Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/428dde12-86a3-3ca7-89db-874c5fefa378.roa
File: 428dde12-86a3-3ca7-89db-874c5fefa378.roa (raw, json)
Hash identifier: 6Pw+43TdhbvBePUfFSISc6e79ADCkd9iZiVX5hnIXvc=
Subject key identifier: 09:35:34:79:09:D5:AC:DD:80:25:7F:D9:8D:7B:C3:88:15:9D:E1:75
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D6CD3926B1334058737B8560
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/428dde12-86a3-3ca7-89db-874c5fefa378.roa
Signing time: Thu 10 Aug 2023 14:01:45 +0000
ROA not before: Thu 10 Aug 2023 14:01:45 +0000
ROA not after: Wed 08 Nov 2023 15:01:45 +0000
asID: 21082
IP address blocks: 166.1.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d6:cd:39:26:b1:33:40:58:73:7b:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 10 14:01:45 2023 GMT
Not After : Nov 8 15:01:45 2023 GMT
Subject: CN=574aa9e9-4b24-4737-bfb0-cf0dc0ee9203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:ce:13:e6:3f:5d:72:32:f2:2e:ea:1f:d2:
14:b2:60:64:06:a6:9d:0e:19:5f:32:84:2a:5d:b6:
8a:d0:d5:6e:2f:0d:83:28:89:bc:0f:d2:3a:be:00:
db:02:74:1a:d9:28:88:8b:24:ee:2e:aa:83:39:77:
db:6d:e2:cd:31:ef:f9:81:bf:3d:71:11:72:6d:d7:
2e:92:d1:57:f7:7d:11:a0:ec:da:21:5c:f6:99:bd:
81:ac:74:38:67:85:55:c5:01:c4:68:bf:b6:36:ca:
c1:d4:92:28:10:b8:aa:31:16:78:1e:80:f7:0b:6b:
c1:f5:7f:24:37:86:1f:7d:09:61:64:04:6a:9b:01:
4a:f1:83:20:d7:98:e7:73:36:b8:ce:d9:ed:2f:0c:
b9:8d:b6:2b:2b:c1:08:a4:14:39:20:fd:84:8d:5f:
1b:a4:36:c2:49:a5:f5:92:98:9c:b9:f8:f8:a1:c6:
7e:51:d2:d8:27:2f:52:46:d4:f2:91:41:ad:09:56:
32:e6:0d:2a:be:79:f1:4f:d0:ca:a3:91:07:52:27:
30:b2:f7:34:f6:b4:28:46:4e:7c:c2:91:ec:2e:4d:
ff:52:73:af:dd:7d:26:6e:42:73:62:93:93:82:92:
fa:49:38:7b:a9:ab:18:e5:3a:cd:45:66:fa:8e:55:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:35:34:79:09:D5:AC:DD:80:25:7F:D9:8D:7B:C3:88:15:9D:E1:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/428dde12-86a3-3ca7-89db-874c5fefa378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:52:c4:5a:98:87:f6:1d:3a:fe:1c:79:b9:98:3d:86:70:60:
67:94:e6:a8:99:46:6d:d9:7a:72:04:6c:c8:8e:05:f2:2e:5a:
28:5d:d9:54:34:a4:8b:96:18:46:5e:2b:c1:56:85:2a:16:0d:
16:c7:61:37:22:05:98:50:ee:39:c8:06:0c:41:85:12:94:76:
58:7e:47:fc:6a:92:b9:24:2d:40:61:9b:4f:7f:0b:3e:91:80:
d9:74:27:34:16:cf:a7:b4:0d:8e:c8:83:60:a7:81:81:a2:ee:
92:bd:7e:d5:c4:82:64:43:f0:c8:36:f2:67:ba:6e:da:7f:b6:
63:d1:f0:15:54:fb:9f:98:ac:0b:ad:bc:48:a2:3f:e3:2e:2b:
a5:4e:7e:d8:f5:11:1e:c1:13:fb:bb:af:12:f4:1c:fd:44:b4:
4b:c3:3e:6d:62:2b:d5:44:7d:f9:3f:4f:2d:1b:51:c9:1d:a1:
3c:c3:96:32:28:ec:08:5c:f3:a8:ed:58:56:09:29:35:26:e7:
0a:35:5a:0c:d0:17:57:75:8d:b3:ba:3a:fb:df:56:3a:0a:a4:
2a:52:10:f6:f8:26:5f:52:f7:53:eb:01:e0:1c:e3:ae:b6:82:
18:3a:91:22:83:75:4b:38:70:a0:2c:d8:4b:69:36:08:d7:1c:
1b:02:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:58 2025 by rpki-client