Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42940de6-17ab-31a4-9192-c7697436a605.roa
File: 42940de6-17ab-31a4-9192-c7697436a605.roa (raw, json)
Hash identifier: B8Rr2oDW5ZjLqakt1DP4I3LKRGQMGSpAbqKXdqQ4m7o=
Subject key identifier: 48:AA:0B:C8:4B:DE:3B:09:4C:CB:3A:DA:1A:9C:3B:0E:28:EF:EC:CF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583B173402C0734EA33BDBABF880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42940de6-17ab-31a4-9192-c7697436a605.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Sat 02 Dec 2023 05:00:00 +0000
asID: 19437
IP address blocks: 166.1.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:17:34:02:c0:73:4e:a3:3b:db:ab:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Dec 2 05:00:00 2023 GMT
Subject: CN=4be8444a-71ba-44e6-b014-ff5ceb433be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:19:32:3b:76:aa:ad:06:78:db:fe:85:bf:
e9:fb:1c:33:34:d9:04:1a:67:11:99:72:59:a4:40:
99:e3:3a:28:b0:bd:91:22:39:06:3e:8a:75:11:68:
5f:6a:68:9a:5a:5d:f1:f4:09:c1:7b:c4:5a:75:47:
b3:68:bb:f7:f7:64:58:0b:0f:1a:8a:0d:9b:68:4a:
0d:e0:d5:1a:ec:5e:4d:4c:7e:a0:01:16:f8:08:cc:
52:cd:c6:7d:f1:91:c5:97:90:5e:7e:33:39:50:7b:
6e:a2:7d:a6:e7:59:6a:ba:fe:55:8a:20:08:9a:df:
d2:50:6a:0a:94:5a:8e:fd:57:7c:e9:05:0a:bd:38:
16:ab:2c:9f:e7:34:17:67:62:88:3c:e7:e8:c2:4b:
aa:2e:f7:80:e3:7b:0d:ab:4b:72:1c:cf:3b:c6:6b:
33:df:13:03:13:de:f0:01:74:1f:49:52:93:79:2a:
6a:cd:fa:25:fe:2d:e5:21:34:fb:64:42:f2:a0:2c:
23:9d:4c:8e:e9:a1:0d:37:e0:32:16:67:7a:34:8a:
9e:a3:76:3b:fe:4c:f4:49:cf:d7:d1:62:4d:49:21:
3b:2b:fc:de:7f:85:b8:4b:da:ce:f8:02:70:a6:78:
b2:59:22:10:f7:76:7d:f3:35:65:f3:63:b4:7f:52:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:0B:C8:4B:DE:3B:09:4C:CB:3A:DA:1A:9C:3B:0E:28:EF:EC:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42940de6-17ab-31a4-9192-c7697436a605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:cb:3d:a2:3f:66:68:fe:76:1e:e8:5a:ff:df:f5:fa:da:05:
fe:48:f0:3c:a7:d0:1c:64:24:5d:2e:2b:eb:83:96:b1:14:4c:
a3:b1:eb:07:39:43:b7:58:49:87:36:af:48:a7:0b:68:f6:a4:
f6:18:a5:2b:50:f0:1d:66:c4:6f:36:7a:03:97:30:69:48:8c:
38:c9:98:f2:97:fe:a3:a4:fc:ef:52:a0:28:7f:cf:de:6d:52:
8c:fb:11:87:60:76:f6:4b:67:d2:ab:6d:b3:7e:29:d2:ed:5a:
15:d1:f0:4c:58:44:4f:4c:90:3a:25:fb:ed:54:80:5f:83:b3:
23:47:d1:e1:3c:43:b5:5c:f2:b6:c5:8f:48:e2:a8:50:d9:6d:
85:24:f9:25:bd:14:e9:81:34:52:49:62:90:e6:e9:f1:21:f4:
4c:64:e9:7d:1e:78:37:b6:67:20:ba:2d:1f:c6:32:52:87:c6:
2e:e1:d1:76:1f:3d:44:67:28:62:f3:be:82:21:df:2b:34:5e:
bf:a0:be:dd:de:f3:3d:25:0f:1a:f0:c4:19:42:8b:fc:bf:fc:
52:45:4b:48:80:27:1d:c5:f8:3c:57:6d:4c:85:1b:72:f9:1e:
88:cb:77:7b:b9:3e:a0:1e:f3:24:79:80:6e:28:eb:e4:df:b6:
53:3a:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:04:39 2025 by rpki-client