Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44703ca9-8d5d-359b-a7ae-28ebb55470df.roa
File: 44703ca9-8d5d-359b-a7ae-28ebb55470df.roa (raw, json)
Hash identifier: +xbfnKlP+NIA395PqGtdsjMf6OMEbyk9O9+Tm2Z2s0s=
Subject key identifier: B4:65:BE:C6:67:32:20:41:94:B7:8D:B9:B2:0C:FC:D9:A5:B8:37:8E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842757B2F490C87F0F231625480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44703ca9-8d5d-359b-a7ae-28ebb55470df.roa
Signing time: Thu 06 Jul 2023 17:23:02 +0000
ROA not before: Thu 06 Jul 2023 17:23:02 +0000
ROA not after: Wed 04 Oct 2023 17:23:02 +0000
asID: 834
IP address blocks: 166.0.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:75:7b:2f:49:0c:87:f0:f2:31:62:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 6 17:23:02 2023 GMT
Not After : Oct 4 17:23:02 2023 GMT
Subject: CN=233318b8-e48f-4816-9841-e4493985d512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:1d:a6:0c:ef:6a:b5:ae:15:90:40:e4:ce:
db:9f:fd:4c:41:78:5c:18:14:7b:3f:5a:1e:07:6a:
33:fa:de:de:24:ac:19:2c:cd:1c:74:d4:60:7e:29:
03:dd:c8:4e:49:d2:5c:7d:43:98:3b:c0:10:68:5d:
0b:b5:5d:aa:78:4d:03:5e:01:09:25:cb:eb:48:d2:
fb:59:b8:38:72:77:86:88:3e:68:a9:9b:fb:3e:f1:
f1:dc:98:4d:8e:d5:51:76:c1:f0:73:77:66:86:74:
17:c7:6f:d3:90:01:0f:98:63:6f:e3:02:6e:74:93:
32:6e:99:8a:43:ce:fc:11:ce:56:29:60:2b:ea:a3:
c4:d5:dd:2e:16:84:97:d7:82:de:bb:56:76:53:d4:
06:48:19:99:15:95:6c:c0:84:be:f9:be:f9:6f:5a:
d8:c7:56:44:28:cb:86:e9:77:cf:1a:09:e4:a7:9b:
f1:3f:72:df:ed:4e:49:57:5a:fa:88:18:09:f2:ce:
34:19:cd:fe:32:91:28:8e:b4:f9:fb:9b:54:85:b7:
43:78:2b:d5:aa:e4:03:22:c9:44:8d:83:36:5d:ea:
b4:ff:9f:ce:3f:16:6a:41:9e:45:3e:b6:06:f7:d7:
16:6a:19:4a:07:2a:0d:60:3f:2f:40:b9:d5:c5:2d:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:BE:C6:67:32:20:41:94:B7:8D:B9:B2:0C:FC:D9:A5:B8:37:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44703ca9-8d5d-359b-a7ae-28ebb55470df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:34:91:3f:1b:a7:d2:20:2e:3b:20:bb:13:c1:d4:0a:b8:b6:
56:06:5f:94:18:c4:2e:a5:4e:82:b3:45:d9:8c:fb:04:43:61:
96:e5:79:18:d2:0c:f8:05:02:2e:36:aa:f8:ea:dc:f1:d3:24:
e3:35:56:23:98:d4:e5:d6:0d:14:44:83:22:59:67:31:d3:6c:
53:c9:28:4c:73:4c:bb:6a:63:95:e3:1b:21:ec:d7:2f:12:4a:
7d:e1:80:de:75:b6:4b:1f:46:58:92:f0:98:fc:d0:70:c2:09:
89:57:28:30:48:7d:ba:b7:e4:35:34:d3:c7:a9:41:b0:c5:be:
be:c1:f3:54:2c:a6:c1:48:3c:7f:17:b0:52:b0:3b:1a:8a:43:
e3:a0:7e:9b:9c:b0:0c:46:88:fe:6b:5e:c7:49:2b:9a:7b:ac:
be:67:e1:54:e3:a7:72:e0:09:2c:b5:10:38:a9:41:e9:94:68:
53:98:2b:2a:b7:f9:82:17:e9:17:74:cc:cd:bf:7d:87:e0:ed:
ab:48:82:af:ee:46:b5:3e:21:95:53:ad:dc:c3:27:65:14:76:
e5:0f:e9:40:99:33:42:79:03:3d:a0:d4:bb:0c:bb:93:7a:1c:
74:cf:07:2c:96:b0:1c:24:59:ff:1f:91:f7:6c:26:2d:40:f7:
25:03:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:27:17 2025 by rpki-client