Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/348ba3e8-8b78-3a5f-a034-a299708fa252.roa
File: 348ba3e8-8b78-3a5f-a034-a299708fa252.roa (raw, json)
Hash identifier: gnpRjft/oe4QxK4CspqjkZd4IHfEyHOzhLRYJwvV2zE=
Subject key identifier: 53:6C:51:63:96:BF:01:8F:D4:10:37:F8:3A:07:D3:26:33:D3:F4:0A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583A633C9DF9A3424BE83E82B000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/348ba3e8-8b78-3a5f-a034-a299708fa252.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Fri 29 Sep 2023 04:00:00 +0000
asID: 23352
IP address blocks: 166.0.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:63:3c:9d:f9:a3:42:4b:e8:3e:82:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Sep 29 04:00:00 2023 GMT
Subject: CN=eed4daf6-71f7-4955-b952-b4269c3f3875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:73:b1:1b:72:16:29:ca:88:9b:e1:67:02:
e1:bf:ea:1b:9f:d9:aa:cc:00:59:54:e0:19:54:51:
6c:da:d0:d5:a1:83:6f:65:f0:34:b0:e5:f4:2a:72:
3c:0e:98:f1:ca:82:cb:9b:af:7f:48:d1:f0:91:fd:
68:49:05:34:ca:31:2a:23:4c:d9:42:c7:45:77:d5:
59:0f:ca:f1:88:13:dd:fc:81:b9:a9:75:55:00:5b:
3e:98:d5:04:23:4d:b3:1e:a2:8d:e8:5a:e3:ed:f3:
c9:b5:61:83:da:7f:65:23:4b:05:a9:2b:e3:cb:94:
1c:37:a9:c7:31:b7:17:aa:ff:82:58:36:18:c7:a4:
bf:cb:dc:7f:77:87:8e:fe:67:f8:b7:2d:cc:9f:4b:
c1:8b:a4:15:96:bd:f4:60:f7:a0:e7:8a:00:5d:78:
e5:58:08:10:ce:f7:5d:b1:2a:f1:df:1a:2d:4a:6a:
c1:7d:80:5f:b7:9f:bc:c6:bd:71:0d:38:a5:31:ab:
2a:0d:b5:be:b7:7c:fb:09:b4:ee:0b:95:8c:10:69:
16:b1:c5:b6:37:fa:7f:f6:2a:03:9f:30:6d:07:4f:
d9:46:97:57:35:74:5d:9f:9d:9e:bf:87:01:0a:31:
cf:bf:d3:98:53:d6:f8:0d:25:66:56:04:d6:42:78:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:51:63:96:BF:01:8F:D4:10:37:F8:3A:07:D3:26:33:D3:F4:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/348ba3e8-8b78-3a5f-a034-a299708fa252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:67:de:68:7f:a7:8f:be:fe:2b:a9:cc:92:c0:b7:9e:fd:c6:
be:fa:b8:ef:3f:b3:10:2c:c3:44:b2:be:a9:a8:4d:d2:fc:fc:
76:4d:cb:bf:88:d5:b4:3c:ed:e9:bf:88:25:00:c4:0d:d6:19:
df:64:7b:c1:07:78:be:9e:d6:06:5d:93:9a:64:65:92:74:06:
3f:0f:db:ce:3c:53:29:cc:e2:64:8f:5a:4d:24:23:d9:f6:d5:
9a:9e:65:30:b1:4f:4c:d6:3c:13:25:42:2a:83:b9:9d:fb:58:
cc:5f:b9:e9:03:4d:ad:92:3d:47:01:6b:a1:c9:16:85:7f:ca:
5c:5b:91:42:73:d0:fb:bf:48:cc:d9:06:de:c9:dd:bd:a3:57:
c9:e4:b6:c4:9e:92:1d:43:49:4a:71:70:b5:00:b1:68:3b:73:
ac:4b:3c:ab:05:7f:e7:6c:02:7f:4d:f5:c5:2b:ab:37:e3:42:
58:ab:fc:35:f0:8e:4c:13:ce:f2:a4:39:c3:d5:18:86:3f:ca:
38:4f:61:39:52:62:35:5e:ad:96:dc:14:26:7d:e5:78:c5:ec:
e9:24:88:27:b9:f4:dd:6c:c0:07:eb:b0:8e:21:31:0e:6c:82:
79:89:ec:2c:ae:9c:bd:f3:1b:60:ee:d3:35:04:3c:de:e0:60:
b3:36:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:11 2025 by rpki-client