Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c0a65a9-28fa-3086-8340-5347edc9460d.roa
File: 0c0a65a9-28fa-3086-8340-5347edc9460d.roa (raw, json)
Hash identifier: J7IchSedc5wotygeX3P5LnPkGcExCHerEg0Bo3Qsx+Q=
Subject key identifier: 00:A7:1A:96:CC:16:B3:FC:3D:AF:8E:03:E0:56:CF:EE:0A:91:42:82
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584218EB3E2C1536F7E6C14AE240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c0a65a9-28fa-3086-8340-5347edc9460d.roa
Signing time: Sat 03 Jun 2023 13:38:39 +0000
ROA not before: Sat 03 Jun 2023 13:38:39 +0000
ROA not after: Fri 01 Sep 2023 13:38:39 +0000
asID: 198652
IP address blocks: 166.1.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:18:eb:3e:2c:15:36:f7:e6:c1:4a:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 3 13:38:39 2023 GMT
Not After : Sep 1 13:38:39 2023 GMT
Subject: CN=548b7e0e-9073-4b8a-a373-efe0d6d230da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:30:43:db:98:ea:0a:5f:6a:2a:d7:50:5b:
0b:ab:d2:fe:a8:19:7f:80:d3:da:36:ed:5d:9f:81:
a4:81:19:17:b1:99:ad:7d:77:33:f6:fa:87:04:d5:
74:1e:4a:29:ef:02:06:86:9d:47:78:fb:93:1f:57:
2b:5a:bc:dd:78:7f:67:eb:dd:eb:84:84:32:f6:8d:
8d:c2:0d:83:9e:21:e0:e1:38:0e:98:ce:c2:0d:bc:
71:c2:80:ab:26:e4:43:aa:19:35:59:2e:64:5c:5f:
39:59:de:37:68:f4:0d:9e:72:01:f0:39:ce:b0:cf:
57:a0:be:ce:af:93:c5:5a:36:1b:b7:62:31:b8:4e:
66:4f:91:aa:67:7c:ec:8d:ce:93:f2:43:4a:d4:7c:
0b:d8:a8:48:6b:4c:20:60:00:b5:7a:c6:0e:f0:0d:
ee:f0:10:82:cd:8e:bb:f8:02:b4:9e:68:69:45:61:
51:89:da:a7:47:83:1a:f0:06:4a:03:91:1c:55:f6:
86:9e:f8:65:27:43:10:d9:4e:6d:1a:00:f2:d0:bd:
46:d7:63:8f:14:47:ac:e7:61:c7:f8:41:81:46:66:
a6:5f:d3:57:b2:87:ac:ac:b8:c8:b1:3d:4d:a9:45:
5f:9f:4d:5f:d1:ef:2c:db:06:20:32:2f:8d:9c:e8:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A7:1A:96:CC:16:B3:FC:3D:AF:8E:03:E0:56:CF:EE:0A:91:42:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c0a65a9-28fa-3086-8340-5347edc9460d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:90:2f:8a:bf:2a:4c:d9:67:7c:6f:91:23:90:1c:7a:78:c3:
e3:61:58:83:11:0e:9e:48:50:54:29:8b:1d:2f:fd:61:ee:36:
5e:de:6c:a1:7f:c4:56:dd:9f:4f:1f:c2:4f:c3:e2:4e:92:13:
a2:16:df:44:4f:0d:21:9c:e5:0b:ba:c6:e4:4a:7d:36:99:60:
ea:bc:dc:f3:43:80:89:26:0b:49:2a:d4:d4:32:38:05:e4:13:
a0:75:76:c6:07:28:c6:09:7b:63:e1:13:f7:6c:b0:b1:45:55:
78:1a:f9:d1:da:94:4e:4c:d6:e9:03:45:9d:30:82:14:a8:06:
bf:1c:0f:4b:15:44:ee:fe:dd:ba:fe:6f:6e:c4:1f:8a:9c:d2:
87:a8:76:4e:b8:a2:2e:b1:81:f0:07:9f:ee:47:19:81:2f:78:
07:3c:30:4b:00:91:74:ee:29:1d:34:9d:4e:83:df:8f:7b:dd:
68:52:51:81:e4:65:0a:3a:f7:11:f5:44:80:51:81:4c:61:94:
7d:b6:26:14:df:9c:7e:7d:07:5a:b8:77:8b:17:90:ea:4d:cd:
a1:45:6e:3b:22:b4:17:00:90:22:98:20:ee:85:82:63:0a:c7:
df:31:46:d1:1e:83:5f:26:b2:6d:10:03:95:8a:ec:e8:95:e9:
be:66:80:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:15:31 2025 by rpki-client