Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1039212b-796c-381b-9569-3380d70fc2a4.roa
File: 1039212b-796c-381b-9569-3380d70fc2a4.roa (raw, json)
Hash identifier: Pe2EmlQ78bfWsOrD8KEFoDhDq74ZoQbBblki18UBras=
Subject key identifier: 59:78:F9:1F:3D:C2:F4:85:08:5B:C5:E5:48:0F:F5:12:C4:86:9E:32
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584259761DCF5642FB2C4F896300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1039212b-796c-381b-9569-3380d70fc2a4.roa
Signing time: Mon 26 Jun 2023 16:30:12 +0000
ROA not before: Mon 26 Jun 2023 16:30:12 +0000
ROA not after: Sun 24 Sep 2023 16:30:12 +0000
asID: 57043
IP address blocks: 166.0.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:59:76:1d:cf:56:42:fb:2c:4f:89:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 26 16:30:12 2023 GMT
Not After : Sep 24 16:30:12 2023 GMT
Subject: CN=007fbe25-4b94-459e-9b37-77f662c25b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:3d:27:1d:46:79:f0:d9:e4:ce:a1:5a:c6:
0d:7f:e7:e4:24:71:66:a6:6e:16:40:c9:82:08:9f:
85:10:55:f9:c7:75:6f:03:78:02:2f:ac:4f:52:e7:
5c:92:c8:e6:e0:1c:b8:45:c2:e9:a5:7d:f2:ad:c9:
ca:6c:6d:f0:99:b6:76:91:a4:ec:40:17:9e:bb:01:
eb:62:d1:ac:2b:3d:dc:ad:03:fe:81:66:8d:7b:11:
00:a3:d8:ad:17:04:d5:69:17:6e:3a:52:c2:8e:a3:
11:18:93:f9:40:18:ab:6f:ce:48:d3:52:20:11:e1:
f8:37:45:1c:09:c0:c5:ad:6d:e6:d9:f4:19:39:ad:
f1:ff:ff:7c:a4:d4:a4:63:af:84:0c:93:66:11:2b:
f1:56:f8:5c:67:4c:d3:32:de:d3:38:50:3b:db:8d:
3a:b7:c0:da:a7:21:bf:44:6c:ec:64:dd:62:3e:1a:
76:19:3e:1d:0e:af:cf:b6:29:a0:f0:75:0f:6b:1c:
cc:f9:14:cc:98:db:86:1c:c2:c2:a0:06:c3:56:10:
90:c8:cf:34:76:87:6a:60:3f:50:2b:4d:28:f0:1e:
45:0a:49:e9:61:b7:1f:cb:d1:70:17:12:45:b2:10:
6d:07:14:d5:1f:cc:8d:88:97:54:d4:44:6e:a8:30:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:78:F9:1F:3D:C2:F4:85:08:5B:C5:E5:48:0F:F5:12:C4:86:9E:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1039212b-796c-381b-9569-3380d70fc2a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:ec:47:29:12:29:e1:50:14:d1:e3:42:ab:11:f7:96:f6:73:
62:5a:85:be:a9:89:ae:f2:84:90:78:10:c7:b3:ec:92:7c:3f:
fc:ee:b6:d9:1e:b1:ff:a5:fb:d3:39:4e:11:41:83:12:ca:99:
cd:eb:af:40:67:e1:cc:94:de:c0:54:45:ca:78:93:13:ec:a4:
7f:7d:de:6d:8c:29:87:c5:29:f5:c0:e7:3e:75:f4:44:26:fb:
a8:ee:02:01:97:17:46:77:a7:1d:d0:33:5d:6c:0e:9b:40:47:
1c:2e:2b:df:f5:35:78:43:2e:35:24:b3:86:9e:92:c5:52:db:
03:8e:9a:ec:8e:e0:5e:d1:34:15:6f:87:5c:e9:66:9d:62:97:
15:92:68:d6:ba:04:41:b6:aa:71:5a:48:74:5e:3a:98:f5:2c:
4f:25:2d:ba:2c:93:66:10:ee:9c:86:28:cd:fd:59:07:5c:9a:
1a:69:23:75:20:be:0b:af:da:39:5e:35:fd:68:2e:77:73:ef:
29:c4:87:58:4b:17:14:29:86:5a:d9:5f:4a:ee:cb:7e:d6:65:
11:ac:5f:0a:a7:c0:0a:74:8b:c1:7c:45:1a:08:6c:f7:1a:84:
7f:db:9c:ef:e7:3d:60:5a:9b:1d:01:2d:21:6e:d9:d6:8d:b4:
48:5d:6a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:55:21 2025 by rpki-client