Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4116dad0-f560-3f1c-b2c8-5a4f7078eb2f.roa
File: 4116dad0-f560-3f1c-b2c8-5a4f7078eb2f.roa (raw, json)
Hash identifier: 5jcnU13ybNRtwGd3L7iZYpp4LGzC5MgckIU/igvsrCQ=
Subject key identifier: 2D:DD:A9:CE:C9:2B:52:EA:C2:A7:F5:3C:37:3C:AC:1D:82:16:10:88
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584458F1659C9AEBCE8381C0AA68
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4116dad0-f560-3f1c-b2c8-5a4f7078eb2f.roa
Signing time: Tue 26 Dec 2023 21:36:39 +0000
ROA not before: Tue 26 Dec 2023 21:36:39 +0000
ROA not after: Mon 25 Mar 2024 20:36:39 +0000
asID: 9009
IP address blocks: 166.1.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:58:f1:65:9c:9a:eb:ce:83:81:c0:aa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 26 21:36:39 2023 GMT
Not After : Mar 25 20:36:39 2024 GMT
Subject: CN=f00d9156-f910-4e23-a897-6af5dc8adbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:fb:60:04:89:08:63:62:06:12:f9:74:b8:
b6:d4:ee:9a:54:cb:f2:0b:01:57:89:9e:ba:bc:f0:
b6:ad:b5:6d:37:10:56:48:f6:e1:ed:5c:0b:2b:d6:
24:24:a1:64:0c:93:7c:79:89:a6:2c:c9:79:6d:d2:
34:4c:6e:f9:7f:64:eb:c5:6f:43:ed:e6:b2:27:5f:
43:5c:5d:ee:e3:7e:b7:8a:e5:69:c6:e5:6a:1a:a3:
40:02:3d:18:66:4b:0e:41:8d:a6:7c:dd:ee:06:06:
2f:ea:ef:fe:6b:42:b7:64:31:3a:7b:df:98:83:5a:
0f:23:31:6c:bd:0e:78:db:f1:23:29:c1:f7:e9:43:
31:1e:e5:33:18:b8:6e:8c:f5:2c:86:5f:14:91:1a:
0f:17:bf:88:79:23:15:ff:7d:38:3f:d7:15:1c:65:
af:98:26:f1:b9:6c:fd:85:91:fd:c1:1e:f3:cb:f5:
31:d3:e9:a6:b8:ba:fa:78:d0:de:da:db:6e:6a:f0:
2f:5b:72:ce:7a:0e:a5:93:e0:cd:94:1a:79:22:32:
d0:4d:45:81:45:87:26:12:1c:ce:10:2f:f6:11:23:
0a:03:ba:99:29:dd:57:47:a4:8e:5f:c7:ca:66:13:
51:9c:3a:fd:1a:32:17:0b:af:df:96:ef:e3:c9:e8:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DD:A9:CE:C9:2B:52:EA:C2:A7:F5:3C:37:3C:AC:1D:82:16:10:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4116dad0-f560-3f1c-b2c8-5a4f7078eb2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:2d:d8:de:5f:c8:24:ed:f0:56:16:80:c9:b6:eb:dd:ee:16:
ea:1c:f6:08:de:c3:ae:7e:10:c9:b6:c7:10:7d:4d:70:f9:5e:
7c:39:36:b7:f0:15:43:c8:ca:04:da:09:23:a0:88:6a:0b:4c:
1c:dc:b0:53:44:01:eb:e9:64:86:46:af:15:86:6f:0a:c9:c4:
83:56:8b:ec:31:62:ff:40:76:c0:b4:1c:71:ad:fd:9a:73:a0:
bb:f4:3e:1c:92:d4:ce:84:a4:4f:f0:5a:70:52:d8:67:b6:21:
c7:a0:19:65:a6:62:54:54:26:70:e9:86:a6:9c:46:f0:0f:09:
75:9c:93:ee:88:11:c3:1b:7c:f8:24:fc:08:81:87:9e:af:2c:
8a:78:8a:9e:69:4b:2a:b6:2d:2a:0e:27:be:0b:ea:ae:f9:9c:
5e:24:e2:8e:dc:ee:1c:f1:4b:61:61:82:9f:73:58:71:87:49:
82:22:e1:cf:fc:4b:80:96:d5:e5:de:1e:d7:6e:c8:8c:b1:f4:
fc:06:d7:30:79:5e:c6:1b:31:fc:ff:1b:6e:a7:eb:4b:70:26:
f2:10:61:50:36:4d:c3:a2:c0:76:c6:9d:f2:0e:62:37:af:a8:
8b:b3:38:ae:32:5c:bc:e6:55:82:45:05:aa:49:66:3d:be:e7:
2d:3a:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:03:59 2025 by rpki-client