4:F9:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03824d08-b305-3661-a8a5-76d4cafa5ed3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:df:53:5f:11:8a:08:68:4a:cc:bb:56:fc:7c:7f:21:30:f8:
4a:d8:a5:8a:dd:5a:0e:5d:f5:16:43:21:68:7d:2b:51:a5:fd:
9b:cd:32:c5:2e:d4:60:42:a3:8d:22:31:a6:9d:c6:27:12:20:
7a:56:99:14:f2:4a:58:10:75:d3:55:ff:6d:61:a3:d1:22:8f:
e6:24:67:29:81:b2:fe:81:1b:b8:2f:30:bf:75:4a:2e:dd:6f:
7f:b1:f5:ec:0a:a9:9e:4c:5d:63:3c:62:92:22:19:09:1d:34:
bb:86:c3:1b:bf:ad:40:3c:61:9f:5b:5b:86:fd:41:cf:cb:98:
8f:b2:b2:ca:89:01:da:81:7c:c0:55:09:64:52:be:01:f3:ed:
34:0f:5b:e3:fb:31:b9:22:5d:7c:c9:40:fe:f5:84:4e:f3:89:
16:cb:28:b2:05:d1:47:39:d9:11:57:25:1b:02:06:cc:f1:8e:
cf:a0:c4:c6:39:42:f0:1b:b4:e6:82:4a:ac:f3:9e:57:0a:99:
cd:17:d9:70:70:50:07:7f:a0:e1:71:9d:2e:11:32:e3:55:1a:
03:21:2e:c0:0a:73:a1:2d:c8:02:ea:09:6a:f0:dc:3d:ca:54:
af:76:7d:93:7a:8f:8c:f9:7a:4c:1c:56:89:fa:18:45:b7:54:
fa:06:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:49:48 2025 by rpki-client