Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45a29ef5-e94a-39f3-8fa8-e50c61a85995.roa
File: 45a29ef5-e94a-39f3-8fa8-e50c61a85995.roa (raw, json)
Hash identifier: TrPl092QSASGWdMZ8/3yViXvQkTTjZ7rb4wwO2+Lthw=
Subject key identifier: 43:7F:7A:A6:A7:2E:75:9A:FA:D7:EF:4F:D7:96:C1:4A:B9:C4:DE:90
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842B5921C5DCC4FC7BB3C2A2A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45a29ef5-e94a-39f3-8fa8-e50c61a85995.roa
Signing time: Sat 29 Jul 2023 16:20:58 +0000
ROA not before: Sat 29 Jul 2023 16:20:58 +0000
ROA not after: Fri 27 Oct 2023 16:20:58 +0000
asID: 11798
IP address blocks: 166.1.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b5:92:1c:5d:cc:4f:c7:bb:3c:2a:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 29 16:20:58 2023 GMT
Not After : Oct 27 16:20:58 2023 GMT
Subject: CN=08785be9-3c15-4843-a83a-6b8cf3ebf812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d7:40:66:4f:b9:c1:60:db:af:7c:73:89:12:
88:d2:f5:6b:5a:eb:84:fc:8c:37:d0:63:24:75:e6:
bf:7b:54:7f:97:de:96:97:32:1f:d3:a2:c9:07:b0:
32:48:7e:06:02:7a:49:83:b5:b1:09:13:9f:ec:2e:
88:0e:5a:52:7a:21:2e:c1:30:a1:03:28:6d:a1:b4:
81:3f:1d:cf:59:9d:a1:f4:bc:2e:95:d5:b0:27:f0:
20:a0:33:4a:1a:86:ac:62:22:74:c4:28:f0:80:74:
b2:16:85:27:5c:1e:f9:e0:7c:b3:5d:b7:76:7b:79:
36:1d:d4:c8:ab:84:00:bb:c1:5f:7d:2b:fc:2b:a5:
45:ca:6e:6c:fb:a0:95:39:df:c7:7b:15:01:99:83:
5e:8b:73:23:13:9b:12:dd:fa:e2:22:fc:a1:c5:3c:
2c:47:21:ee:89:ee:50:33:18:3f:c4:d5:08:c5:c0:
e7:d4:a9:bb:10:14:51:4e:73:3e:7a:6a:14:d1:30:
5d:40:e1:97:a7:ee:7f:3f:60:1b:f2:1b:30:42:74:
a7:fc:64:6a:1e:62:5f:e1:66:ac:39:26:a3:cb:8d:
b4:a0:e3:9a:6e:4d:6a:0d:53:78:d2:9f:9e:0b:55:
23:22:22:42:69:5d:de:8e:dd:1a:51:05:75:b6:bf:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:7A:A6:A7:2E:75:9A:FA:D7:EF:4F:D7:96:C1:4A:B9:C4:DE:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45a29ef5-e94a-39f3-8fa8-e50c61a85995.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:e0:a7:c7:7b:6e:d3:ca:07:16:48:cd:14:bc:ec:a5:44:5a:
63:62:d1:09:12:e8:41:ad:82:ce:b5:7d:a8:42:92:8d:d4:7d:
d9:1d:be:d3:07:f9:cb:81:be:48:d9:66:a1:16:04:c8:64:f9:
1f:31:34:f7:4f:4d:61:76:f9:7e:95:d9:bd:a5:98:2e:9a:72:
83:c0:7c:8c:c0:fd:2a:b5:24:fa:33:8e:c6:1d:d8:18:ec:16:
a9:77:84:57:e0:36:c8:bb:fc:db:eb:0e:39:74:58:30:30:51:
25:44:73:e2:c8:08:c3:f3:73:d4:ad:31:8c:74:61:0e:c5:cb:
35:25:5a:7d:e7:a3:5d:66:62:79:52:db:2c:6d:7a:19:dd:be:
94:7c:52:c5:ab:12:15:62:45:23:db:d9:b1:5f:83:a7:24:21:
09:aa:51:de:15:d3:c3:3a:8c:fb:44:28:76:eb:f2:70:79:ff:
b7:94:a4:13:de:09:77:f1:2f:49:9e:2e:d5:e5:2f:07:02:20:
13:df:5c:93:25:47:4a:7a:88:e9:3e:61:16:57:34:37:10:4a:
7f:3c:5d:e2:22:ef:8e:08:18:dd:d4:70:e7:2e:96:f8:39:61:
bc:5c:ce:ef:3b:a4:54:6a:fc:e8:70:44:32:8b:31:09:6a:ad:
0e:29:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:41:49 2025 by rpki-client