Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ebfbc63-817c-3ed1-a3d6-29fb5416865c.roa
File: 0ebfbc63-817c-3ed1-a3d6-29fb5416865c.roa (raw, json)
Hash identifier: VjF/3qrsaPInRhODkchrOUez0ya1sA92QXvTG+AkPkw=
Subject key identifier: 1B:29:F8:FE:1A:D9:CE:D2:73:5A:15:68:92:B6:9E:6A:63:ED:B6:B1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858423E887513E0ADB2D6604FF480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ebfbc63-817c-3ed1-a3d6-29fb5416865c.roa
Signing time: Sat 17 Jun 2023 01:00:17 +0000
ROA not before: Sat 17 Jun 2023 01:00:17 +0000
ROA not after: Fri 15 Sep 2023 01:00:17 +0000
asID: 60721
IP address blocks: 166.0.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:3e:88:75:13:e0:ad:b2:d6:60:4f:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 17 01:00:17 2023 GMT
Not After : Sep 15 01:00:17 2023 GMT
Subject: CN=45c5e452-2267-401c-be6d-11681e64aa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:09:5e:00:95:a4:95:16:b2:13:be:69:0b:
ac:1c:04:c6:7e:7f:1c:64:8f:d1:b5:36:c5:5f:85:
d2:2e:d8:b0:93:dc:06:4e:9a:2c:2c:70:dd:f9:0a:
58:d4:83:2a:3c:a4:81:15:d6:cb:88:a9:88:36:37:
72:59:d7:4c:aa:ca:da:f4:16:21:b7:6b:90:49:85:
5d:ff:2e:82:a9:ae:3a:48:80:9f:cd:e1:e7:32:46:
e9:75:71:cc:96:da:37:56:a3:dd:6b:62:53:00:df:
bc:ce:61:af:ea:24:78:31:cf:86:02:10:15:93:fe:
b1:b2:be:da:08:dd:03:a7:32:33:cf:78:79:ac:a2:
5a:79:ee:6e:de:6a:fb:a9:b4:5f:b2:8e:7c:47:2e:
d8:9a:b9:0b:33:1d:0b:56:ec:63:f4:dc:ef:79:7d:
9b:b0:80:7c:1b:9b:7d:6a:8b:96:52:41:49:c2:5e:
b5:03:49:dc:08:21:96:02:5d:29:24:b2:b3:3d:82:
e1:3a:da:74:77:e4:e5:b1:49:ca:7e:c5:58:6c:36:
fa:55:07:29:88:1b:39:61:f8:fb:af:0b:64:47:a4:
ec:20:c0:e5:be:4e:87:2b:03:2f:4b:37:3c:ea:82:
15:a0:8b:53:23:0a:49:b3:f9:48:1b:72:8c:41:f4:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:29:F8:FE:1A:D9:CE:D2:73:5A:15:68:92:B6:9E:6A:63:ED:B6:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ebfbc63-817c-3ed1-a3d6-29fb5416865c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:64:2d:3a:ec:74:ee:fa:54:b4:a0:68:59:7b:57:cb:d7:6f:
96:56:ce:15:6d:dd:39:1f:b7:73:b0:a7:34:34:de:65:9a:b5:
b4:53:27:ac:9f:15:d0:b9:b1:f6:f0:52:09:60:f4:42:d3:03:
92:d1:7c:27:62:9d:7d:de:a6:f9:01:0e:b2:d8:f5:b8:84:20:
0b:45:c7:05:23:46:db:b5:57:6d:34:e1:ff:69:45:89:de:c7:
57:33:9a:58:a5:eb:8e:19:ca:09:dc:55:88:f4:b6:68:1f:c3:
e3:d2:89:38:69:52:c5:89:45:fb:24:2b:e0:67:53:35:03:f6:
d4:1b:17:ab:0b:09:ca:87:b9:14:c3:df:6a:46:cf:57:ca:32:
9f:7a:bc:2d:8a:96:9e:b8:6d:7e:25:11:bf:49:f5:4a:5d:5e:
c0:78:ad:8e:bb:72:79:b4:16:0a:54:6a:de:0a:d7:a7:11:4a:
d3:bb:5a:67:27:d6:19:3a:6c:5e:d0:61:bf:b7:50:ef:c5:ac:
b8:36:b6:62:f1:f3:15:14:3b:d2:b3:d6:8d:c6:70:98:8a:d6:
71:4e:32:17:a4:f1:1f:eb:08:e4:93:70:2d:c9:ad:d6:24:e8:
e6:1b:e1:fe:7d:07:44:f9:60:7c:10:02:03:2f:7e:cd:67:8a:
a7:c6:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:15 2025 by rpki-client