Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6068f0e6-1609-3b75-9e83-98701f201fa4.roa
File: 6068f0e6-1609-3b75-9e83-98701f201fa4.roa (raw, json)
Hash identifier: Jpi/yuSSngs3gO4vmB6okYqcfCwpPwGqitCOsR5mefU=
Subject key identifier: FA:EC:9C:1C:10:EE:58:DC:D9:E6:D3:A8:B3:28:E1:EB:CF:8D:89:82
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E4470799EBA300019B11B500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6068f0e6-1609-3b75-9e83-98701f201fa4.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 12 Aug 2023 12:18:32 +0000
asID: 210388
IP address blocks: 166.1.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:07:99:eb:a3:00:01:9b:11:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 12 12:18:32 2023 GMT
Subject: CN=30e45f92-981f-42a1-80da-47bbe49d985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:64:03:02:f4:ef:28:b8:a9:89:52:6b:8a:92:
fd:3c:aa:17:d6:ac:90:0e:9d:a9:df:33:9d:cc:69:
cd:df:a2:d8:7c:0e:59:1c:1c:1a:1c:28:49:10:ac:
62:b9:01:85:67:5d:07:23:25:05:9c:d6:52:68:8a:
5d:d3:82:61:9e:88:6a:c0:3a:78:b5:a5:e1:89:3a:
f6:b7:25:51:08:fb:1a:66:4e:bb:bd:47:3f:1a:cb:
04:76:1f:a4:e1:cc:ed:51:cc:ab:66:64:2a:4f:4e:
08:e9:67:7f:d2:71:12:80:f8:45:da:90:02:8b:ed:
fc:f4:91:32:a1:cf:b2:00:f8:9d:f8:fd:27:ea:36:
06:c8:08:88:07:d4:c5:49:43:76:1f:1d:01:c8:16:
26:9f:9a:28:e7:30:68:66:86:2e:9d:f7:c9:09:2a:
cc:7d:99:b4:c7:9e:f0:a2:67:87:d4:db:5f:7c:63:
d1:0e:24:cb:c3:97:7b:82:b9:2f:49:cc:5f:db:e8:
50:41:d7:6e:cc:14:c3:31:d1:a5:0e:10:38:82:2b:
a3:27:3f:c3:fd:12:d5:b7:53:c2:4a:f7:10:ae:50:
bc:37:67:2f:9d:09:1f:a1:b1:26:af:8e:7f:27:91:
fa:b6:89:01:0a:70:f4:aa:53:14:91:95:f6:9c:3e:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EC:9C:1C:10:EE:58:DC:D9:E6:D3:A8:B3:28:E1:EB:CF:8D:89:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6068f0e6-1609-3b75-9e83-98701f201fa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:f5:f7:21:b3:6b:c4:c3:ee:33:a0:1c:38:8c:75:84:f7:37:
dc:29:6e:6e:02:8f:a2:78:81:00:52:6a:12:14:15:3f:cf:24:
2f:99:69:6a:27:75:3e:52:99:4c:ad:0d:e5:7c:f6:e8:9b:44:
fe:12:35:3e:5e:4f:32:3f:b6:10:d2:d9:3a:ec:56:e8:db:3c:
9c:bb:3d:83:39:e5:a7:96:32:12:56:89:af:09:d8:95:cc:05:
21:f6:b5:41:79:83:c6:e6:f9:9d:b0:fe:ac:ee:be:20:8a:17:
eb:f5:1c:4a:e5:a4:e0:53:4a:3c:19:0e:7e:f2:dd:9a:76:95:
10:ce:51:4d:96:7e:1f:ab:3f:d6:70:fa:b9:99:51:45:f1:ba:
f9:89:0d:5b:f3:3f:75:31:d7:e6:3a:64:df:9b:a9:39:6c:78:
d0:77:a4:b9:ba:5b:8b:74:47:4c:62:ae:21:d5:14:5f:51:01:
01:40:65:76:5b:7f:9e:95:bb:80:76:90:e6:01:97:c0:d0:e8:
f6:36:fd:91:f7:1c:35:36:ff:91:ce:03:31:b2:48:d9:42:da:
29:57:bd:b7:18:6f:4a:a4:ac:7b:76:5d:6e:5b:cd:16:5a:21:
f1:02:d7:3b:35:23:f8:9b:43:50:b8:f7:47:af:1e:51:94:5f:
77:8a:52:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:13 2025 by rpki-client