Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cbb7682-b340-309c-8c1d-3ca37f0223fd.roa
File: 4cbb7682-b340-309c-8c1d-3ca37f0223fd.roa (raw, json)
Hash identifier: xbDhBDt0a3XsBiDgHQqrEY8btel1AYxpc5mP3OS8Q+4=
Subject key identifier: 2B:E7:04:F6:10:9F:EC:C2:0E:68:8B:EE:8F:C0:51:92:73:FC:96:63
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842A5D3C794375687BA9BB89780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cbb7682-b340-309c-8c1d-3ca37f0223fd.roa
Signing time: Mon 24 Jul 2023 01:00:18 +0000
ROA not before: Mon 24 Jul 2023 01:00:18 +0000
ROA not after: Sun 22 Oct 2023 01:00:18 +0000
asID: 15083
IP address blocks: 166.1.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a5:d3:c7:94:37:56:87:ba:9b:b8:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 24 01:00:18 2023 GMT
Not After : Oct 22 01:00:18 2023 GMT
Subject: CN=9f5c0855-3ca8-484c-9b1e-339d5113f6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4e:66:ac:fe:f0:fb:2e:5a:f5:59:02:78:c8:
f8:a5:8c:ca:a9:17:3c:39:28:5a:c1:f0:f9:a2:3a:
da:43:14:65:09:ce:15:b2:dd:7b:0f:d4:57:8d:4f:
25:25:00:3c:bc:44:bd:2e:1f:74:8a:c6:90:bc:6c:
ab:51:65:83:f1:a0:d8:e7:42:be:79:06:55:bd:87:
83:f1:a9:a7:b7:8d:fa:af:5e:4f:39:a2:b8:ee:88:
ce:0a:4c:f8:64:16:ec:f2:8e:16:75:31:04:9d:9e:
56:1c:60:6a:e5:ef:3a:67:e7:f6:13:87:28:a6:5c:
41:4b:18:4f:d3:7f:21:2d:d2:19:2a:46:ba:05:c6:
90:c9:fd:89:f9:9e:b0:f6:30:b6:76:eb:fa:8b:2d:
20:25:07:70:90:d9:3c:b8:13:15:14:82:e3:19:bc:
f0:11:6e:d7:b0:c9:76:5c:fd:fd:7d:c8:2f:04:21:
80:ba:b9:0b:6c:ca:e0:c1:5a:8f:2a:65:20:53:99:
53:87:5a:07:5b:bb:b2:a2:fb:80:86:ee:07:02:ce:
1a:81:61:75:18:d6:86:e0:a6:e1:f8:ab:88:01:db:
d1:e8:82:28:12:9a:a4:26:ae:fc:6e:58:da:06:fc:
02:3e:32:f1:d0:fb:1f:31:63:88:d8:79:4a:03:5d:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E7:04:F6:10:9F:EC:C2:0E:68:8B:EE:8F:C0:51:92:73:FC:96:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cbb7682-b340-309c-8c1d-3ca37f0223fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:01:68:49:d4:55:b6:a3:5b:49:e8:a3:3d:bd:e0:9e:e0:4a:
26:27:50:a6:c9:5e:66:e1:fa:82:e7:6d:d7:3f:52:09:75:c5:
f9:47:75:6a:ef:0e:f8:94:25:8b:47:c6:eb:49:16:e5:1d:2a:
48:ba:33:0f:fa:be:f6:b9:ab:68:ae:7a:05:80:f7:d7:dd:5a:
8b:e7:e6:bb:2d:f3:0e:f6:98:ff:ef:a1:56:2f:e3:65:be:0d:
ae:f4:f2:91:6a:77:5e:80:cf:b1:44:c9:83:4b:3e:c4:26:d9:
d0:50:78:70:e5:71:8f:d4:4c:c7:b9:71:57:c6:d2:15:ef:3e:
34:d2:7f:38:bd:a5:05:e8:1e:3c:10:8b:e4:7e:b3:83:63:6b:
52:8f:4b:37:30:81:b0:1e:05:68:52:a2:a9:0e:d6:1a:d1:0a:
28:df:1b:5a:3d:ad:a8:ec:47:75:d7:d0:3a:f2:5c:e3:cf:39:
39:78:d3:12:70:8c:fa:62:97:78:f4:59:03:de:6b:86:18:21:
f5:4d:59:e0:76:b8:a7:75:c6:ad:12:9d:2b:10:a8:82:a9:73:
9a:58:fe:c2:da:78:22:f0:22:20:f1:57:a3:e4:89:57:29:98:
a7:e6:64:5d:44:63:54:55:ee:54:5a:15:01:6b:8b:cd:3a:56:
c9:0a:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:56:36 2025 by rpki-client