Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b295257-1708-338c-929f-3a0e1f3e754c.roa
File: 5b295257-1708-338c-929f-3a0e1f3e754c.roa (raw, json)
Hash identifier: xCDIFz0friiI2JuUskbnEMIED9eEU5OweWWxHWOM2QY=
Subject key identifier: 23:A5:42:1A:CC:70:3A:7B:18:D4:7F:12:E4:EE:3E:BB:17:7B:2E:1F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584731FB9DC99D62A6FB69F16B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b295257-1708-338c-929f-3a0e1f3e754c.roa
Signing time: Fri 13 Sep 2024 01:00:32 +0000
ROA not before: Fri 13 Sep 2024 01:00:32 +0000
ROA not after: Thu 12 Dec 2024 02:00:32 +0000
asID: 58061
IP address blocks: 166.0.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:31:fb:9d:c9:9d:62:a6:fb:69:f1:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 13 01:00:32 2024 GMT
Not After : Dec 12 02:00:32 2024 GMT
Subject: CN=700a5d39-2f46-4388-bea1-daba6cbc52a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:09:28:1e:ba:fa:a6:9f:c8:34:63:52:c6:
f6:97:8b:05:1a:8c:75:81:41:89:02:71:1e:73:a4:
d2:cd:4e:54:61:e8:9f:01:8b:27:f8:5a:e9:27:91:
f0:4a:a7:bc:31:e8:0e:53:92:0d:37:2a:a8:99:24:
a7:3a:f6:49:74:7b:5b:1a:19:66:09:40:0e:77:bf:
10:3b:3d:f6:fc:60:3f:0d:97:9a:be:fb:15:f1:5e:
95:d7:7c:f4:81:99:28:22:87:3f:37:b4:56:dc:76:
70:f9:c3:b6:04:79:78:ad:4a:25:c8:22:5e:13:c0:
44:0f:65:9e:3d:eb:1d:02:27:27:b8:ba:93:19:0e:
01:1a:95:1a:60:49:bc:86:f7:0c:65:f8:9f:8a:a0:
e6:e8:df:fc:80:3c:17:b0:c1:bf:25:63:5f:de:3b:
ee:3a:a9:18:48:01:7b:bf:62:ca:93:c2:19:95:52:
c5:60:f3:10:c6:79:7b:e1:fe:2a:25:4b:6a:a8:29:
dd:f9:4b:85:7e:51:58:f4:29:b4:67:5e:14:d2:10:
c9:76:dd:8c:fe:81:07:42:8f:29:a4:7e:7c:a5:4e:
75:81:9b:39:b8:af:4e:03:f7:8b:2e:7b:65:a3:f0:
60:bc:6f:94:ab:aa:af:29:2b:74:41:94:52:c3:12:
63:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A5:42:1A:CC:70:3A:7B:18:D4:7F:12:E4:EE:3E:BB:17:7B:2E:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b295257-1708-338c-929f-3a0e1f3e754c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:d6:30:e1:2b:f6:b6:31:89:ae:45:8b:e3:23:ac:ae:f9:4a:
6a:92:b9:07:19:ff:c4:1e:cc:6d:cf:d9:78:ab:5d:85:2b:5b:
30:66:6d:1d:a8:af:24:d2:cc:6b:15:5b:71:66:9c:9f:19:ee:
56:37:48:c5:68:49:4a:78:41:46:f4:61:48:2a:5e:4c:c6:53:
36:88:5a:0f:b9:3a:ae:48:07:62:31:e9:71:80:e9:66:38:0f:
ce:d7:02:08:06:21:6e:74:31:24:48:fd:78:6b:dd:ca:72:92:
bd:9c:62:0d:1b:ad:4c:ba:72:e2:88:92:dd:4a:e9:8d:eb:00:
c5:93:f4:ed:89:9d:62:69:c9:a4:5c:3e:46:d2:8c:9f:79:4e:
85:e0:52:bb:2d:e7:7a:dc:02:23:53:59:ed:ad:b8:2b:c0:0a:
39:22:59:1d:09:a9:90:c9:35:bb:9c:5c:ac:0e:89:7f:64:cf:
78:3d:94:22:d3:81:9a:1c:9b:fb:47:d7:6f:83:62:12:61:fd:
31:a3:d8:28:a9:23:3e:92:2c:dc:12:30:ff:4d:32:37:ea:2a:
22:2b:e0:4c:35:a3:a8:b0:f2:70:51:4c:5d:c3:21:88:fe:d4:
eb:1a:e8:0d:77:3d:63:dc:ff:87:3e:6f:5a:81:5b:9e:73:77:
08:3f:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:45:19 2025 by rpki-client