Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2438fc1d-5f8d-30cb-bb8b-997e3369edbf.roa
File: 2438fc1d-5f8d-30cb-bb8b-997e3369edbf.roa (raw, json)
Hash identifier: YWyW+db9Nssr0VsrExp97cclTs2ilOhZi8RnsHv4K4w=
Subject key identifier: CE:B9:3F:01:E9:0D:40:9E:25:48:40:F1:D9:A4:B3:C5:20:F3:A1:F7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584210EEF3DCFC7DCC1649DEFB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2438fc1d-5f8d-30cb-bb8b-997e3369edbf.roa
Signing time: Wed 31 May 2023 16:59:39 +0000
ROA not before: Wed 31 May 2023 16:59:39 +0000
ROA not after: Tue 29 Aug 2023 16:59:39 +0000
asID: 11798
IP address blocks: 166.1.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:10:ee:f3:dc:fc:7d:cc:16:49:de:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 31 16:59:39 2023 GMT
Not After : Aug 29 16:59:39 2023 GMT
Subject: CN=9d24a39b-9f77-400d-b757-980252f94f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:4d:36:f8:64:4f:9e:7d:17:7c:c7:f9:90:
18:79:9f:74:e5:db:2c:e8:dc:9f:bc:42:b6:45:ba:
29:f8:f4:95:3a:e1:47:a4:97:35:bc:22:0a:54:6e:
bb:9d:c6:58:65:7f:2c:fd:56:52:15:03:a4:68:f1:
38:1d:aa:ae:bf:d0:6f:f0:a0:c1:07:24:44:82:e3:
51:02:fc:17:4a:96:04:6a:ca:50:63:cf:09:f4:10:
99:d6:25:1b:28:38:97:66:92:fe:56:ea:dd:1d:1a:
fe:02:31:4b:ce:21:06:ef:cd:3c:0f:d2:e5:d8:b1:
4b:53:b9:11:4e:01:68:7c:b8:85:84:94:6c:76:c9:
c6:d5:81:d9:65:b2:a9:8b:ae:f8:fb:68:40:e9:37:
e6:90:e4:04:73:0c:82:9d:a0:a6:97:93:e4:61:a2:
c6:50:44:26:62:7d:d8:24:29:39:52:9b:5d:de:74:
4e:25:15:87:de:0e:fb:93:c1:c6:e8:0b:fc:ca:26:
12:ff:6a:ed:54:89:da:d0:32:0f:90:71:db:95:cf:
e2:25:e0:dd:58:f2:89:28:a1:59:93:44:2b:b9:30:
63:d1:ba:8f:1e:f8:76:ed:17:f0:dc:eb:59:76:a7:
85:2f:72:11:81:f8:72:0d:e9:06:f6:cd:6f:c1:77:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B9:3F:01:E9:0D:40:9E:25:48:40:F1:D9:A4:B3:C5:20:F3:A1:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2438fc1d-5f8d-30cb-bb8b-997e3369edbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:20:e0:a1:fc:d2:a0:14:25:39:af:25:9d:98:7b:de:18:47:
e3:ca:7a:ad:65:a0:f5:5f:84:cc:c9:a0:8b:a3:db:1a:96:03:
5f:8e:8e:7b:80:1e:ef:77:67:13:6f:e4:95:07:bb:f8:57:9f:
c5:59:78:bf:6e:6c:cc:84:91:40:87:6f:f6:0f:1c:f4:f7:a8:
37:75:de:97:f9:d8:12:b9:77:66:d2:c0:17:ee:20:2e:30:10:
75:d2:f5:e3:33:5b:7d:0a:9e:eb:1f:83:85:2d:f6:15:65:99:
73:c2:2b:16:e7:c3:9b:e8:35:ac:1d:39:10:80:82:5b:a2:b0:
09:a9:10:96:b1:f8:04:99:05:72:53:6b:1b:59:1d:3d:c2:f3:
44:d3:ce:94:00:91:88:1f:e8:86:3c:da:a7:75:41:03:41:29:
f1:78:32:76:ea:1c:a0:37:4e:f5:17:51:c2:be:5e:38:ac:b4:
49:ff:47:c6:a4:2f:a7:b9:c5:6c:8c:e6:b9:2d:2f:cb:c4:a4:
7d:26:48:93:d3:6a:a7:42:90:33:c3:38:4f:2b:b4:1b:e0:f5:
98:9a:c1:93:5f:fb:50:15:22:96:45:57:1f:cf:a6:f4:19:45:
98:81:ea:19:88:9c:b9:81:b0:e2:f0:43:32:ff:1d:9f:c0:e9:
a9:28:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:34:57 2025 by rpki-client