Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d200dad-a76c-3713-91ec-0a68efa4a1af.roa
File: 3d200dad-a76c-3713-91ec-0a68efa4a1af.roa (raw, json)
Hash identifier: HtQJ2LivqXJNSXLfaxwala55xC3dxyeKmSve2DzaNDw=
Subject key identifier: 95:18:23:93:C8:FB:6E:D9:D6:BE:1D:FD:50:9B:16:B4:97:C1:12:AF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858441C79E93706840835F4BB7200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d200dad-a76c-3713-91ec-0a68efa4a1af.roa
Signing time: Tue 05 Dec 2023 05:47:24 +0000
ROA not before: Tue 05 Dec 2023 05:47:24 +0000
ROA not after: Mon 04 Mar 2024 05:47:24 +0000
asID: 2914
IP address blocks: 166.1.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1c:79:e9:37:06:84:08:35:f4:bb:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 5 05:47:24 2023 GMT
Not After : Mar 4 05:47:24 2024 GMT
Subject: CN=70d81721-da2a-41bc-882c-920d118e5f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:3f:af:57:2c:e1:11:67:ee:d3:8b:8f:d4:
e5:9f:a3:28:03:de:11:b0:18:61:c6:d0:80:71:ee:
f4:b9:fe:ec:bf:76:07:95:f3:d1:45:a4:b1:fd:a4:
da:e4:9a:5f:e4:21:80:61:8a:07:14:b5:99:b6:59:
a9:90:7b:0b:10:90:2c:54:f1:8a:cf:2d:b9:e8:de:
cb:ae:c7:dc:15:f6:d1:b2:1d:ec:b6:bb:cf:bd:0c:
7d:51:ce:df:c7:a8:38:e7:7d:46:fd:66:a6:29:90:
66:b8:35:f9:7c:2f:35:e5:24:3d:dd:3d:67:d8:60:
bb:14:1f:ae:50:37:1e:77:d0:c4:1f:c6:dd:07:e1:
f5:51:ef:6a:ad:59:fa:ec:35:4c:a1:47:94:70:d8:
af:b5:13:13:f9:61:ee:f1:0c:a9:fc:50:ac:85:5e:
24:ad:fc:ae:20:bb:4b:81:eb:b5:17:4e:ab:00:55:
0c:86:78:5a:61:3a:12:aa:41:a0:6a:22:9e:d6:f1:
aa:d4:b3:e2:b2:48:0a:7b:0d:f8:e0:3c:95:03:e6:
e6:90:d5:cc:ad:8e:83:a8:69:72:c9:46:fb:18:97:
4d:6b:a6:09:75:c3:1f:04:bb:82:7f:66:9c:2d:4f:
f4:1e:bd:b9:a9:7a:99:04:eb:89:ab:15:09:f3:6d:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:23:93:C8:FB:6E:D9:D6:BE:1D:FD:50:9B:16:B4:97:C1:12:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d200dad-a76c-3713-91ec-0a68efa4a1af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:55:53:1d:64:0b:08:38:53:b3:80:7a:86:fb:99:40:17:27:
dc:ba:9e:75:85:55:d9:24:df:34:d0:54:df:06:c7:b8:5b:74:
ad:23:c4:41:3e:d0:40:63:0a:44:6b:9a:a3:6b:1a:42:d3:6f:
1d:10:c0:8b:23:d9:af:7a:bf:5f:06:c1:e0:ab:8b:61:94:21:
dc:51:1b:fa:4a:c5:01:cc:8a:e2:88:5b:01:7f:06:ec:c1:48:
10:7f:79:6a:1b:d2:f0:0e:27:5d:97:69:8b:1f:14:af:c5:8c:
bd:4d:1e:48:9c:2f:5e:50:dd:64:c4:aa:1d:af:d3:a8:05:62:
76:d4:54:b0:13:95:79:de:eb:ae:d8:aa:78:ef:ff:d4:31:c2:
aa:ba:09:27:63:be:bf:d9:ea:19:17:66:00:a8:7a:5d:4e:64:
24:e0:e8:b1:5e:00:92:e4:09:46:9a:54:66:ec:b0:93:60:c5:
84:1d:ea:c3:14:7f:8d:ad:2a:e7:87:0b:61:f3:d1:d7:eb:43:
6c:ac:dd:06:2f:7a:98:dd:de:72:19:ba:0b:cc:f4:75:2d:0c:
13:75:0f:47:db:4a:26:f9:01:f8:0a:a9:2d:1c:23:ef:9e:21:
10:32:a7:97:71:db:49:4e:ed:bc:13:8a:e6:6f:b6:69:94:78:
6a:de:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:43 2025 by rpki-client