Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/436a9db6-70f2-3d34-b059-00b6a01fd72f.roa
File: 436a9db6-70f2-3d34-b059-00b6a01fd72f.roa (raw, json)
Hash identifier: /WhRPWN64MiIABuJ+Vv6r7gJkuAPO1nnPY1Ka166CNI=
Subject key identifier: 07:3C:35:00:3C:A2:1E:DC:B2:BA:B9:7C:D1:B3:AC:28:DF:BC:22:52
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843841F792DD99D2CAA4161FA70
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/436a9db6-70f2-3d34-b059-00b6a01fd72f.roa
Signing time: Wed 11 Oct 2023 16:02:19 +0000
ROA not before: Wed 11 Oct 2023 16:02:19 +0000
ROA not after: Tue 09 Jan 2024 17:02:19 +0000
asID: 834
IP address blocks: 166.0.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:84:1f:79:2d:d9:9d:2c:aa:41:61:fa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 11 16:02:19 2023 GMT
Not After : Jan 9 17:02:19 2024 GMT
Subject: CN=aa354c39-3827-44a6-9e07-730c9a2848c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:6b:88:8a:40:77:f8:06:e4:3d:25:b2:01:
e2:3e:07:d0:c7:b9:ca:b5:ba:9f:69:bd:7e:56:5e:
66:d7:95:11:41:e4:a1:76:14:6d:26:77:0a:95:fc:
18:af:6a:ed:e7:44:a6:ff:91:2d:eb:49:e3:03:a9:
78:d5:4d:bd:85:aa:52:40:0d:ed:2e:7b:72:19:12:
a2:6a:0b:2a:fe:b1:ff:5d:e2:fc:30:af:11:cb:fb:
29:b3:2a:65:4a:9b:75:5f:63:0d:c1:45:ab:0b:72:
a5:57:1f:3f:79:f9:97:14:9a:e8:e9:e9:02:1c:8e:
55:c8:a2:c2:20:56:d0:50:67:ac:42:dd:8c:38:07:
42:44:30:dc:db:02:ad:9b:f7:8e:0a:6c:8a:d3:62:
99:ac:7c:b4:92:4c:a4:c6:bd:79:4e:24:ed:4f:f4:
d5:6b:87:36:21:c0:76:f0:ba:1f:f3:72:11:ab:47:
65:8a:ff:33:c0:ef:57:fb:14:69:c5:85:41:a9:54:
49:ef:cb:6b:af:2f:5d:eb:df:07:8e:1a:59:74:3f:
c2:9d:61:e7:11:ed:5d:5d:dc:ec:02:37:dd:70:f4:
21:62:c4:b4:cf:3b:a9:8c:14:37:7b:a3:4d:62:e0:
f8:99:ac:af:94:b4:8d:7b:f0:97:91:a0:c1:a5:9d:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:35:00:3C:A2:1E:DC:B2:BA:B9:7C:D1:B3:AC:28:DF:BC:22:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/436a9db6-70f2-3d34-b059-00b6a01fd72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:b9:eb:ae:bd:cc:01:c3:32:41:5c:cc:2e:b0:b4:af:d6:3d:
15:30:2c:d3:2b:e6:bd:f8:7a:ed:ef:50:13:30:00:51:9e:68:
f6:e7:44:8a:ff:13:5d:9a:a3:d3:31:05:47:7a:9b:72:71:b5:
97:47:14:50:3f:e0:98:c2:cf:8b:80:0a:b0:18:92:0a:a4:b0:
88:51:bd:28:60:93:43:bc:13:d1:2f:b2:f0:03:8c:05:56:a7:
aa:3e:ad:0f:7f:69:08:a7:62:e7:04:9f:ec:10:ef:aa:07:99:
64:27:b0:c2:48:bf:30:ef:a6:94:e1:86:df:06:92:41:43:60:
e3:c7:a1:be:9f:06:5a:0e:4f:22:a8:8b:b7:ed:61:88:44:8e:
67:be:91:36:80:be:5d:6b:d1:5f:8e:54:32:57:da:d1:f0:72:
e1:3f:be:43:ec:f4:5d:bb:9b:64:d9:5c:8b:e2:33:9d:3a:53:
7b:0e:be:25:8b:0a:ec:38:f1:51:59:b2:ce:54:43:40:3b:d7:
bd:cf:89:7f:b2:ab:14:47:6a:77:12:11:ed:0e:d2:db:28:df:
cd:65:c5:33:d9:df:22:c0:3b:1a:d6:a4:af:fc:84:72:c5:5e:
2b:dc:c8:13:cb:1e:f9:45:c7:97:a4:83:fb:0b:52:3a:c6:af:
e5:b7:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:56 2025 by rpki-client