Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c1f8af6-28dc-3e00-b77b-bdc7dd5709a9.roa
File: 1c1f8af6-28dc-3e00-b77b-bdc7dd5709a9.roa (raw, json)
Hash identifier: zK8Jsl5KTGHlx51+N1HInnsYuf2zm9Hx6bSwmRLKSjs=
Subject key identifier: F6:82:BA:E1:13:FF:C7:8C:57:90:EB:DA:0F:17:D6:32:4C:89:5D:CF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858422A07495D177B851429071F30
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c1f8af6-28dc-3e00-b77b-bdc7dd5709a9.roa
Signing time: Fri 09 Jun 2023 16:43:54 +0000
ROA not before: Fri 09 Jun 2023 16:43:54 +0000
ROA not after: Thu 07 Sep 2023 16:43:54 +0000
asID: 11798
IP address blocks: 166.1.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:2a:07:49:5d:17:7b:85:14:29:07:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 9 16:43:54 2023 GMT
Not After : Sep 7 16:43:54 2023 GMT
Subject: CN=1a19b64b-103e-4409-846a-82931500e7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:09:f5:94:1b:f5:d8:eb:eb:62:65:5a:e7:
a7:8e:da:c0:63:8a:88:1f:59:eb:5e:e3:a2:e6:77:
7f:62:72:31:ee:79:13:ef:bb:41:63:c6:85:ce:87:
c7:9b:21:65:c1:e4:38:e6:c9:e0:b5:d7:4b:39:18:
3a:d9:27:53:a2:8c:df:2b:cb:19:78:bf:57:44:80:
47:c4:a7:09:d3:b3:2b:ec:a8:4d:17:fb:c6:ff:4f:
68:ca:a6:9d:0b:c8:40:75:d4:a8:d5:39:48:b6:7b:
06:b8:64:04:bb:27:19:5e:e8:c0:2c:be:62:43:59:
54:38:a9:92:a7:3b:00:f2:51:13:7d:e4:8e:07:ca:
b7:95:4d:d2:30:26:70:6d:49:46:e2:7a:31:f8:f2:
a0:ef:51:4d:6f:73:bc:9d:26:3d:ab:af:09:11:a1:
a9:ad:bc:9b:b6:08:fa:e4:6a:be:68:64:4a:77:63:
39:ab:5d:80:c3:9c:32:0a:76:9f:c0:7d:4f:f9:5f:
e1:de:71:36:ce:f1:9d:10:7b:7b:11:24:20:c4:d0:
2c:29:c4:ef:b4:4c:72:5b:53:68:a0:7b:26:13:f6:
a1:2a:d2:b7:ea:ac:ae:83:1d:3d:45:66:01:3b:40:
26:50:db:ff:a8:5b:45:18:2f:ac:fe:e5:e0:e0:24:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:82:BA:E1:13:FF:C7:8C:57:90:EB:DA:0F:17:D6:32:4C:89:5D:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c1f8af6-28dc-3e00-b77b-bdc7dd5709a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:9a:b4:a7:31:41:c4:4e:a0:a9:37:77:c0:36:bc:2f:6f:17:
6a:3c:e0:d8:c1:cc:3a:5e:9c:d6:0b:9a:92:bd:e0:e6:be:5b:
f5:f7:bd:7c:f3:26:6b:56:d8:00:35:bb:b3:4b:3f:a3:25:38:
32:b8:4a:6d:ca:83:68:30:df:31:6a:7f:b3:c7:48:2d:51:ce:
d3:8d:f8:7a:17:05:45:11:98:c5:c4:50:bc:38:81:dd:04:59:
3f:24:fc:2b:58:05:07:b6:90:7b:88:57:bf:0e:4b:1a:f1:8d:
06:fc:39:8c:ad:72:f0:07:4e:37:b2:ae:54:39:a1:80:c1:99:
1a:96:b1:0f:98:5d:b0:f0:22:b3:87:32:6c:31:8b:a1:0c:45:
d1:8f:0e:43:1c:6b:3a:37:0d:6a:96:fa:61:bc:57:79:00:2f:
43:33:5f:b9:b6:48:f7:9f:24:60:27:6f:46:d5:f2:8e:d7:b7:
70:c7:f3:26:d7:9f:dd:c9:98:c6:a3:7e:43:c7:c2:41:de:07:
40:5c:75:4a:ba:9b:9e:25:67:2b:4c:dc:0e:9a:b9:42:24:1e:
0a:7b:9c:4a:43:bd:bb:f3:5d:4d:d4:cd:fd:06:c5:bb:a9:07:
cc:62:2e:b7:92:ae:8f:ef:b5:78:ba:d8:a7:19:e7:c3:18:01:
f0:8c:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:41 2025 by rpki-client