Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5974cee3-54f5-306b-b6b2-f64e541e66c5.roa
File: 5974cee3-54f5-306b-b6b2-f64e541e66c5.roa (raw, json)
Hash identifier: bjaAdA+F4zfpugvnBqRyRGfoHiRroKnE1pfWiYG7TsI=
Subject key identifier: E7:31:26:BF:26:79:E6:A1:55:E3:AB:3D:AE:78:7C:C9:3D:31:99:0D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584509557606F6D4CEBC0065BF40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5974cee3-54f5-306b-b6b2-f64e541e66c5.roa
Signing time: Wed 28 Feb 2024 02:00:26 +0000
ROA not before: Wed 28 Feb 2024 02:00:26 +0000
ROA not after: Tue 28 May 2024 01:00:26 +0000
asID: 11798
IP address blocks: 166.1.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:09:55:76:06:f6:d4:ce:bc:00:65:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 28 02:00:26 2024 GMT
Not After : May 28 01:00:26 2024 GMT
Subject: CN=10077aea-b0d6-46dc-94eb-55301f611677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:d2:1e:f6:a5:f3:9a:3c:9f:87:5f:12:5d:
15:de:e6:4f:be:8d:b1:2b:6f:dd:b0:71:7a:17:17:
a4:24:4b:53:48:09:da:b9:d5:c8:f1:bf:91:89:77:
2b:5e:92:c7:70:92:33:8b:67:3c:a1:fd:33:b2:45:
6b:42:9f:c9:c1:85:93:af:ad:ad:bf:8f:10:c5:60:
f8:2b:42:4c:1a:37:51:00:de:c6:3a:fd:94:76:89:
58:6d:99:a4:0c:65:d1:15:fe:df:3f:90:62:fb:24:
06:03:c5:9b:0a:fe:53:76:a0:ff:5d:b4:cf:7f:d6:
ae:5b:e4:38:e9:6d:9c:7d:e5:f4:f0:ec:60:76:1b:
2d:fa:01:ad:64:a4:31:57:9e:7c:f1:42:f1:86:b7:
f1:0d:b9:04:c4:b9:ba:fe:8e:9a:c6:3a:f4:83:fe:
1d:ed:41:eb:2e:c5:43:ac:7b:f3:cf:15:9c:bc:80:
bc:be:b0:9a:8a:b9:27:5c:8d:e6:57:b4:1b:00:9c:
86:cf:ea:2c:ac:dd:0f:fb:40:b8:72:a0:00:c0:d3:
37:47:1a:d7:b5:ae:be:26:a4:28:94:da:42:81:26:
55:5c:9c:38:68:1e:86:ae:89:c6:d9:21:f2:39:c2:
f4:1c:ec:77:89:f1:0c:93:73:22:fa:24:9d:24:0f:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:31:26:BF:26:79:E6:A1:55:E3:AB:3D:AE:78:7C:C9:3D:31:99:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5974cee3-54f5-306b-b6b2-f64e541e66c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:e2:70:c2:72:70:f6:59:aa:c6:92:9c:80:c4:31:30:82:41:
f2:52:ca:17:a5:31:be:17:c2:8e:fb:4f:27:4a:30:85:f8:b9:
30:14:8e:67:c3:39:3f:23:3d:93:16:04:82:0b:cf:ab:ce:45:
fd:fb:23:bd:3a:35:e2:b1:ec:dd:f9:4f:26:8e:dc:ca:2a:66:
14:41:f4:04:17:0f:ed:fc:34:b4:f3:58:f8:55:56:7b:72:40:
91:c0:54:66:1d:28:29:82:08:ad:4d:24:62:3a:48:2d:52:df:
77:23:dc:77:75:b0:f4:30:6d:7c:4e:d8:94:35:7c:ae:11:d5:
7b:89:66:e5:98:91:23:79:06:43:c5:52:34:e8:4e:ae:85:42:
5e:f3:31:42:d8:4b:d4:93:c6:64:34:29:48:8e:7a:76:15:83:
0c:64:19:3f:29:61:61:2e:a7:61:3b:4b:20:96:df:3d:53:f7:
11:51:c3:59:c8:19:44:2e:dd:44:72:05:df:73:6a:b1:09:01:
55:a0:73:19:26:7f:61:40:54:dd:fa:c9:e2:e9:f0:15:71:2d:
96:cf:c5:de:1d:cb:94:3a:ee:c8:29:f7:10:57:17:27:81:be:
ed:6a:28:c3:fe:44:26:5c:05:4d:33:b8:04:ef:37:b4:aa:df:
1d:9c:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:05 2025 by rpki-client