Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/511edc2f-454b-3fe0-8997-237ba52d8fb2.roa
File: 511edc2f-454b-3fe0-8997-237ba52d8fb2.roa (raw, json)
Hash identifier: CvtrfOkSl64Y/E7y6fYWMEUtQRswOjNVGBEh9druCDU=
Subject key identifier: F7:68:D0:7F:54:B5:F4:35:9B:24:03:F1:DE:CE:83:BC:DB:34:68:7E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858440799802B8B2F3EDE1CBE8900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/511edc2f-454b-3fe0-8997-237ba52d8fb2.roa
Signing time: Mon 27 Nov 2023 18:19:05 +0000
ROA not before: Mon 27 Nov 2023 18:19:05 +0000
ROA not after: Sun 25 Feb 2024 18:19:05 +0000
asID: 9009
IP address blocks: 166.1.246.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:07:99:80:2b:8b:2f:3e:de:1c:be:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 27 18:19:05 2023 GMT
Not After : Feb 25 18:19:05 2024 GMT
Subject: CN=21874370-3d07-4b9f-9f52-8443916a09fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a4:c2:06:9a:e6:db:55:e0:b8:12:48:97:41:
98:5d:38:af:f9:c1:f5:19:a1:72:0a:6f:a7:ae:81:
41:23:39:88:85:9e:55:5b:1c:36:5a:49:02:d9:01:
4d:17:5f:39:55:da:10:bd:0c:fc:3a:ba:c5:02:ea:
62:4c:ba:9f:02:59:14:27:84:4b:e8:45:8d:e6:13:
59:d0:43:3c:9d:1c:b8:59:86:5f:7b:be:c6:69:31:
a7:37:dd:73:2b:dc:e4:17:22:52:d3:59:37:e9:6f:
b0:31:09:ff:9d:fd:77:14:a4:1c:9c:5b:0c:96:bb:
e1:fb:a3:eb:cf:3d:78:5a:fd:47:01:52:85:45:54:
29:dd:87:9d:55:1a:99:05:e6:f9:2a:bd:d1:09:33:
85:78:33:39:e1:15:9d:85:a1:ad:1f:84:0d:24:61:
91:82:b2:11:fa:a1:a9:55:fd:0c:ab:7d:a2:62:32:
23:e8:f9:3d:9a:17:0b:81:e5:bc:95:83:46:db:62:
ad:13:b6:e3:0d:9a:bf:7a:be:be:a0:fe:4c:11:ac:
c7:49:74:59:b0:f8:20:cb:8b:e3:04:45:15:0c:dc:
f1:c6:86:01:b7:2f:3b:24:c3:f9:da:59:24:33:48:
a3:f1:05:e6:87:ff:86:f1:a6:6f:c1:2c:5d:6c:27:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:68:D0:7F:54:B5:F4:35:9B:24:03:F1:DE:CE:83:BC:DB:34:68:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/511edc2f-454b-3fe0-8997-237ba52d8fb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:49:ea:a3:44:bc:9c:1c:ac:f8:c7:0f:c5:d6:fb:60:e1:cc:
37:22:9b:e8:04:2b:a7:1d:cd:c1:7a:d6:fd:9c:32:e6:0c:e7:
ca:2f:74:5d:3e:ad:1a:10:ae:6e:25:54:52:f4:5e:4c:15:3b:
84:d0:80:3e:74:8d:69:0d:ca:8a:2a:65:d7:8c:6c:16:33:2f:
c5:49:5d:72:23:b9:21:f9:66:99:7f:98:ff:c3:7a:6d:c4:ab:
84:5b:11:8e:05:af:b5:75:85:63:21:e7:47:07:a2:d7:c8:e6:
16:d5:b1:a0:9e:9c:44:47:c1:5f:e2:84:0a:96:48:9f:51:02:
a4:88:a2:f1:0c:5e:53:67:81:61:fd:08:0f:8f:0a:b4:84:d3:
3d:cd:20:aa:78:aa:aa:a9:16:18:2e:a6:21:21:31:34:39:9a:
86:08:84:0e:3b:e8:3a:46:e2:5e:58:c3:1d:ee:00:5c:f6:48:
13:a6:59:a1:d4:7a:4d:8d:ce:f4:06:99:b2:3c:17:65:34:3f:
c0:6a:13:e6:07:9a:b8:c3:30:76:47:9b:40:c5:d0:d5:79:f9:
ee:79:c2:72:5a:80:98:88:9b:43:7b:db:19:d1:91:2b:65:71:
f3:95:d8:20:25:8c:a5:b7:4b:5a:c5:0f:86:3e:11:35:10:a5:
09:15:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:55:19 2025 by rpki-client