Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0aafad59-8baf-3b97-aca5-b98dfc3579bb.roa
File: 0aafad59-8baf-3b97-aca5-b98dfc3579bb.roa (raw, json)
Hash identifier: fl7V1y3dl4F842k0a3EUwo9JJeDl2bOc50VlplWRSOg=
Subject key identifier: 5E:D1:A0:F7:C9:D8:27:72:49:11:7A:8F:82:3D:95:67:D6:0A:52:9A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845320A821B5350C63FBE96D280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0aafad59-8baf-3b97-aca5-b98dfc3579bb.roa
Signing time: Wed 13 Mar 2024 15:57:40 +0000
ROA not before: Wed 13 Mar 2024 15:57:40 +0000
ROA not after: Tue 11 Jun 2024 15:57:40 +0000
asID: 63150
IP address blocks: 166.0.192.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:32:0a:82:1b:53:50:c6:3f:be:96:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 13 15:57:40 2024 GMT
Not After : Jun 11 15:57:40 2024 GMT
Subject: CN=61603c95-bfcb-4b46-b6a9-c2b2416ec57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:86:ca:f7:88:dc:7c:c2:b8:5f:35:3d:ad:
48:6c:cb:27:c7:30:ac:fa:c9:3a:a6:6b:51:16:1b:
48:e1:a7:95:cc:d5:63:6d:03:14:b9:dc:89:0d:33:
4e:31:35:01:e4:32:66:24:e1:9c:0d:12:b7:71:f0:
73:cc:ba:f4:e6:2f:99:eb:f4:cd:90:24:af:90:1a:
80:51:b7:ff:f2:30:73:a5:ad:b5:ac:f7:cd:69:94:
fd:a7:f4:b1:93:88:86:0a:81:1a:37:ba:f9:65:3d:
f5:b7:d9:5c:3c:fe:1e:b7:f7:47:1c:0c:58:61:2d:
04:e6:b4:bb:b9:90:60:b7:7c:60:ad:43:96:3c:24:
89:ab:17:8a:91:84:ea:4d:35:e7:2b:c7:4e:12:ba:
a9:6f:fe:98:e9:29:ab:c7:df:1a:e0:7b:c3:3c:06:
ee:d8:a7:48:89:5f:a8:fd:5b:db:82:2b:11:e4:af:
e4:6e:52:e0:12:1b:8f:09:24:5f:8d:de:2d:34:a8:
ab:c2:4f:9e:33:ef:04:3e:49:64:25:48:50:76:a4:
7c:40:00:a9:ed:77:89:55:31:09:c3:e4:59:86:ef:
3e:ad:7d:1a:4e:78:dc:2e:6c:65:2d:02:f8:88:58:
51:dc:4b:6a:47:cf:18:86:99:1f:5c:28:5a:14:99:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:A0:F7:C9:D8:27:72:49:11:7A:8F:82:3D:95:67:D6:0A:52:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0aafad59-8baf-3b97-aca5-b98dfc3579bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:ef:b6:96:74:93:f0:47:0b:d7:73:75:06:90:14:01:87:e7:
da:6d:5e:b0:4b:89:2a:34:cc:f0:72:74:0d:4b:bb:b5:f7:bd:
46:a6:48:75:db:a3:bf:63:dc:87:47:97:e9:de:2f:79:1d:4b:
30:00:11:c1:ff:4a:8e:e0:43:07:c9:1d:ad:ad:dd:e8:2f:4f:
7f:3c:9b:10:2a:9e:7f:54:9e:3a:9f:9e:81:ac:db:70:0e:9c:
ee:27:1b:17:21:12:ab:00:22:4d:da:e0:cf:0f:4f:0c:62:24:
5e:4b:dc:f1:ff:ec:f8:a0:31:fd:a7:f6:f9:22:7f:ad:23:f9:
d1:11:fd:28:60:f5:93:33:75:47:bf:7e:58:7b:35:4b:be:3e:
7f:73:74:38:bd:07:51:b1:58:ac:32:91:22:79:d0:c8:2d:bb:
e7:37:a2:02:fb:3d:04:11:35:4c:59:4c:9b:de:ce:4f:d9:61:
c8:09:6f:20:2b:28:ba:8e:3a:78:09:15:3a:f6:53:16:5d:04:
60:b3:a4:58:bf:f1:8f:34:0c:77:4f:e9:24:f6:e9:55:d1:23:
f4:b8:72:a6:b1:04:79:40:5b:d1:93:73:a6:4b:69:2b:8a:4c:
28:89:61:1b:9f:31:8c:e4:50:f3:6b:b7:7c:d9:46:60:c7:57:
ff:f5:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:33:12 2025 by rpki-client