Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35b445dc-f380-3921-ade8-8f998c450288.roa
File: 35b445dc-f380-3921-ade8-8f998c450288.roa (raw, json)
Hash identifier: NZWBs3WpBDtaGb+QTEmH3TtZlD8KD7Lj6/h2a1hJ6l0=
Subject key identifier: 6D:57:99:29:20:7D:87:32:8C:BF:30:C5:29:AA:36:0A:D3:87:5F:BD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584532889DC8EE3AD9E9C9E3EEA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35b445dc-f380-3921-ade8-8f998c450288.roa
Signing time: Wed 13 Mar 2024 20:11:45 +0000
ROA not before: Wed 13 Mar 2024 20:11:45 +0000
ROA not after: Tue 11 Jun 2024 20:11:45 +0000
asID: 11798
IP address blocks: 166.0.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:32:88:9d:c8:ee:3a:d9:e9:c9:e3:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 13 20:11:45 2024 GMT
Not After : Jun 11 20:11:45 2024 GMT
Subject: CN=4fbd053c-7be1-41d7-a1b4-c493a0ef08c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:36:52:97:c9:8d:e3:fe:d8:2c:13:aa:2c:
b5:2f:c3:02:aa:53:df:30:87:0d:1d:6e:10:8a:3c:
ca:bb:99:40:6c:ca:ef:77:3b:4f:ba:0e:36:61:3c:
a5:10:75:9f:90:e9:19:73:c1:ea:30:4a:4a:f0:5c:
ab:9b:20:f0:4c:9c:18:78:2c:f2:ab:b8:55:c7:c9:
7d:ef:c3:f0:48:c8:d4:66:df:2a:75:fd:e7:ec:b1:
8e:ac:b7:b0:f9:d9:9a:6e:46:00:a8:07:37:6d:86:
6d:de:0c:f6:5c:89:11:01:19:71:36:21:fc:5b:c2:
20:79:9b:ef:40:fb:57:49:29:df:e1:47:5b:c2:1f:
66:42:cd:35:e5:59:92:5f:b3:87:fd:de:a9:74:3c:
95:41:6d:1f:a3:c8:da:c2:e6:48:24:3a:76:75:4d:
8f:4d:2c:cc:65:85:40:9d:28:8a:42:fc:0f:79:6a:
4d:25:a5:f0:5c:99:34:a9:9e:07:49:2b:02:02:3e:
8b:12:e1:3e:86:9e:d4:a8:64:05:42:88:6d:3c:36:
b8:75:b4:7d:6c:18:8c:da:02:47:b3:97:32:b5:e7:
d9:10:ba:18:19:9c:45:e5:90:f4:b7:af:f1:6e:0d:
74:6f:ca:7e:e6:97:7f:14:e1:27:64:a8:87:c4:82:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:57:99:29:20:7D:87:32:8C:BF:30:C5:29:AA:36:0A:D3:87:5F:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35b445dc-f380-3921-ade8-8f998c450288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:86:96:56:75:af:4d:66:c4:31:f1:f4:f5:2e:4f:be:99:1a:
23:6e:61:16:4b:e0:33:28:65:6b:8b:4c:10:b2:f5:a8:b0:10:
0d:4f:95:63:39:08:cd:93:62:4d:6e:ac:93:e4:40:07:54:5c:
72:bb:11:17:b1:8c:71:e6:99:76:61:77:4d:f4:65:cc:bd:25:
77:8b:42:00:99:a8:8f:cb:d4:7c:d7:e3:91:f2:b7:ec:08:7a:
2a:0a:5a:3c:7d:e9:a4:6f:c7:de:67:75:c1:e8:e9:9d:cd:a5:
6a:99:86:29:26:b8:10:cc:02:d0:6d:47:18:01:ca:4f:01:39:
14:db:c0:9f:96:dd:cb:9f:f1:07:33:69:03:91:d0:1a:b4:6d:
df:61:a8:00:f1:9a:3b:35:db:e9:77:49:6d:07:43:3d:a3:96:
77:dc:22:7d:60:0a:0c:62:a4:ce:84:5f:6a:60:d0:5b:40:d7:
8b:08:3e:bc:5d:8f:c5:71:1c:b3:46:67:f3:ba:b8:1e:8b:61:
c5:2f:e7:c2:85:aa:76:53:98:b3:af:8f:e7:3e:ac:e6:78:8a:
ca:d8:b5:3d:2c:8a:09:61:a5:b9:d4:82:12:55:13:c6:46:61:
02:e3:cc:fa:d5:f6:ca:5f:2d:e1:78:13:74:a3:89:d3:17:88:
6f:ca:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:33:35 2025 by rpki-client