Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/189c4793-fc3c-3216-b8d0-645d23e09db2.roa
File: 189c4793-fc3c-3216-b8d0-645d23e09db2.roa (raw, json)
Hash identifier: H9tpzd6wHwKzNFr7qJkD6a6dQV6SImYmDpHan4AqbPE=
Subject key identifier: DA:33:A4:2F:EC:C1:F4:80:56:F2:B3:4A:73:01:A8:C9:36:A0:9C:25
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584230E77BA49E4987A1AB9FE300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/189c4793-fc3c-3216-b8d0-645d23e09db2.roa
Signing time: Mon 12 Jun 2023 03:50:28 +0000
ROA not before: Mon 12 Jun 2023 03:50:28 +0000
ROA not after: Sun 10 Sep 2023 03:50:28 +0000
asID: 39937
IP address blocks: 166.0.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:30:e7:7b:a4:9e:49:87:a1:ab:9f:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 12 03:50:28 2023 GMT
Not After : Sep 10 03:50:28 2023 GMT
Subject: CN=026cec2e-798d-4417-9ba9-1d641ee0657d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:42:77:91:6b:b8:65:04:c8:73:9d:03:92:
59:ca:c1:de:31:51:b1:bf:75:fa:d1:0c:13:a3:fa:
02:a5:44:c2:d8:f5:75:18:a5:92:2a:60:d8:4d:3a:
9b:e7:0e:5a:14:6b:d6:da:c4:d2:93:a4:6d:48:d9:
fd:66:55:80:f1:32:f4:23:85:32:c3:db:dc:30:2f:
39:89:1b:43:fe:19:d3:80:2a:4c:ef:0d:f7:56:ca:
5a:1d:64:84:dd:8f:f1:14:f7:50:54:f1:2d:92:d4:
10:cd:f7:c5:6b:bd:a1:92:a7:4c:73:89:16:b2:c9:
fd:94:6d:ec:3e:6b:d2:05:c3:ad:b1:8d:ba:a6:6c:
7d:81:a6:74:04:be:53:58:58:3e:c0:27:42:25:1b:
ac:46:6b:03:1b:ba:e3:ef:2e:8d:a3:86:e6:79:98:
6f:49:47:90:6d:ce:71:15:a5:8a:03:33:ed:2d:de:
e8:da:a9:77:e8:07:57:31:ae:42:8b:ae:35:80:91:
15:69:cf:2e:b6:53:4b:ce:3e:d0:0b:2d:1c:48:40:
5c:fa:b0:58:91:c9:c9:41:c3:67:05:14:5b:b2:1d:
7b:cd:54:cd:0f:25:6d:2d:5d:ab:e9:72:7e:2c:9c:
95:a7:56:44:3e:4e:ea:8f:35:e1:f8:8c:66:be:c2:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:33:A4:2F:EC:C1:F4:80:56:F2:B3:4A:73:01:A8:C9:36:A0:9C:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/189c4793-fc3c-3216-b8d0-645d23e09db2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:be:75:44:b7:97:6a:9a:b7:61:23:c5:1c:29:c4:c8:de:24:
44:82:2a:95:78:69:e5:ef:40:fe:49:bd:3c:1e:5f:ff:b9:02:
5d:a5:68:54:28:dd:92:7e:df:3c:c0:4b:00:c1:63:5b:64:0f:
03:dc:bc:f0:36:1b:39:d3:ff:9f:c5:27:c0:2b:ab:08:df:40:
0c:03:22:fd:5a:8a:55:b3:07:46:28:e1:1c:1a:ca:a5:a8:44:
c5:37:b7:62:1e:06:42:08:39:81:57:34:81:15:81:59:19:27:
06:98:c3:85:22:01:4a:7c:b3:c7:20:3f:a2:94:f1:e2:d9:36:
72:e0:b2:ad:eb:09:1d:3c:0f:c8:a1:b3:f2:cc:2c:d8:92:e9:
c5:33:ec:66:02:20:d6:6f:5f:03:95:9b:a2:56:21:0f:f5:d3:
42:0a:3e:0b:cb:d2:b7:7b:e8:28:19:5f:f3:ef:6e:d2:79:6b:
05:6b:41:70:00:99:c2:cd:51:68:8f:a4:51:91:2a:8d:ef:24:
aa:74:f8:31:f1:7a:16:de:c8:53:bf:50:a9:40:1f:4d:b0:4f:
8a:40:b7:2a:99:b8:08:a7:13:7c:2f:48:71:94:b1:66:ec:14:
38:82:e6:8d:f2:a3:73:60:9e:45:c3:45:3d:90:e8:39:78:fc:
b4:73:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:42:37 2025 by rpki-client