Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/626b1121-a70c-3bd7-80ee-1eece7447026.roa
File: 626b1121-a70c-3bd7-80ee-1eece7447026.roa (raw, json)
Hash identifier: MYrcSLs6Vvw/QWgnJl8fhBJU/g6u1gfjCqEe3+TSREc=
Subject key identifier: 9D:3A:F3:A1:80:AC:DA:9B:D7:08:91:11:12:FC:F4:7D:71:29:31:DA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858412649FE8E88AEDCEF27C63B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/626b1121-a70c-3bd7-80ee-1eece7447026.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Tue 10 Jun 2025 04:00:00 +0000
asID: 213035
IP address blocks: 166.1.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:26:49:fe:8e:88:ae:dc:ef:27:c6:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jun 10 04:00:00 2025 GMT
Subject: CN=3e2ae700-c72a-4190-a422-7654428db9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:39:17:95:ae:df:6a:c6:a2:ae:67:12:46:
94:ab:a4:38:5a:c9:10:aa:d7:3e:d4:e2:1d:95:0e:
3d:5f:c3:90:91:9d:92:42:67:02:22:d8:21:af:99:
96:dc:c6:42:76:72:cd:1a:68:35:d7:d9:13:43:99:
c0:f4:fc:16:fd:ae:d6:e9:66:73:77:93:59:76:5e:
61:52:a2:6c:ea:fc:da:9e:81:1d:ff:82:ec:37:75:
5f:4b:31:59:59:fd:9b:5b:32:a1:56:76:af:87:72:
75:8c:4d:e9:4d:dd:20:c4:a2:3f:09:17:01:09:4e:
79:fb:52:1e:da:60:6b:dd:7f:7d:97:b5:f4:65:37:
e0:96:0e:fa:c8:5c:e3:ce:f8:7e:c5:29:00:0b:20:
75:11:d5:0e:b6:1e:71:c1:71:3c:18:2b:5d:40:0b:
cb:1e:98:08:67:4f:f3:cf:00:f8:81:df:01:88:4b:
e0:dc:9f:0a:63:e9:a0:b9:f3:f4:7a:80:95:17:21:
6a:1a:1c:11:eb:bd:9e:ae:05:88:67:57:80:fe:74:
b5:aa:dd:26:63:38:c3:a9:6b:3d:3c:87:b4:da:8f:
f6:8c:42:31:c0:5e:e9:97:25:ee:66:1e:d8:e1:b2:
b2:2c:51:73:54:90:81:75:d0:e5:e0:89:8a:1b:3b:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:F3:A1:80:AC:DA:9B:D7:08:91:11:12:FC:F4:7D:71:29:31:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/626b1121-a70c-3bd7-80ee-1eece7447026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:fb:91:63:f4:93:bf:33:de:1e:40:96:ff:dd:50:a1:95:36:
b2:c6:ac:af:19:34:4f:0c:ca:70:c9:92:4f:b4:06:a7:b8:de:
f3:9c:74:b9:b4:da:16:eb:b1:23:6d:00:f8:e9:f5:fc:d2:c4:
4b:43:df:95:f5:c1:bf:18:8e:02:d8:89:33:4f:ed:fc:04:d6:
0a:63:95:14:63:6a:0b:82:73:ca:8f:ec:53:08:26:61:ed:a2:
75:9f:d3:b2:d8:0b:ac:32:9e:ff:40:99:53:ae:a1:c9:a0:5d:
2b:9a:74:ae:ce:33:ac:9c:8b:0d:17:bc:5e:60:e7:c8:26:b2:
77:c0:14:52:30:d7:73:80:e1:1d:37:6b:bc:f9:38:89:47:d8:
1f:29:a4:b5:fe:2c:69:e0:6f:bc:2d:b9:01:8d:41:4d:89:c1:
4c:07:ae:00:f1:68:47:ef:42:07:06:da:94:32:1a:7a:20:35:
f4:9d:81:d8:44:24:54:0f:2d:e3:da:5b:a7:56:79:88:20:11:
27:b6:da:1a:e3:11:fb:0a:df:f4:74:69:4e:74:f2:46:33:1a:
f7:c2:23:dd:01:31:00:0c:62:84:01:16:09:0a:10:99:be:b1:
19:50:00:c8:4f:66:c1:d1:75:c4:c3:ea:11:3e:e1:f5:cc:63:
cc:0b:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:21:06 2025 by rpki-client