Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/16e38cea-e4ab-35e8-9b22-9fe3ea9c3cf4.roa
File: 16e38cea-e4ab-35e8-9b22-9fe3ea9c3cf4.roa (raw, json)
Hash identifier: ZbaaQ94oQNs91XBEKMpgzGsy9ID6ah1i06FnVPlzOV4=
Subject key identifier: BF:45:07:16:8E:C0:50:B0:1D:B7:1F:98:99:F9:5D:83:E4:85:E8:2A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583FEDD5E202F88C36E0E2207380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/16e38cea-e4ab-35e8-9b22-9fe3ea9c3cf4.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Tue 18 Feb 2025 05:00:00 +0000
asID: 61317
IP address blocks: 166.0.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ed:d5:e2:02:f8:8c:36:e0:e2:20:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Feb 18 05:00:00 2025 GMT
Subject: CN=ab9f0e1f-ec34-4cf6-a989-83447ab7c11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:e7:ca:5c:75:aa:89:3b:53:42:9a:26:c1:
f5:13:61:e1:a7:57:78:3f:aa:53:a3:01:09:6f:7a:
de:ce:df:e2:c8:09:2a:34:01:9e:75:6c:a3:80:7f:
2d:45:96:bc:c2:35:7c:a1:68:82:51:dd:88:27:a2:
d9:41:91:82:3f:7b:0c:cc:ac:b3:fe:b3:a4:19:f9:
4b:89:c7:e6:46:31:77:a8:c5:72:78:16:da:ac:0a:
f9:14:74:30:c2:2e:b8:9a:3b:ea:a6:21:46:a6:6a:
09:77:2b:4c:7a:64:28:a3:f3:76:18:0a:69:d0:60:
2d:27:b8:91:b3:8e:49:66:5b:47:e3:fd:8b:9e:13:
41:20:ea:e9:e7:80:89:22:1c:93:3d:eb:48:d3:43:
9a:86:64:7d:83:4b:b0:25:80:b7:a2:5f:46:69:7b:
d1:58:ea:40:d7:22:7b:35:a5:df:8c:2e:d8:46:d1:
fa:b0:25:06:cd:13:dc:c5:57:51:e8:6a:63:1e:79:
f7:4a:0c:0d:5d:8c:e8:37:fb:f3:9d:46:81:94:92:
33:47:5a:2e:49:6a:af:77:4c:e8:3d:1e:34:19:16:
26:79:ab:23:2a:cc:d8:40:f7:11:74:e6:49:c4:11:
2c:8d:b0:a5:11:d0:7b:88:09:45:f8:ea:ef:16:a4:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:45:07:16:8E:C0:50:B0:1D:B7:1F:98:99:F9:5D:83:E4:85:E8:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/16e38cea-e4ab-35e8-9b22-9fe3ea9c3cf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:ca:dc:78:9f:42:24:b2:ba:3d:80:b6:1c:b3:29:a0:62:47:
ff:d7:18:a3:9e:0c:26:f6:61:3c:9e:6c:ca:2a:1c:76:63:00:
bb:86:2f:b7:d4:10:df:9d:41:32:30:37:55:1e:08:8d:3e:96:
47:86:0a:42:bc:68:8e:a6:4a:1e:10:74:b8:7d:4e:c6:db:2b:
2e:f3:93:da:71:73:7b:99:09:9e:9d:64:2f:84:f4:2f:6f:27:
13:e8:6a:1d:71:ad:69:5e:57:86:87:f2:b3:ea:3f:10:57:f4:
87:dc:4d:b8:76:5c:cd:6c:5d:e9:f2:0b:66:95:1d:9e:21:6d:
2b:e6:f0:a8:d8:01:c7:14:ad:7f:e3:f5:fb:aa:6e:5f:15:8a:
b8:a3:f3:16:d2:8a:da:ea:80:aa:24:77:ed:a8:fb:b2:05:2f:
2d:24:e8:d4:e4:5e:93:d7:11:a3:17:83:25:dd:fe:2a:23:ff:
b4:30:f5:71:3f:53:31:22:54:39:cb:62:f1:38:62:6b:a2:68:
ce:5c:fc:78:b8:43:82:a8:fd:ea:97:7d:1a:a0:a4:74:7b:07:
8c:50:c6:7c:33:53:09:83:98:e2:88:99:ad:a1:ac:1e:4a:25:
7b:68:7f:81:84:c8:54:5a:82:94:80:2b:ab:f9:37:0c:dc:b1:
a3:cc:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:32:18 2025 by rpki-client