Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b9ba3b4-f88b-386c-b6b7-2357234da13c.roa
File: 4b9ba3b4-f88b-386c-b6b7-2357234da13c.roa (raw, json)
Hash identifier: kidxCCWQHoT+KQVtK5CMBSWhKa7ctfyJZrW4coJu0eY=
Subject key identifier: 5F:A6:A2:3B:C3:D4:A9:49:E0:58:97:C5:23:44:8E:FB:0A:52:D8:09
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584063E4A9D1718B3C6DF16E4D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b9ba3b4-f88b-386c-b6b7-2357234da13c.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Tue 01 Apr 2025 04:00:00 +0000
asID: 49999
IP address blocks: 166.0.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:63:e4:a9:d1:71:8b:3c:6d:f1:6e:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Apr 1 04:00:00 2025 GMT
Subject: CN=b530d0d7-aad2-4726-b406-9598dc7a2c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:26:72:c0:7a:89:91:9a:0e:fa:5e:5c:87:
47:70:ec:54:0f:d9:63:69:80:5c:07:ab:eb:22:fd:
27:b6:82:57:5d:5b:16:bd:75:17:9a:b0:2d:b6:12:
7c:cf:f2:13:b1:eb:33:2c:64:bc:34:43:a6:25:8d:
8b:a5:76:d2:2b:33:44:d2:5d:18:8c:11:63:d3:61:
1f:96:7f:3c:a8:7c:66:e1:8c:c1:36:3a:75:e0:31:
5e:9e:4d:f5:9f:4d:6a:e7:05:64:bc:dd:07:d4:e3:
39:84:f6:68:d2:2e:33:b9:00:ca:97:71:f5:29:4e:
16:ca:67:ed:dc:62:31:52:19:7d:cb:e1:4a:7e:5f:
ca:ee:75:ae:f6:3f:3e:c1:34:56:52:fb:16:0a:89:
b6:5a:89:0b:6c:b3:c8:f9:48:7f:85:4d:e5:d1:35:
35:62:5f:5d:65:dd:09:f6:ea:6a:4c:40:bf:eb:da:
89:6f:43:24:af:e8:8d:28:70:c8:3d:18:2d:1b:38:
9a:2b:b0:ab:7d:02:02:0e:9d:5b:55:b3:41:d2:ad:
3d:d3:ad:da:71:0a:19:85:d0:22:23:f6:cb:c1:0d:
75:7f:87:d4:73:66:6d:1b:e2:e1:fd:59:dc:93:ce:
b5:e3:61:fd:97:51:b9:b0:65:b7:bc:aa:b3:cd:3a:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:A2:3B:C3:D4:A9:49:E0:58:97:C5:23:44:8E:FB:0A:52:D8:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b9ba3b4-f88b-386c-b6b7-2357234da13c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:20:b1:73:17:b6:ca:f5:a5:69:6f:18:c4:fa:02:4b:89:b9:
a7:86:9a:73:f9:72:06:5a:fb:c1:d0:a3:02:7d:b8:7d:27:5b:
cf:dd:39:d0:29:3d:68:66:79:20:97:66:65:2f:a4:62:1b:82:
fa:c5:e8:f6:7b:bc:e1:b5:c7:6b:51:9a:00:15:d0:a3:4e:d1:
6b:fa:f4:c8:26:d6:19:98:db:68:81:e5:22:f2:fc:7d:80:bd:
c4:98:13:68:35:b7:91:00:25:c0:54:aa:ed:3d:a5:af:31:7a:
11:40:bf:48:a9:ab:05:c3:72:6c:83:73:20:39:d9:b7:e1:7a:
d4:04:ad:cb:81:f6:d7:4d:2d:50:fa:b6:51:8c:2a:9f:c6:bc:
93:f0:a3:90:66:09:cd:67:0d:29:dd:1e:40:d7:eb:5f:f1:2f:
4c:c9:44:a6:46:87:a3:7b:59:de:b3:19:cc:a3:1f:73:d0:6e:
1b:ce:9a:61:81:c5:50:6f:80:8a:0a:da:7f:6b:77:77:8a:99:
02:c2:8c:93:b1:93:82:a8:28:92:2d:13:36:df:02:ac:b5:2b:
e5:91:25:16:cb:c7:a9:33:2d:00:7c:e1:f6:5e:f9:8b:56:dc:
19:e7:dd:57:04:a3:88:35:b7:b2:56:b4:c0:e4:e4:51:7a:b0:
4b:1e:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:19 2025 by rpki-client