Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d8db1dd-943e-3606-8256-98cc9f6da5e4.roa
File: 3d8db1dd-943e-3606-8256-98cc9f6da5e4.roa (raw, json)
Hash identifier: 9VHoZlfUD36jsBV9ouWZ9PPvNsoMGeH0/S2h8QwobhE=
Subject key identifier: 59:36:49:51:63:6A:E8:22:B9:AF:D1:06:01:93:C2:09:8B:98:C0:88
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841FAA8FCFEB98AA9C04EA8AB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d8db1dd-943e-3606-8256-98cc9f6da5e4.roa
Signing time: Tue 23 May 2023 17:30:54 +0000
ROA not before: Tue 23 May 2023 17:30:54 +0000
ROA not after: Mon 21 Aug 2023 17:30:54 +0000
asID: 207633
IP address blocks: 166.1.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:fa:a8:fc:fe:b9:8a:a9:c0:4e:a8:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 23 17:30:54 2023 GMT
Not After : Aug 21 17:30:54 2023 GMT
Subject: CN=85dddb10-596b-402c-857c-868662b4ece8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:28:8f:63:9d:65:cf:99:86:2d:8e:ad:b9:
f3:18:52:9c:05:0b:c9:3b:c1:17:cb:d5:42:8f:30:
53:be:0c:01:86:dc:65:37:83:af:7f:25:81:24:55:
c7:6f:23:5e:eb:23:65:61:bc:7d:f2:a7:98:53:68:
d1:9b:73:73:5a:b6:0c:e5:cc:96:a6:d6:f0:7e:f4:
01:46:c7:6c:a2:a7:b2:5e:b4:b1:9d:e0:e1:e8:af:
0e:99:c4:3a:57:20:4f:32:ab:ca:ea:2e:95:6f:91:
b8:9e:ef:68:e2:26:5b:32:0d:fd:02:1c:98:72:69:
c1:5c:13:1b:10:32:08:35:77:85:fa:1a:9e:5d:57:
e9:d3:73:ce:c1:fb:7d:dc:f5:ee:0e:25:7e:11:f2:
69:3c:08:11:c9:02:34:cd:4e:94:e7:a3:1a:b6:3c:
ae:a2:45:d0:5e:f1:8f:1a:43:ce:e9:07:d6:30:cb:
26:5e:a9:49:7a:d4:40:ac:7c:5e:e6:94:d6:8c:74:
71:44:a2:52:2c:23:78:6a:e0:24:2a:b1:e3:fc:57:
c3:9c:00:54:40:93:7a:5b:f6:03:6d:18:78:07:da:
cf:37:a6:07:ee:5f:e5:a1:fc:ac:b4:fa:3f:bb:b5:
61:9f:12:ab:fe:8f:0f:36:c5:bd:1b:3f:42:f8:bd:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:49:51:63:6A:E8:22:B9:AF:D1:06:01:93:C2:09:8B:98:C0:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d8db1dd-943e-3606-8256-98cc9f6da5e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:6d:4d:7f:68:7e:e2:5d:d2:40:ef:46:2a:36:15:18:d6:0b:
33:12:98:aa:87:c3:70:8b:9d:14:cb:78:92:1e:58:3c:b4:b2:
7d:d7:ee:84:bf:af:00:f5:15:09:bf:0c:e2:0f:11:f8:ee:a3:
49:6f:83:5b:f0:6a:bb:62:f1:c4:03:72:af:ab:d2:3c:21:df:
e4:82:47:1b:05:72:f4:8b:b9:9e:7f:0c:3e:db:59:2e:ef:b0:
3f:86:75:f9:2f:a1:73:dd:c0:85:b8:28:4c:40:76:fb:ec:2c:
5c:00:69:5b:1f:8e:94:f8:25:15:61:03:d0:f5:1c:68:a6:68:
b5:b7:1d:3a:30:52:19:b9:f6:15:76:fd:95:4d:04:3d:25:92:
3f:f4:b5:89:ae:11:c7:fc:97:e9:cb:8f:fa:66:79:25:8f:61:
86:92:2f:60:77:00:72:19:4c:3b:17:65:42:68:12:bf:a3:8d:
67:a1:6c:e6:34:c6:55:f7:87:2d:1a:c9:6f:10:60:4b:e7:9a:
66:98:56:77:df:4c:1a:b5:65:c4:b9:bf:55:97:9b:ba:f4:ab:
7f:a6:97:3b:b1:85:62:6b:46:17:fb:ca:1d:1e:c2:2a:69:d5:
f5:83:a1:92:9b:c3:89:36:03:de:45:bd:bb:62:88:5c:f4:55:
7f:30:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:19:20 2025 by rpki-client