Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d7bd3cb-8a4b-3d02-a881-9b62951fad11.roa
File: 5d7bd3cb-8a4b-3d02-a881-9b62951fad11.roa (raw, json)
Hash identifier: tWH4GacZPq2d5QqOcE9ZsyCwLI7tSQFd8SE0TzGCKs0=
Subject key identifier: 79:26:B6:DE:E8:51:73:BD:96:6F:DB:E3:45:FE:37:E1:3B:6D:A5:6C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842AF9930974CE775F652154F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d7bd3cb-8a4b-3d02-a881-9b62951fad11.roa
Signing time: Thu 27 Jul 2023 13:00:18 +0000
ROA not before: Thu 27 Jul 2023 13:00:18 +0000
ROA not after: Wed 25 Oct 2023 13:00:18 +0000
asID: 399471
IP address blocks: 166.1.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:af:99:30:97:4c:e7:75:f6:52:15:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 27 13:00:18 2023 GMT
Not After : Oct 25 13:00:18 2023 GMT
Subject: CN=7ffdef72-5645-4406-9164-15d487706c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:05:e9:c1:31:2d:b8:46:98:af:7f:15:b7:
db:e0:62:ec:25:bc:3f:96:01:9a:5b:26:7a:89:c6:
ce:59:84:ba:c6:5d:f0:c5:e5:9a:21:42:20:34:06:
16:bc:e4:11:9e:c8:a4:44:a1:0b:d0:67:9d:0e:3b:
0c:99:94:b9:e5:a6:51:00:bc:62:ee:b6:84:b2:86:
bc:ad:69:23:c9:51:6d:61:bc:a6:0e:c2:9a:03:8e:
f2:42:a2:ec:25:51:1e:3e:93:63:63:8b:e3:5d:59:
e3:0f:95:fa:a5:44:fe:de:db:01:c0:52:7f:c4:ac:
d3:86:87:73:b1:ad:50:d2:06:15:38:6e:c2:91:55:
16:8f:cb:bc:50:ed:9a:d2:d4:78:c1:63:3b:2f:7d:
04:de:c1:ef:1f:c1:dc:e8:0f:d0:d1:9b:d5:5c:32:
cc:d2:a2:4c:13:24:b9:bc:f7:e2:41:e8:ee:a6:66:
0e:3f:7f:37:f6:5e:c9:39:cf:58:c0:e7:dd:c7:b8:
b0:96:99:ff:c5:7a:82:f6:3f:3e:10:b4:f7:d2:a6:
a7:aa:b1:90:4e:2a:23:ce:bc:ad:27:66:d0:f4:9a:
36:fe:62:f0:73:ad:eb:54:68:89:e9:06:77:47:d2:
21:14:49:18:d2:83:41:b8:0c:02:d2:af:d0:f4:12:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:B6:DE:E8:51:73:BD:96:6F:DB:E3:45:FE:37:E1:3B:6D:A5:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d7bd3cb-8a4b-3d02-a881-9b62951fad11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:97:63:04:72:28:2d:5d:ec:cd:18:7e:57:4a:b1:62:78:63:
2d:f2:bf:6e:c5:82:95:9f:69:73:48:32:52:ae:56:bd:09:d7:
2d:f2:1b:c4:ad:ab:3f:56:d3:0f:63:55:96:3e:00:86:f5:2a:
51:29:53:d2:b7:c9:0d:2f:56:d5:3e:b1:8f:fd:35:0d:e3:33:
22:44:e8:cf:f6:b7:22:2d:19:11:49:52:48:98:1f:99:0b:23:
88:d4:38:39:79:00:33:57:ab:b8:dd:0a:84:00:50:10:21:e1:
70:e1:af:5a:5f:05:03:8f:4c:d4:c7:5e:ce:a5:00:70:15:3b:
52:1c:56:51:23:62:18:90:9b:e7:da:a2:0b:72:54:f4:dd:03:
f3:f4:2e:ea:dc:ac:6f:44:ad:ae:31:11:91:a0:61:66:84:6b:
05:4a:74:59:7c:e3:9e:af:4c:46:3c:aa:33:03:15:48:26:f1:
18:21:3c:a4:30:6a:30:9d:9b:dc:3a:06:4c:31:c1:8d:fd:b6:
16:30:26:c2:fe:2d:1a:7c:14:15:ad:51:b0:69:bd:4a:a6:3a:
62:a4:cf:6f:74:02:19:e1:13:b4:57:8c:78:95:15:29:f7:b6:
fc:2c:28:17:72:91:30:20:78:60:85:a4:b9:66:84:7b:48:0f:
e1:fa:1e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:03 2025 by rpki-client