Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/774c4174-e7ca-3715-a3e7-394e979c42c4.roa
File: 774c4174-e7ca-3715-a3e7-394e979c42c4.roa (raw, json)
Hash identifier: gBMvQa6E7M+5Qyiz54Ee9JIX0Jm9+M2kRRiLpgDBMCw=
Subject key identifier: 14:F1:BA:A2:BC:DF:4F:1F:DF:FF:A7:6D:40:69:C3:18:05:B8:49:3B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858431B148BA88E0415A316C74F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/774c4174-e7ca-3715-a3e7-394e979c42c4.roa
Signing time: Mon 04 Sep 2023 01:00:23 +0000
ROA not before: Mon 04 Sep 2023 01:00:23 +0000
ROA not after: Sun 03 Dec 2023 02:00:23 +0000
asID: 11798
IP address blocks: 166.1.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:1b:14:8b:a8:8e:04:15:a3:16:c7:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 4 01:00:23 2023 GMT
Not After : Dec 3 02:00:23 2023 GMT
Subject: CN=f17574c8-8989-408b-9f24-d3bf3785c8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:f8:82:c8:34:0d:a4:bc:a0:21:fc:4e:96:
a8:ba:ac:5a:0e:af:97:23:65:36:21:9f:75:78:04:
8b:93:62:57:db:6a:c6:3f:5e:a4:66:5c:1b:ea:92:
a1:bc:ec:52:bc:6e:fe:3d:79:6d:11:67:d5:98:e6:
28:76:a8:54:59:b2:e0:06:2d:8a:fd:85:85:4b:1a:
5b:ba:e4:23:ea:01:c9:07:7b:07:c6:fa:59:81:34:
8a:cc:dc:82:b2:f9:fa:a7:49:45:7c:cc:62:ec:71:
e2:1a:3c:8a:59:63:a4:3a:1e:8c:dd:d2:30:37:0b:
59:7e:2a:2f:f1:9f:0c:9a:ff:9d:7d:4e:b9:31:6a:
98:6c:3d:8d:e6:00:bc:0e:a4:c1:e8:95:d1:15:26:
73:02:a6:ab:62:16:c0:34:ae:88:1a:c3:7e:be:3e:
ed:48:71:94:c4:0d:33:0e:04:3d:cb:84:2b:ac:b4:
df:5d:87:54:df:33:6c:af:92:6d:46:32:0d:6f:95:
1f:61:ed:a4:b5:03:d4:4b:ca:92:3c:d8:ae:88:75:
e4:e8:35:34:7a:9a:a3:42:ee:c9:5c:ff:88:0e:31:
55:cb:d9:1a:53:9e:ae:48:5e:07:9a:91:a1:77:1a:
6c:62:21:de:9e:5f:fb:88:4e:14:70:91:d7:0c:06:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F1:BA:A2:BC:DF:4F:1F:DF:FF:A7:6D:40:69:C3:18:05:B8:49:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/774c4174-e7ca-3715-a3e7-394e979c42c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:15:7b:8f:eb:cf:63:76:44:65:8d:00:22:16:28:2c:7c:c4:
2b:db:df:e7:a3:52:66:ea:8f:a4:a8:03:8c:62:d0:5d:cd:01:
37:3c:2f:40:e8:00:a0:79:dc:03:98:85:d0:50:85:9f:0c:0a:
cb:7f:fc:4f:b8:f0:6c:6d:e5:2d:df:50:99:8e:f3:d0:e5:c5:
f8:2b:ba:92:0d:14:e9:1e:1d:8c:ff:3a:a8:4f:52:e0:cc:55:
92:5a:12:a0:35:c9:81:6c:c9:a8:69:9e:19:1b:e2:92:70:6a:
60:5c:c4:69:ff:8e:04:bf:09:b8:97:bc:88:cb:0c:36:7e:6c:
45:63:aa:83:0b:44:2d:0a:13:3b:7f:16:01:f4:62:aa:62:ea:
eb:4b:ae:fa:27:49:0f:06:20:f3:c9:21:fe:12:c8:b9:af:eb:
19:bf:6e:03:10:50:eb:17:4a:6c:06:eb:0d:15:e6:71:bc:50:
70:1a:ec:3f:a3:7e:3e:24:10:ea:f2:5c:fd:4a:0d:a8:ac:de:
89:fc:85:23:b9:3a:64:7c:3b:5c:61:f9:ad:12:d3:57:b7:37:
9e:c7:01:88:42:a3:4d:8b:a5:45:86:ea:01:3e:e4:9c:24:a9:
36:c9:6a:17:c5:1e:2b:3b:b2:04:05:f8:7f:5c:b3:c6:4c:57:
38:1f:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:49:16 2025 by rpki-client