Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28bed602-c285-3d01-8056-1db29db078a6.roa
File: 28bed602-c285-3d01-8056-1db29db078a6.roa (raw, json)
Hash identifier: 9CQfdy8FUM/RCcpiWzrF4EOUgMnoGKv5buu2YkiteS4=
Subject key identifier: 06:1F:4E:DF:88:76:3E:14:34:67:98:92:6C:DA:16:F2:6B:EA:1C:CC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844D62636110A222B27907D7380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28bed602-c285-3d01-8056-1db29db078a6.roa
Signing time: Fri 09 Feb 2024 17:59:07 +0000
ROA not before: Fri 09 Feb 2024 17:59:07 +0000
ROA not after: Thu 09 May 2024 16:59:07 +0000
asID: 11798
IP address blocks: 166.1.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d6:26:36:11:0a:22:2b:27:90:7d:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 9 17:59:07 2024 GMT
Not After : May 9 16:59:07 2024 GMT
Subject: CN=313f94d2-47fe-4ca5-9a85-40d52a7190f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:14:89:e7:14:72:e9:48:cc:d8:af:7c:27:
1f:e6:5d:11:79:ba:2d:7e:ce:6d:7d:15:8f:fb:e4:
8b:b0:5b:18:f6:34:ca:46:9f:be:a2:99:c1:f2:ed:
e9:e6:54:71:4d:a9:73:17:08:03:92:a6:a7:01:94:
3f:6e:47:60:8d:cd:3f:3e:74:09:18:b4:fd:bf:00:
ef:5c:d4:5c:a9:ce:b4:be:25:44:96:ec:39:b8:9a:
5b:1b:b9:ba:77:5f:d3:be:40:2b:86:36:2f:a8:ef:
3a:36:cf:9b:08:10:48:62:45:1c:d3:39:16:a8:bf:
f0:b8:9a:93:61:f9:d6:30:f7:23:e0:43:e6:f0:84:
4f:65:37:f1:e1:7b:2e:cb:af:71:29:31:76:4e:19:
90:6c:b6:39:5a:68:89:ae:4e:9a:72:28:c9:73:93:
a5:07:b1:b5:c4:e0:ff:d4:12:c9:5c:bf:79:9c:95:
65:26:9c:28:12:1a:b6:96:4f:8d:d5:7b:ae:8f:2c:
bb:fd:aa:34:67:8c:c6:27:7d:4a:68:d4:23:61:35:
a4:6c:c0:6d:c7:5d:e2:0b:ad:cd:34:70:43:26:bd:
1e:c7:66:83:a6:a9:83:62:d6:18:e0:c2:ed:2a:09:
41:b8:d9:9c:9e:c3:8d:e9:10:39:0c:07:bb:32:77:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1F:4E:DF:88:76:3E:14:34:67:98:92:6C:DA:16:F2:6B:EA:1C:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28bed602-c285-3d01-8056-1db29db078a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:b3:c3:ed:bc:d2:82:7c:54:7d:59:1f:c5:50:b5:62:7e:72:
e9:7e:57:95:fb:6b:72:fd:1f:b9:29:a8:85:db:2a:bc:33:d0:
b5:03:61:02:2d:70:f7:8c:ef:8e:67:73:71:46:16:46:8e:28:
9a:12:70:b6:83:2a:11:04:ab:22:2f:f8:31:31:23:12:ee:60:
01:9a:a3:80:4a:f1:62:76:06:0a:82:1a:50:0c:fd:e0:04:5e:
5d:7a:43:0c:e8:15:39:45:59:32:52:07:db:5f:c2:b1:35:91:
2b:25:70:65:da:e6:7a:3e:cf:42:46:a3:a7:60:18:45:d3:fb:
06:58:66:83:ea:00:c1:f8:a1:43:d2:8a:71:64:67:fe:5d:97:
44:31:38:b9:0f:fb:d8:68:10:cd:f0:7a:b0:ad:51:b7:58:81:
15:24:f3:c8:a3:79:06:65:05:34:20:f5:47:a6:f3:8e:70:25:
34:fd:0c:9d:61:69:ba:d5:c2:58:50:dc:95:49:b4:9c:6b:90:
c8:24:ec:cf:fb:c3:97:a7:38:28:8a:fc:1c:ea:a0:e5:67:10:
c8:09:bc:5a:4f:eb:54:21:89:98:6a:b3:af:84:39:66:da:67:
9a:54:4a:86:a3:24:23:96:78:2b:02:90:c7:c2:9b:5a:a3:a1:
ec:e8:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:08:10 2025 by rpki-client