Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1070e1e0-2d2a-393f-8c7c-142936a67da8.roa
File: 1070e1e0-2d2a-393f-8c7c-142936a67da8.roa (raw, json)
Hash identifier: 0YG6By+1mdP8b0/sI/qnbh2+Pdhp7VUXx3G/IY3KETQ=
Subject key identifier: 63:E5:CE:ED:37:31:93:74:81:F2:5B:BE:C0:E7:95:CD:AC:0C:CB:CE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842C489482D0E803E1B33F7D300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1070e1e0-2d2a-393f-8c7c-142936a67da8.roa
Signing time: Fri 04 Aug 2023 01:00:17 +0000
ROA not before: Fri 04 Aug 2023 01:00:17 +0000
ROA not after: Thu 02 Nov 2023 01:00:17 +0000
asID: 53356
IP address blocks: 166.0.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c4:89:48:2d:0e:80:3e:1b:33:f7:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 4 01:00:17 2023 GMT
Not After : Nov 2 01:00:17 2023 GMT
Subject: CN=ee2e9a49-8f73-40ed-9125-b29acfca9223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:2e:d9:6d:cd:88:f7:37:3d:eb:72:6e:11:
1b:77:3a:06:0f:6a:34:b0:3e:56:ec:bb:22:4e:b0:
ed:5d:d6:94:05:a2:ca:ad:bf:2f:88:2b:3f:08:bc:
be:81:4e:67:80:24:f6:e1:45:79:72:47:f6:14:83:
90:ee:af:33:98:a5:cc:b4:1d:99:f4:9b:07:02:5e:
88:1f:4b:90:40:bf:c1:06:89:98:2e:91:26:30:06:
27:00:e2:bb:42:4f:52:d5:d0:12:0e:84:bf:1f:fa:
af:e3:9c:6a:f9:4f:e5:c2:68:bb:53:9e:fe:5c:ff:
37:ac:46:67:2b:46:94:9e:c5:12:95:40:d4:de:f3:
f1:68:85:fd:ed:c2:6b:5d:6a:d6:12:9e:80:4c:76:
22:f5:32:d6:2d:a2:02:1f:7c:8d:b6:2f:5a:8b:e4:
9b:5c:f3:0b:0f:29:d9:c5:75:a2:32:3f:b8:08:89:
2a:59:a0:f5:b0:96:69:14:ec:bc:1d:cc:8a:b9:5e:
70:b5:9d:60:6f:2d:55:5e:21:3e:cc:e0:3d:e5:0b:
b8:e2:98:eb:54:21:34:48:41:f9:22:34:47:aa:32:
40:b5:c2:2e:7d:68:ec:25:1f:1d:b8:80:e8:6b:73:
12:f0:22:64:ba:cf:65:5c:66:86:3a:ab:06:04:b5:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E5:CE:ED:37:31:93:74:81:F2:5B:BE:C0:E7:95:CD:AC:0C:CB:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1070e1e0-2d2a-393f-8c7c-142936a67da8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:6c:7c:50:24:4b:ce:71:30:79:d6:2c:4b:de:83:cd:9f:7d:
ad:d9:81:1d:7b:03:5c:26:8f:0d:2f:46:b9:de:43:ed:36:1f:
51:86:13:20:f4:82:69:e9:c9:1e:05:48:a2:8a:8c:b4:d7:c9:
62:a2:7a:40:27:06:8a:39:3f:60:66:d6:19:2c:4e:c8:90:c6:
94:24:78:cf:27:a5:db:fe:d8:cb:4f:f3:16:58:6e:7c:c1:9d:
64:b6:c3:41:be:56:e8:39:bc:a3:c4:fc:c7:c6:a5:06:bf:46:
fe:df:dc:ff:07:2f:29:f8:ee:34:88:ac:b1:04:b4:a1:4e:6a:
66:8e:d6:55:50:8d:f6:87:a9:23:68:a5:04:ad:10:47:d8:be:
bf:c5:84:96:73:11:dd:a0:80:9e:d8:fb:d9:17:38:88:b2:5d:
78:6e:ae:76:e4:dd:cc:5d:ad:cd:fa:b1:33:9a:cb:13:56:a6:
c6:de:fe:36:84:55:be:50:db:17:19:ec:d2:6c:6e:5f:09:a6:
43:33:9f:b5:6a:71:69:2d:30:ee:51:2e:fe:29:b0:29:50:c9:
27:7d:a6:58:ff:9e:ec:3c:3c:5d:aa:77:23:35:21:cb:55:a4:
56:3c:7e:fd:de:a2:c6:45:07:f5:70:24:71:90:69:ef:75:e6:
01:99:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:41 2025 by rpki-client