Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/435ed6ac-936e-3ae8-ba5e-c0b4dc3344b2.roa
File: 435ed6ac-936e-3ae8-ba5e-c0b4dc3344b2.roa (raw, json)
Hash identifier: NXLLIiuJB+bD2Q9xF5+83zx+4ggyzZduuzCmgRNOEdE=
Subject key identifier: E9:B4:D2:BA:3E:EF:65:F9:6F:A0:A6:F8:D6:A9:60:08:80:80:FE:F1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858424B87333C3171C0A24CACD4A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/435ed6ac-936e-3ae8-ba5e-c0b4dc3344b2.roa
Signing time: Wed 21 Jun 2023 16:43:18 +0000
ROA not before: Wed 21 Jun 2023 16:43:18 +0000
ROA not after: Tue 19 Sep 2023 16:43:18 +0000
asID: 834
IP address blocks: 166.0.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4b:87:33:3c:31:71:c0:a2:4c:ac:d4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 21 16:43:18 2023 GMT
Not After : Sep 19 16:43:18 2023 GMT
Subject: CN=3f9792cc-378e-4357-95b6-6b1a320bd96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:14:56:bb:fd:54:64:45:5c:a6:3a:98:e9:
ca:30:6d:47:ff:da:ea:f6:e3:5a:15:40:58:87:09:
02:63:86:2b:47:ae:04:d0:a7:ed:91:fc:08:a6:47:
51:90:4a:fc:c3:cf:71:e6:ba:28:3d:86:23:b3:35:
ad:4e:a3:8b:19:df:07:61:a5:78:39:c4:a3:30:eb:
51:f6:77:e7:73:17:7a:f9:a5:50:2e:9b:69:d2:8f:
27:e0:f8:df:90:e7:46:9a:9d:ca:97:29:59:76:75:
63:d3:ac:72:1f:d9:f4:ab:3a:b4:1e:f3:35:07:91:
b0:cd:5b:39:a9:c1:d8:84:08:4f:d0:39:5e:ab:b1:
3d:ec:a9:6a:c5:73:43:09:66:58:ca:b4:d6:38:09:
76:00:b4:4c:cf:d7:06:ce:aa:1d:5d:15:77:1e:26:
e4:49:f5:76:9f:58:c4:4b:0a:cb:7d:44:70:98:99:
a3:04:c3:4a:58:7c:ef:fc:e2:d6:0c:3e:a8:1e:9b:
ac:be:98:19:5a:b7:0b:d4:65:78:cf:26:45:de:88:
8b:a1:66:2f:30:fe:11:12:4e:a9:9f:e4:5b:2e:89:
5e:af:dc:65:f5:0c:1d:7a:5e:b5:e5:94:4e:37:84:
be:9f:74:bf:37:fb:f3:5e:8f:39:a2:16:10:11:fa:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:D2:BA:3E:EF:65:F9:6F:A0:A6:F8:D6:A9:60:08:80:80:FE:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/435ed6ac-936e-3ae8-ba5e-c0b4dc3344b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:2a:e7:24:85:39:c9:e6:32:d2:6e:a8:11:b8:9a:34:dc:02:
69:27:b6:51:1b:f9:a9:8a:73:da:20:cf:53:f7:94:0f:cb:db:
f6:92:f2:23:eb:84:ce:b2:40:da:a1:31:09:45:ea:23:c8:d8:
8a:07:da:66:26:83:9f:37:64:4a:78:06:fa:38:13:a2:cf:c4:
bd:c8:35:2e:0d:2d:fb:4f:e9:9c:8a:2d:8e:52:5e:ad:06:5b:
3f:e3:db:83:41:a6:c7:41:25:5c:c7:d5:76:d6:47:36:2e:4c:
85:c2:b2:85:a3:31:ec:e8:d9:87:53:2c:e3:80:af:67:52:53:
97:b3:39:a4:af:b0:61:0d:0a:74:55:03:c5:05:a4:b7:47:a0:
71:8e:46:2b:14:f6:ad:b0:72:3b:7e:24:31:5c:bf:09:48:3a:
3f:62:63:16:13:3c:97:d6:d6:e4:bc:4c:1c:0b:ca:b6:2a:27:
1e:fc:0d:ff:b8:91:16:75:cd:6f:39:c0:1f:69:e6:44:e0:a8:
e3:b1:45:6d:5e:fc:98:d4:98:5a:8b:90:35:6c:50:71:77:75:
09:14:8f:2b:f0:d7:9e:41:8b:5b:7f:99:82:b8:c5:7b:50:32:
ce:b8:74:1b:89:98:06:d9:0f:57:5f:64:6f:32:6d:45:9c:cb:
81:87:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:01 2025 by rpki-client