Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1368da8c-1285-3780-9108-59b3413b1391.roa
File: 1368da8c-1285-3780-9108-59b3413b1391.roa (raw, json)
Hash identifier: SBxEQFkyJLB8bwSueLfg1OthPm9EpV2utZVdR9JHUro=
Subject key identifier: ED:0F:76:FA:02:04:F6:BF:6F:1B:1D:82:CF:BA:92:1B:F4:83:16:4A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858422A080232F0D89C0C034C7B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1368da8c-1285-3780-9108-59b3413b1391.roa
Signing time: Fri 09 Jun 2023 16:45:21 +0000
ROA not before: Fri 09 Jun 2023 16:45:21 +0000
ROA not after: Thu 07 Sep 2023 16:45:21 +0000
asID: 11798
IP address blocks: 166.1.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:2a:08:02:32:f0:d8:9c:0c:03:4c:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 9 16:45:21 2023 GMT
Not After : Sep 7 16:45:21 2023 GMT
Subject: CN=26d16e35-c257-45c3-9f73-70df2a21ad30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:ca:65:8e:3e:93:68:0b:44:ff:a2:76:90:
38:86:6e:ba:66:1c:8b:cd:34:89:ad:d9:39:e3:4e:
3b:ca:a4:3e:45:82:67:2d:06:2b:6a:64:50:c8:48:
fa:97:ad:2c:87:68:61:48:eb:10:3c:4d:c2:8e:aa:
b9:58:1b:8a:c4:02:90:ea:55:11:d2:da:ef:f0:5b:
9c:9d:7c:bd:b2:98:6f:05:be:15:da:23:9e:13:78:
46:e6:2f:d1:75:d9:c0:1f:76:12:68:b4:93:38:bb:
87:4e:30:24:cc:02:a6:b1:39:8d:1b:1b:01:4f:0e:
6f:a7:96:26:bc:c4:90:c0:f9:13:ee:5e:48:fa:6f:
48:6a:e6:99:b2:1a:1b:ee:73:8c:e2:c3:ef:16:85:
50:46:4e:e3:80:2d:9b:ee:4a:15:ae:c0:21:52:b0:
5f:54:df:1b:83:72:42:05:4b:6f:18:5e:d6:28:00:
be:41:bd:9d:69:9a:0d:57:b8:b8:0b:71:62:a9:45:
ba:6a:a9:8d:aa:ae:e1:b3:10:cb:a7:90:8b:bd:ea:
7e:43:02:db:0a:1b:65:29:77:47:a7:63:29:cd:b4:
09:3f:6e:b7:2e:b4:89:88:b1:a2:e2:3c:aa:53:75:
fb:95:84:e7:26:64:44:9f:b5:7b:56:92:cb:6a:93:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0F:76:FA:02:04:F6:BF:6F:1B:1D:82:CF:BA:92:1B:F4:83:16:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1368da8c-1285-3780-9108-59b3413b1391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:38:7e:95:50:d8:53:65:90:aa:86:44:01:19:70:6f:37:4e:
84:eb:21:7b:14:7c:04:62:0d:23:6d:43:ae:4b:82:62:e7:c5:
bd:55:1e:be:cb:ba:5b:42:a1:73:53:1d:16:d9:93:9c:ba:28:
e3:25:9e:45:b8:30:9b:37:44:f2:b5:cf:73:69:ec:bc:4a:8c:
8a:d5:b6:bb:bb:c9:bb:4e:38:d1:65:6d:d7:43:cf:64:14:bf:
fa:03:f1:e0:ee:df:e4:d4:0f:e9:ad:f7:eb:99:7b:2f:e4:c0:
f0:1b:7b:97:1f:d0:e6:8c:b2:c6:32:55:c8:1d:1a:82:4d:94:
35:21:bc:1a:63:de:73:1b:fb:31:df:5d:16:54:46:d6:0c:8a:
c0:93:b7:38:d7:22:84:57:d8:ec:b8:76:6f:5d:ee:42:50:0a:
b1:69:23:fe:b9:39:fa:64:bb:3e:99:3a:8c:fd:70:57:b7:d0:
ef:6f:20:11:c4:3c:c7:5d:ec:ec:07:25:28:6a:de:6d:e0:d8:
4e:4b:54:24:15:3a:e6:f1:25:75:38:a0:e8:5a:64:00:9f:06:
54:cc:0d:15:e8:eb:56:c9:22:28:c8:15:1d:ff:c6:5a:ac:a9:
df:89:e2:f7:4c:7a:32:ba:5f:4a:1c:d0:67:a8:d4:5f:8f:de:
51:46:b1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:47:25 2025 by rpki-client