Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1254adf5-a594-31fe-aa1e-be3b1147d3b0.roa
File: 1254adf5-a594-31fe-aa1e-be3b1147d3b0.roa (raw, json)
Hash identifier: ulAWe/wmK2V39X6QhxvUNa9A5VWQpLlQ0QK7pm4sZzc=
Subject key identifier: DC:6B:A3:CA:D1:F4:1B:49:22:4F:B4:93:43:20:6B:C3:E1:EC:E2:41
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858453747F9431E39DE61347DCEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1254adf5-a594-31fe-aa1e-be3b1147d3b0.roa
Signing time: Fri 15 Mar 2024 13:00:32 +0000
ROA not before: Fri 15 Mar 2024 13:00:32 +0000
ROA not after: Thu 13 Jun 2024 13:00:32 +0000
asID: 11798
IP address blocks: 166.0.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:37:47:f9:43:1e:39:de:61:34:7d:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 15 13:00:32 2024 GMT
Not After : Jun 13 13:00:32 2024 GMT
Subject: CN=f15564f8-4806-46fd-bd84-799d9d813325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:41:ea:f6:94:61:a6:37:70:ee:9c:5b:e1:
ef:8d:1f:b9:9b:61:1f:d1:2d:a1:e7:66:10:04:1f:
ca:40:25:58:a6:b3:79:65:9c:e1:1a:58:b9:4b:41:
9d:c4:a8:0e:3d:d3:62:bf:82:5b:87:e3:b3:e1:34:
29:c7:d4:4e:b0:ab:20:50:d3:e1:2f:da:8b:31:d3:
28:ce:3d:a9:e7:56:6d:5e:a3:bb:1c:eb:f5:19:6a:
47:aa:8d:dd:27:e1:2a:64:2b:c0:e9:10:be:2d:2d:
57:71:68:ca:ef:93:18:f4:f8:cc:8b:b3:62:a6:e2:
34:37:8b:3c:93:77:fa:36:21:d0:8d:32:af:93:82:
ca:84:57:ff:64:34:14:79:49:66:71:e8:e8:76:fb:
35:5d:dd:f7:2c:d3:b6:40:3f:18:73:ec:69:de:5e:
92:c4:02:60:eb:fa:e3:ed:9e:58:23:53:2c:84:83:
70:4b:a4:d1:76:a5:26:68:cc:7a:37:04:33:a2:97:
ad:1d:04:14:2c:48:9c:3d:51:e3:aa:b4:e0:b2:97:
f8:f1:7d:5d:a6:50:d4:2e:20:77:36:12:6b:cc:4d:
da:62:da:9e:16:71:99:b9:56:c4:bb:4c:b4:88:42:
5c:cd:92:0f:89:c8:d7:8e:4c:0e:e1:24:2d:7c:0e:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:A3:CA:D1:F4:1B:49:22:4F:B4:93:43:20:6B:C3:E1:EC:E2:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1254adf5-a594-31fe-aa1e-be3b1147d3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:c3:45:13:be:de:88:09:7c:dd:71:5a:02:ad:5b:11:41:4d:
a9:a8:b8:1a:25:96:48:6b:6e:7b:38:bb:d0:d9:23:60:7d:f0:
d2:7a:78:25:f0:aa:8f:11:5d:f6:12:78:8e:16:27:e8:50:16:
77:07:45:cf:c2:a0:a2:f5:f1:a5:d8:06:8e:98:a3:f0:6a:a2:
f5:b5:06:3b:de:6b:7f:4e:3a:74:2e:f0:cf:23:49:d5:87:fa:
a4:fd:9e:71:74:cb:89:13:db:46:3b:3a:c7:31:eb:28:a1:33:
12:0e:1e:c7:b2:e8:6f:e7:c3:12:aa:22:fb:a3:26:e2:91:18:
bd:a1:d0:70:ea:43:26:c9:25:26:9c:cb:44:b3:cc:62:8c:92:
22:53:5c:e7:68:7b:f5:03:21:ed:23:0f:a9:c8:6b:35:0e:db:
41:50:62:be:61:ff:c5:cc:57:dd:e5:b5:cc:97:13:cf:ef:6d:
14:28:7f:21:f8:fd:a1:ef:d0:bb:af:1b:cd:8b:fd:48:8f:96:
64:92:b5:b8:d6:d3:7b:3f:fe:3b:b5:c7:64:80:c7:20:4c:7a:
67:86:42:75:66:38:54:f6:ed:09:59:0b:c9:53:28:a2:43:cf:
bf:7c:67:1f:4e:38:26:8d:5b:37:1e:17:d9:12:c8:bc:46:0c:
e6:58:19:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:10 2025 by rpki-client