Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/569f2873-53a6-3653-9b26-8585b0cab2be.roa
File: 569f2873-53a6-3653-9b26-8585b0cab2be.roa (raw, json)
Hash identifier: 5ANOSMyyLeqmRoXQvgT6wDbbcbiK8S6uCj7uBK1E6BQ=
Subject key identifier: 78:E2:89:C4:4A:CA:A0:9F:F0:90:08:E3:26:41:74:DD:75:1C:17:13
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446F964EB62622E0A5FB270
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/569f2873-53a6-3653-9b26-8585b0cab2be.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sun 06 Aug 2023 09:28:48 +0000
asID: 211584
IP address blocks: 166.0.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:f9:64:eb:62:62:2e:0a:5f:b2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 6 09:28:48 2023 GMT
Subject: CN=2cb2303c-35b1-4bd0-9c35-7473661c3e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:b7:01:b9:56:93:1f:1a:93:55:35:0d:09:
4e:64:03:a9:9c:ed:11:24:64:76:81:60:d8:f3:8e:
4d:59:f8:82:23:f5:06:ab:5e:47:bc:e4:a5:5e:37:
7e:cd:40:f2:72:8e:cd:f2:49:4e:b8:63:03:8e:a5:
d8:f8:b3:87:6c:f7:13:fd:15:b2:fe:4f:4d:5e:3c:
41:1a:2a:ea:ac:b2:d3:c0:5c:d6:64:e3:fb:03:cb:
b8:57:07:cc:31:b6:de:8f:73:2f:56:eb:37:95:31:
8e:30:dc:d8:0a:8c:13:f4:60:7d:77:01:99:6e:09:
50:60:44:19:e9:ac:81:04:7e:d2:4d:3b:65:f1:0b:
16:a1:ef:ef:ad:d2:52:3d:a7:b2:e5:07:12:7b:fb:
e3:b5:a9:8d:b8:bd:1a:d9:28:74:a1:fe:c1:cb:52:
50:54:e6:5d:ed:43:ee:4b:fe:48:c6:d8:50:18:d2:
93:c8:7c:59:44:b3:0c:42:96:06:28:2d:54:ce:ee:
83:d1:b7:4a:3f:af:87:e1:d8:1e:5c:71:51:bc:6b:
ad:dc:9c:d0:d0:fc:24:40:40:58:93:0c:eb:24:97:
51:cc:c4:f0:75:5a:e8:11:10:be:82:fb:06:34:54:
97:37:0f:5d:af:5d:b0:d8:84:b1:b9:f0:8a:3a:55:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E2:89:C4:4A:CA:A0:9F:F0:90:08:E3:26:41:74:DD:75:1C:17:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/569f2873-53a6-3653-9b26-8585b0cab2be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:75:64:ef:bd:ef:22:1d:41:37:56:74:cd:4b:05:fa:19:af:
bb:57:65:a3:20:ab:f8:e1:bb:32:9d:4b:ad:47:d2:3a:3b:48:
01:31:88:67:61:c5:a2:d6:71:0d:8d:9b:61:f6:5b:f4:82:7a:
f4:ae:8c:0f:98:bd:e3:39:d9:ad:c9:12:94:3f:85:7c:e0:2b:
62:65:6a:7c:69:05:ea:3f:96:58:61:8c:ab:52:d7:5d:e9:c8:
12:83:8a:40:96:c6:78:13:be:fd:3e:15:9c:f1:7e:63:8e:64:
58:f4:6f:db:54:4f:03:f2:42:95:3a:4e:55:d6:15:73:e3:19:
12:4a:c8:53:86:6d:05:ac:58:81:c1:af:5d:dc:46:b6:db:64:
2a:55:c0:9f:99:dd:88:0d:46:41:35:bf:3c:d4:31:1c:76:08:
0a:5b:54:bc:f4:36:43:3d:99:0e:cd:0e:6d:81:7d:85:46:4e:
19:0d:f2:ac:4b:3b:9c:c9:9c:1e:60:a8:8c:ca:a2:d5:d6:d4:
41:37:ae:aa:77:fb:a7:eb:85:3d:56:67:ef:13:05:69:3c:9b:
59:54:e4:6c:29:1f:c2:1f:bf:33:ac:10:12:f2:e8:52:d3:21:
9d:26:52:f8:60:95:56:0d:01:a7:64:56:79:cc:5e:e7:31:db:
cf:8d:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:59:03 2025 by rpki-client