Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7366db0e-8a5d-307d-8175-2a7a06af6f92.roa
File: 7366db0e-8a5d-307d-8175-2a7a06af6f92.roa (raw, json)
Hash identifier: /KzmpBulI4dQ5oMqjS+tg+Oy1vnevjssrj0yidxGgDE=
Subject key identifier: 01:D1:D5:0F:93:B2:77:9E:73:89:69:B6:FC:87:3C:5F:82:4F:A8:21
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858411C6C5D2E4E0A21C6A71AB640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7366db0e-8a5d-307d-8175-2a7a06af6f92.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Fri 06 Jun 2025 04:00:00 +0000
asID: 35913
IP address blocks: 166.0.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:1c:6c:5d:2e:4e:0a:21:c6:a7:1a:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jun 6 04:00:00 2025 GMT
Subject: CN=29ec363c-a759-45a9-9e48-532d01e8ab14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:85:8f:73:bb:0f:9a:5c:7e:5d:e5:1c:80:
c4:34:4d:15:32:9f:f1:bb:03:07:31:73:4c:d8:dd:
ce:89:9e:05:19:55:a1:13:73:39:c6:48:a3:ed:18:
d0:18:17:48:89:ad:7a:35:65:e2:74:17:eb:f1:c1:
21:f8:e6:d6:2c:f3:81:95:39:59:ee:0d:33:f3:db:
70:d7:ac:87:f2:0e:8e:fe:3f:ad:61:e3:b7:24:ea:
b9:c3:29:d5:b8:5f:d6:fd:68:04:31:ec:c8:af:02:
aa:f0:c5:6b:bd:3e:14:6e:9e:1f:cb:3e:69:82:d2:
99:95:a8:f8:54:1e:44:26:77:9a:67:52:06:0b:3a:
59:ee:a6:a5:00:50:c6:ae:37:98:cd:40:a6:15:4d:
9a:46:c1:27:ba:d1:97:31:6b:f1:fa:6d:ff:ac:2f:
b7:a8:4c:8e:e2:4c:64:02:52:ea:01:ce:3e:db:b4:
cd:45:14:c7:0e:3b:07:89:e5:54:35:da:c7:0d:f8:
f9:79:14:65:4a:de:7e:a1:08:fb:5f:c5:a9:b3:9c:
53:86:92:d5:17:6e:66:07:6b:f2:83:5a:fa:a4:75:
b9:50:9d:c2:b1:ef:a3:d3:b8:e9:fd:66:12:1c:90:
66:dd:94:d7:21:4a:ec:6f:94:cc:08:00:17:a3:f2:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:D5:0F:93:B2:77:9E:73:89:69:B6:FC:87:3C:5F:82:4F:A8:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7366db0e-8a5d-307d-8175-2a7a06af6f92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:2b:a8:a3:9e:1e:b2:b6:00:af:39:99:83:7d:d2:fe:69:47:
2d:23:7a:6d:94:93:1d:4f:4b:a9:a3:24:67:df:40:9d:79:49:
05:04:25:4c:3d:d2:ec:97:55:86:27:17:ac:6a:eb:40:3b:77:
f0:4b:f3:90:9c:36:85:d2:f5:f4:57:2a:ec:aa:99:79:c5:e9:
39:27:b9:5f:e6:99:a8:c5:82:dc:b7:f7:59:93:4f:c4:c6:e4:
0d:f3:33:5e:b8:8c:e1:a7:f7:6b:1b:fc:77:ec:a9:85:72:91:
3d:1a:e1:8f:9a:15:8a:08:15:4a:40:c2:5e:65:ea:e9:f1:a5:
2f:c7:97:65:41:50:69:d7:84:b7:c6:a3:ab:dd:5c:e2:c0:df:
12:38:80:84:2b:fb:0f:a9:3a:16:4a:4e:a3:f9:59:15:08:b8:
df:4a:3b:8b:b4:ed:84:ad:b7:32:7d:30:20:34:72:e4:38:35:
6f:e4:88:c4:6a:a1:03:0b:04:9a:2e:fb:2a:00:62:54:4b:fb:
a0:88:38:ee:22:42:ab:f4:84:8b:15:e9:4a:67:6b:03:d5:d5:
51:82:a5:28:58:df:c0:bd:12:ba:db:7d:37:24:0e:1b:b6:d1:
57:9d:53:79:6c:93:f3:31:b5:c5:1d:c5:cc:d1:4a:a7:29:3e:
29:24:1c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:43 2025 by rpki-client