Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3c73110d-ba82-3c7e-a2db-713f6ad7fbe4.roa
File: 3c73110d-ba82-3c7e-a2db-713f6ad7fbe4.roa (raw, json)
Hash identifier: LVecYhTEPvBlzRlFjIqwytc8jTUC3mrjdnL7CwnqhEE=
Subject key identifier: 95:43:27:53:98:23:73:67:C0:03:8E:FC:2B:00:61:6D:AC:45:51:93
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841F7CD728F9E6C832940D24280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3c73110d-ba82-3c7e-a2db-713f6ad7fbe4.roa
Signing time: Mon 22 May 2023 16:56:56 +0000
ROA not before: Mon 22 May 2023 16:56:56 +0000
ROA not after: Sun 20 Aug 2023 16:56:56 +0000
asID: 398465
IP address blocks: 166.0.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:f7:cd:72:8f:9e:6c:83:29:40:d2:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 22 16:56:56 2023 GMT
Not After : Aug 20 16:56:56 2023 GMT
Subject: CN=8be4d26b-3dff-4705-8ffb-e4cdefd1e431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:50:2a:0c:a8:2b:ce:38:f9:66:6b:a8:ef:17:
0d:45:f7:10:aa:1e:fa:a9:14:7c:fb:0d:89:a3:3f:
4f:96:d7:20:12:8b:52:cd:38:a7:8a:f8:38:a9:c8:
0a:d6:ac:57:58:33:ea:5a:4c:84:45:23:de:09:9e:
e1:94:e6:35:9e:10:b5:0f:db:6e:e6:d2:d5:32:a0:
ce:c4:fe:26:01:06:06:19:94:b5:2a:e1:a1:bc:d4:
9a:6b:4f:fc:85:bf:86:af:41:c8:14:ac:17:1c:bd:
64:86:56:a2:52:05:7c:06:6c:ed:6d:88:1b:00:99:
c3:4d:5d:38:18:e5:18:c3:9c:25:cd:dd:91:d2:3f:
b8:bb:4e:56:87:5c:7a:21:1c:33:3f:9b:32:f0:ba:
02:94:35:ae:4d:be:ed:cf:04:f5:20:1f:9a:38:fe:
a4:e8:75:44:e0:41:f4:3a:f8:4e:fe:9d:bd:32:e6:
fc:a8:f3:22:61:ca:f2:a1:5d:e8:9c:75:bb:c8:8a:
f0:ed:a2:e8:bf:4e:54:b4:81:89:36:8f:71:21:6a:
43:d7:a0:e3:f4:74:32:16:90:d5:12:12:47:7b:cf:
5b:3b:fb:ef:dc:dc:34:75:69:b8:d2:20:7e:03:22:
a5:a1:07:2c:bc:5d:01:1e:03:0c:c2:12:b8:c5:cf:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:43:27:53:98:23:73:67:C0:03:8E:FC:2B:00:61:6D:AC:45:51:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3c73110d-ba82-3c7e-a2db-713f6ad7fbe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:10:3c:b3:de:1a:06:b2:3a:fc:c5:2d:e9:6e:19:1b:5c:f2:
d8:48:f1:7a:7d:74:f5:23:08:20:cc:91:6b:14:ea:49:8a:7a:
d5:bc:8d:ff:07:2e:ab:5e:1c:9a:a0:dc:ce:1d:8f:95:e4:54:
a6:f7:d0:74:3e:54:75:6a:43:cb:38:c7:35:c5:0b:07:1f:94:
7b:79:00:d3:a3:27:c8:53:ab:51:e0:db:77:94:78:3e:da:ee:
0c:8f:0e:82:e7:69:2e:66:ae:13:78:1b:8c:93:2b:d7:c3:0c:
14:4f:ad:ed:a1:78:06:ee:4b:21:1d:b0:10:67:8c:6c:87:6d:
39:47:10:66:70:33:09:f0:c5:e2:a0:c7:c1:35:f9:8a:32:07:
78:c0:60:ce:95:9d:8e:de:2a:be:b4:22:dc:6b:ef:38:55:3e:
b3:f0:cc:d2:93:51:6c:bf:3e:cf:a6:81:9f:1c:a2:f6:da:89:
2f:93:6a:cc:ca:a2:0a:90:07:fd:ff:57:09:a4:92:fc:99:39:
67:0f:07:54:dc:ef:04:71:b3:64:1d:f3:8b:f7:d1:53:47:b3:
8b:2a:6a:66:46:55:9d:36:a1:4d:f7:9e:ec:e9:71:bf:0e:44:
ff:c4:e1:b8:36:8b:80:24:9d:24:cf:38:5f:05:c8:ec:8d:cf:
8b:88:7f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:48 2025 by rpki-client