Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a94f5e4-8c76-33b6-952c-56cf0d8bd47b.roa
File: 2a94f5e4-8c76-33b6-952c-56cf0d8bd47b.roa (raw, json)
Hash identifier: fCCXwzPZWof2Y01DyqScJMp0ldU1yVRhFpeePCUf+5g=
Subject key identifier: 6F:35:13:08:51:A9:E7:89:08:F6:71:76:40:A5:25:2D:9B:62:10:89
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846017AD615AF6B10031648E620
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a94f5e4-8c76-33b6-952c-56cf0d8bd47b.roa
Signing time: Sun 26 May 2024 23:16:19 +0000
ROA not before: Sun 26 May 2024 23:16:19 +0000
ROA not after: Sat 24 Aug 2024 23:16:19 +0000
asID: 834
IP address blocks: 166.0.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:01:7a:d6:15:af:6b:10:03:16:48:e6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 26 23:16:19 2024 GMT
Not After : Aug 24 23:16:19 2024 GMT
Subject: CN=0fb70ffa-7463-48db-8130-01aef59c8dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:70:cc:b8:20:fe:d5:6a:68:c3:2e:c4:66:
86:3f:9e:fa:53:04:0b:93:5a:58:8b:f5:d5:c3:24:
bf:10:fd:8c:58:c9:c8:56:fc:0d:dd:ce:73:48:18:
fe:d7:2c:a8:54:b8:55:b8:6f:4f:d9:ee:d7:a9:f6:
b2:4e:f4:d0:2d:81:41:a2:10:a5:34:7d:d2:f9:3c:
25:3c:cd:81:30:63:5d:fd:e2:3e:aa:44:33:61:1d:
46:2a:4d:bc:32:39:cc:7e:8d:9e:15:0c:c0:fa:06:
4c:e9:6d:2c:a2:66:1e:b1:3f:f4:9e:39:68:9f:de:
30:f0:c5:6a:12:03:d6:b4:9e:e1:fd:70:38:ef:10:
a2:99:18:94:6b:24:43:85:81:8b:61:b3:7d:22:a8:
98:fa:34:70:d4:d2:b0:51:fd:13:bf:cb:56:6c:f4:
3a:06:ed:ce:57:95:bc:1e:ba:7f:20:06:be:4e:21:
50:d3:bf:56:dd:71:2f:25:03:a4:b4:8c:40:3e:f2:
e7:f0:c1:44:a0:fe:97:74:1f:48:d6:ae:f6:67:7b:
34:95:53:81:b6:24:ba:47:47:1c:5b:41:9a:dd:10:
49:a7:e0:38:31:80:49:ed:a3:e5:88:e2:a9:79:90:
75:31:34:73:9e:e7:fa:33:cf:e2:95:24:b0:65:fb:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:13:08:51:A9:E7:89:08:F6:71:76:40:A5:25:2D:9B:62:10:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a94f5e4-8c76-33b6-952c-56cf0d8bd47b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:58:47:ba:03:88:a2:ea:25:15:c7:66:2d:b7:42:08:cb:14:
d7:77:af:fe:1e:e1:20:5e:a3:ba:2f:88:22:a6:03:b0:8f:c7:
97:73:09:45:24:92:41:82:34:81:1d:47:6e:6d:76:c4:4f:0a:
c0:d3:e9:c8:e6:85:b0:3c:a7:e6:a2:76:a9:b2:e2:ad:8a:95:
41:c7:dd:c7:80:e2:29:d1:7d:13:3a:d2:b6:f6:a2:71:f8:b3:
c5:d0:9f:50:f8:8c:36:d6:d4:25:7b:09:c5:22:d1:c3:e8:79:
c7:6a:4e:bd:cd:7e:37:8a:d5:e2:4e:30:e6:cc:ed:ca:0e:31:
b5:ab:df:2d:79:e5:2d:15:4c:de:be:bf:ea:dc:0b:b0:14:04:
77:46:84:fb:0c:e2:44:04:20:22:5b:b1:a0:7b:ff:57:db:cb:
a7:90:ba:24:6c:b8:9a:a9:d0:e5:5e:46:35:27:6a:2d:80:e3:
6c:8b:3e:5c:15:38:16:50:bb:c3:1b:2e:77:4b:8f:e6:c2:5c:
1f:bf:d8:c8:b6:b8:ed:f8:bb:87:77:60:ed:96:b5:89:72:0d:
7d:1b:26:90:61:f6:d8:7e:ef:7a:34:84:99:e4:ff:1f:89:f7:
66:35:df:6b:7c:4c:1c:2f:31:f4:c3:7e:4d:0a:91:4f:e6:e3:
85:69:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:32 2025 by rpki-client