Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cd10b5a-91c0-317a-b61b-b3c75f4dd6ab.roa
File: 2cd10b5a-91c0-317a-b61b-b3c75f4dd6ab.roa (raw, json)
Hash identifier: 3f2yyRDai61hzMz4OHM/GERqU/fT/WwFarQpKCdLOdA=
Subject key identifier: F9:93:AD:0D:B5:84:A2:60:46:8C:28:E9:2E:B8:59:F1:DC:0C:F9:9E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583CD29936032D7E6823684902C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cd10b5a-91c0-317a-b61b-b3c75f4dd6ab.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Thu 09 May 2024 04:00:00 +0000
asID: 61317
IP address blocks: 166.0.210.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:d2:99:36:03:2d:7e:68:23:68:49:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : May 9 04:00:00 2024 GMT
Subject: CN=9907a2e9-939a-4f5a-a518-84e6e946ba3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:4b:0c:0c:34:d2:28:cc:fa:72:03:38:41:
49:ab:82:34:be:c6:1b:93:3e:51:a6:c5:65:77:ea:
42:5e:21:97:81:ee:95:6a:31:a0:fb:dd:b9:34:63:
a1:37:bf:0d:e7:16:1c:c0:56:d5:63:af:be:98:07:
7f:c3:64:c6:35:78:1e:4a:f9:76:c6:28:fa:56:5c:
2c:b3:fe:e0:c8:6a:df:78:1b:4a:80:d8:50:81:e6:
01:6c:8e:a1:89:b1:d5:cd:37:1f:e5:98:46:93:15:
66:6c:f6:da:ad:28:e8:f7:15:e9:c9:25:f6:70:3e:
17:ee:5e:30:0d:1c:1c:ca:f6:9c:aa:10:e6:b6:76:
b9:47:35:97:a8:ae:36:21:f0:cb:c7:57:83:dd:b3:
bd:db:ae:95:35:cc:cf:2d:da:b8:ff:e2:af:c0:ef:
e8:26:2f:6c:c1:32:99:1d:b8:43:b4:13:2f:ae:a5:
6c:42:c4:08:d0:3e:2d:01:d9:47:b6:58:54:55:2c:
dc:d0:26:55:a7:12:69:75:2f:21:99:65:20:41:f3:
bb:ef:62:f2:a4:21:e2:cf:53:65:b2:cd:df:a5:9b:
2d:92:2f:a8:81:36:c5:0a:72:58:5b:ef:c2:bd:f5:
04:2c:ee:f1:fa:b4:45:ce:cb:ef:49:6d:a0:ad:8e:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:93:AD:0D:B5:84:A2:60:46:8C:28:E9:2E:B8:59:F1:DC:0C:F9:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cd10b5a-91c0-317a-b61b-b3c75f4dd6ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:b4:c9:29:43:85:08:78:5d:85:e7:0d:12:4c:1d:b4:b5:fe:
34:54:87:1a:82:0a:87:01:68:da:d5:cd:9e:f6:bb:39:a6:4c:
e1:9f:68:37:99:1f:70:44:40:ec:8f:d2:bd:58:1d:30:d8:30:
82:8c:ff:30:eb:0e:7f:4d:c1:82:9a:e0:ec:ac:f9:d1:1b:2f:
9d:64:2b:fd:0b:41:0b:63:da:67:46:68:cc:7c:eb:22:ab:2f:
8d:75:e5:70:e7:48:e1:cd:a6:99:20:66:ce:88:1e:86:53:95:
97:ed:a4:56:b7:4a:7c:dc:85:68:60:1c:b3:1c:e7:a6:4b:58:
70:59:d2:cf:f6:c0:e0:b6:a7:0b:1b:6b:d1:e0:e3:05:a8:0f:
f6:27:07:34:d6:25:c0:06:d6:e2:73:74:2f:4e:9f:0c:2a:03:
6a:cd:70:31:ad:1a:61:9a:63:fe:43:39:9e:d7:71:15:18:0e:
25:3a:b2:ae:20:83:fa:c5:e1:21:78:cb:ac:b4:e3:9d:e9:d8:
73:6d:49:06:58:a7:6f:de:0c:e2:73:57:01:19:74:c7:d6:7d:
84:b1:41:74:27:67:73:76:e5:84:05:fb:ff:b8:10:bf:7f:08:
6b:39:cf:c7:ca:2b:a1:3b:a0:52:01:60:60:d2:8c:cc:ed:62:
e6:3e:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:12 2025 by rpki-client