Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1456762e-36c7-3de7-9e1f-83ad450b7541.roa
File: 1456762e-36c7-3de7-9e1f-83ad450b7541.roa (raw, json)
Hash identifier: xxldkJD9HGxQD2QSCRSso3Tn/+kMZbxGYUQcuB/qqCQ=
Subject key identifier: D4:24:9B:AA:17:92:FA:61:E2:A5:B7:74:2A:E3:69:93:BD:4C:42:30
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E192DC1C2B900BFB7700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1456762e-36c7-3de7-9e1f-83ad450b7541.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 05 Aug 2023 17:13:23 +0000
asID: 60721
IP address blocks: 166.0.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e1:92:dc:1c:2b:90:0b:fb:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 5 17:13:23 2023 GMT
Subject: CN=6dc6e698-ed17-4ea5-a72e-0e6392190b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:21:1d:4e:91:d1:a1:d2:ff:b7:b0:5d:4f:
0e:28:06:34:b5:41:46:87:d5:cb:2d:8a:fc:0b:94:
52:af:81:e3:f6:a0:bf:ff:14:12:cd:36:ad:f1:53:
6f:46:4c:97:90:b2:7d:00:0c:fb:ee:f1:12:a4:77:
d5:e0:0e:7e:4d:e7:47:e2:28:8d:d0:bd:ba:8e:d6:
ea:1a:12:89:88:a8:90:c2:da:ba:56:80:bc:e3:f7:
3e:ce:67:b2:f5:c7:68:00:0b:7d:7c:46:e1:a2:b9:
c0:38:bc:9d:a5:c9:9f:43:4e:39:ba:e6:81:5e:69:
10:d9:91:dc:c6:e0:09:b2:34:e0:53:36:cf:2d:e3:
52:10:1a:9f:cd:61:51:85:cd:da:f0:a5:e8:9c:ee:
aa:66:60:6a:06:1c:b8:23:f8:5c:bf:9a:7d:d4:9e:
c7:66:2f:36:0b:e8:90:60:18:66:95:57:ae:43:f0:
e3:9a:bb:5b:95:e1:ec:d6:22:eb:af:71:9a:17:b1:
a5:25:59:15:06:a2:7a:ed:7f:21:b1:64:5d:2b:2b:
fa:51:38:d0:f7:b8:ea:99:b8:58:20:83:ca:aa:ef:
fa:ea:59:a8:10:da:b7:5a:d6:29:32:a6:c8:4e:ef:
24:25:4c:cc:f1:73:6d:fe:e6:b3:0e:94:62:22:77:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:24:9B:AA:17:92:FA:61:E2:A5:B7:74:2A:E3:69:93:BD:4C:42:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1456762e-36c7-3de7-9e1f-83ad450b7541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:82:2f:42:36:94:d3:ef:d1:25:b2:7a:ff:6e:a8:18:e6:e4:
8b:aa:cc:52:d6:a3:51:06:f3:c8:0d:63:c0:18:68:64:b2:e9:
d0:9e:51:ca:05:54:41:46:1e:4c:dc:07:4f:19:f2:27:20:e4:
b0:c5:64:3f:d0:0f:86:12:f2:08:e5:c3:27:8f:36:74:19:8f:
04:27:3d:ff:b6:af:ba:91:f6:84:7c:54:09:41:39:a8:47:67:
a6:8a:5b:17:a1:d7:66:be:45:73:58:bb:9c:82:28:43:f8:8e:
d4:3e:73:34:1f:e2:45:5a:1e:32:f6:a9:17:d0:61:f2:15:73:
9f:87:d4:55:b6:b6:e5:38:78:bf:2c:a3:f0:63:ba:59:e9:61:
f6:f4:f4:4d:18:38:94:6b:5f:21:a1:4d:cc:c1:76:d4:6f:66:
89:82:23:2e:9f:73:2f:7f:c8:93:1e:3d:25:d0:09:bd:ac:f3:
cd:be:f9:96:f0:a7:fa:bc:2e:72:4b:5f:07:16:3a:c6:c6:d4:
32:4e:40:e2:46:90:0c:a1:1f:47:7d:74:e1:6a:37:1e:d2:0c:
dc:35:f5:1c:ec:66:b1:fe:bb:8b:8d:e2:72:18:f7:fb:5d:c7:
88:46:81:df:f4:aa:23:3a:f8:59:f5:c9:e5:ad:f6:27:18:b6:
2f:e6:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:53:12 2025 by rpki-client