Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/680721ee-ec33-3138-b985-b4ef893c094d.roa
File: 680721ee-ec33-3138-b985-b4ef893c094d.roa (raw, json)
Hash identifier: v59PYXwoiG5DHkzMqnFWDjD85HhNBn/5tGoaON/UqPA=
Subject key identifier: 23:21:F4:4B:08:19:47:CC:04:08:37:50:93:DB:AA:47:7C:FA:0A:E9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845CEBFBDBC108D61646BBED580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/680721ee-ec33-3138-b985-b4ef893c094d.roa
Signing time: Wed 08 May 2024 19:08:56 +0000
ROA not before: Wed 08 May 2024 19:08:56 +0000
ROA not after: Tue 06 Aug 2024 19:08:56 +0000
asID: 834
IP address blocks: 166.0.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ce:bf:bd:bc:10:8d:61:64:6b:be:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 8 19:08:56 2024 GMT
Not After : Aug 6 19:08:56 2024 GMT
Subject: CN=6e7f67fa-0c54-4da2-bfb1-33d22a937511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:fb:b8:c1:a2:79:88:5d:42:7d:5a:53:55:
9d:09:89:d7:8a:77:62:dd:72:40:3d:29:2d:58:84:
51:fb:44:9d:75:19:18:72:7d:d5:9d:73:2a:68:b3:
2f:a5:e4:f3:9f:3e:c0:fa:50:d9:38:0e:a2:06:d5:
5c:49:46:0e:62:e9:2a:da:66:29:3d:75:86:a3:59:
34:97:b1:d0:14:53:8a:86:dc:71:40:20:02:7d:17:
2f:b2:ba:ad:f3:f5:55:5f:49:2a:67:18:8a:e1:40:
f8:5e:40:da:24:7c:94:95:f5:c0:72:1f:62:9a:ab:
84:78:23:16:bb:33:52:d8:93:c1:94:57:a0:46:f8:
e8:11:12:e8:07:59:3b:3c:12:90:7a:14:50:4f:0a:
5f:db:a8:6a:b6:75:cd:68:e8:93:a3:b9:a7:8f:8b:
0a:20:fb:0a:0d:bb:fa:81:48:4c:0d:12:50:05:2b:
a6:08:ea:9d:c3:3d:dc:ee:3f:1d:d4:5d:75:eb:1a:
1f:a3:3a:05:5b:e1:48:e2:36:58:ef:d3:0c:98:1c:
fd:48:e8:16:45:f7:03:03:9b:75:ff:71:df:35:56:
03:c1:c9:d4:13:70:13:12:d2:f7:f1:39:e0:53:be:
ba:34:ae:fd:dc:05:a5:0d:e3:4c:7b:97:8a:09:56:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:21:F4:4B:08:19:47:CC:04:08:37:50:93:DB:AA:47:7C:FA:0A:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/680721ee-ec33-3138-b985-b4ef893c094d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:29:5c:66:92:8d:ee:da:cd:e3:c9:21:c4:60:f6:5b:e7:b6:
b5:74:a5:8d:1a:9c:c9:1e:1f:1b:1d:b5:f4:b9:21:7a:71:0c:
e3:06:ec:34:98:24:16:fd:a8:a7:64:5f:be:25:2b:22:8a:fd:
27:f3:f3:03:03:2d:1c:a7:b5:67:98:0e:ea:dd:e6:0e:ac:b8:
2a:42:db:e2:63:d1:58:c9:87:ca:e2:47:93:58:f0:f4:88:85:
b0:4e:d8:c5:0a:44:a3:7f:4d:fc:6b:e3:56:ec:42:0f:3c:8b:
cf:c8:fc:e4:92:1d:68:96:04:74:9a:45:29:80:7a:a4:fc:5f:
c6:37:57:9f:51:a7:85:cc:9f:f8:63:5a:1c:09:a2:af:39:c3:
f3:5b:e3:4e:33:58:39:ba:df:35:4d:6b:e9:7c:1b:6b:97:ff:
17:b3:97:96:63:36:e8:86:d5:1a:8d:bc:dd:dd:67:99:c3:f9:
c4:e3:3a:6a:48:6e:2d:21:7a:8d:26:36:e1:0f:63:ed:d1:67:
1a:1c:16:fa:86:a5:35:01:ff:6a:c5:12:98:1d:43:60:09:27:
e3:f5:db:c1:e4:28:d2:ef:1a:a5:a3:a5:58:f1:93:93:70:36:
12:9a:61:4a:a8:b5:34:e9:e7:b8:7d:c0:a3:0a:48:4a:29:01:
fb:5c:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:26:42 2025 by rpki-client