Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5eace0ba-f093-3552-9bed-8f9a584f3bd5.roa
File: 5eace0ba-f093-3552-9bed-8f9a584f3bd5.roa (raw, json)
Hash identifier: QrTnWuiHB9Cx5QshgktbChg8xF4yqjJBKmoV6fE3Y4I=
Subject key identifier: 1A:E9:88:22:88:48:76:95:AC:38:9F:5C:F7:AF:48:FF:51:31:4A:21
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858438A367DF906429AD68A6A0C20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5eace0ba-f093-3552-9bed-8f9a584f3bd5.roa
Signing time: Fri 13 Oct 2023 20:23:33 +0000
ROA not before: Fri 13 Oct 2023 20:23:33 +0000
ROA not after: Thu 11 Jan 2024 21:23:33 +0000
asID: 11798
IP address blocks: 166.1.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:8a:36:7d:f9:06:42:9a:d6:8a:6a:0c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 13 20:23:33 2023 GMT
Not After : Jan 11 21:23:33 2024 GMT
Subject: CN=0e270bdb-4e1d-4849-8db2-69b18e5ec681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:0a:b7:9b:36:69:3c:74:59:2c:eb:e0:c2:
67:0e:1f:e4:1e:69:77:0b:cd:b1:59:e9:34:e4:4f:
c9:7e:86:15:ae:a9:94:13:56:83:92:aa:89:fa:e5:
dc:81:0d:c8:76:04:9a:ec:92:df:0a:f3:6a:a5:7c:
3e:b6:d9:1b:e4:7a:1b:7b:ba:5e:14:c8:b8:35:e4:
bc:a8:27:cd:bf:03:c7:78:74:3d:5e:5a:eb:a6:d3:
43:4d:c1:10:5b:89:0b:8a:63:74:a5:64:87:7a:38:
b6:6e:08:45:07:7f:70:32:90:2d:e9:e1:0e:66:14:
ec:1c:68:36:8a:a8:6e:3c:ae:5b:53:34:97:f9:23:
b7:15:4a:dd:9e:b7:6e:15:f6:3d:ca:31:c5:de:43:
9e:4f:b0:39:bc:14:71:98:f6:d8:a8:2c:79:64:2d:
2c:0a:17:26:77:bb:7e:dc:45:21:9e:d9:f9:8a:48:
31:01:16:4d:1c:d0:11:13:fd:c5:70:bc:89:1c:01:
01:a1:85:3b:fa:95:92:c5:32:ce:86:cf:65:7b:96:
e6:69:7a:ff:55:de:93:6c:e7:5d:a8:94:e8:4d:9b:
bb:e7:1e:1f:39:aa:62:10:a9:01:76:f6:f1:91:ff:
19:35:31:f0:c2:58:a3:8d:fa:dd:a5:a7:ce:6d:41:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:88:22:88:48:76:95:AC:38:9F:5C:F7:AF:48:FF:51:31:4A:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5eace0ba-f093-3552-9bed-8f9a584f3bd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d4:dc:c5:46:e0:b0:92:68:13:20:0b:93:56:af:e0:b4:dc:
8f:de:d4:03:03:93:38:de:3e:d0:ad:ce:b9:9d:21:c1:76:04:
47:ca:45:17:d0:79:e7:b0:98:09:43:a0:cb:f8:d0:a8:4b:5a:
06:2e:f3:f1:36:63:34:d7:48:15:aa:e8:5f:07:de:dd:68:c9:
06:37:49:ec:ce:c4:18:f9:a6:b5:91:bf:7f:6f:4f:25:34:1b:
3e:7d:4f:b2:f5:78:c2:f8:ff:f3:a7:98:31:1b:fc:90:09:e1:
77:7b:df:20:cf:02:66:77:8d:8a:36:9a:69:bd:c1:3f:0d:90:
27:ec:7b:24:bc:0c:bf:c8:d2:9f:3f:38:47:3e:d4:01:35:2e:
e4:7d:c9:67:2d:61:e4:a3:c9:41:08:2f:4a:69:30:f7:d5:bd:
90:18:69:94:40:a5:51:39:2e:e0:68:62:f6:72:9d:07:7f:9f:
83:b1:bf:2f:1e:e8:52:d6:f4:77:ac:44:c9:03:80:33:ea:96:
46:bf:b4:e1:cc:cb:a0:42:e6:9d:e5:ff:52:07:b0:72:1a:86:
ef:1a:ab:d4:f9:a8:15:ec:bb:81:20:31:ae:c2:6f:fa:dc:b2:
61:80:e3:be:11:82:f1:91:0e:f5:58:45:a4:5e:be:a5:32:a4:
68:92:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:49:37 2025 by rpki-client