Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79f12125-371f-3096-8bc5-97d36fd8622d.roa
File: 79f12125-371f-3096-8bc5-97d36fd8622d.roa (raw, json)
Hash identifier: ELxQsnwaIqX3bWox1rQs4GwEXkNSTmjFLsgfUFr3lTw=
Subject key identifier: 24:0F:71:3F:19:E9:B9:59:22:7A:A0:13:E6:93:10:8C:FB:7F:31:17
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858468D44D334ED8242D68E941990
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79f12125-371f-3096-8bc5-97d36fd8622d.roa
Signing time: Tue 16 Jul 2024 01:00:24 +0000
ROA not before: Tue 16 Jul 2024 01:00:24 +0000
ROA not after: Mon 14 Oct 2024 01:00:24 +0000
asID: 61317
IP address blocks: 166.0.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8d:44:d3:34:ed:82:42:d6:8e:94:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 16 01:00:24 2024 GMT
Not After : Oct 14 01:00:24 2024 GMT
Subject: CN=7f77872a-79e6-45b1-a6b1-3f03184affa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:f1:05:6d:13:e5:44:1a:2b:bd:25:cd:e3:
c3:91:07:60:78:21:3e:9c:46:08:1a:3c:83:b8:55:
b9:b1:d6:87:e4:4c:84:91:bd:a2:8a:03:c3:1c:cc:
5e:12:7f:28:4b:8b:9c:f1:3b:d5:7d:33:91:5b:d5:
97:0f:5e:40:b5:39:ad:91:ad:d4:3a:b0:a6:7b:88:
d9:79:de:cb:71:c3:81:67:7f:d3:f8:9a:db:c4:3b:
4f:ae:39:f3:90:50:00:c3:d2:f1:9d:d2:b3:79:c2:
52:10:7f:a0:11:9b:f2:2d:d8:54:24:f3:3d:a8:e0:
5a:ce:24:7f:f9:69:d1:4b:61:c2:3c:27:3a:7e:37:
04:4a:a6:83:fe:33:1b:c1:8f:e9:c6:93:55:e4:cb:
1d:00:72:83:e5:8a:17:b2:45:25:c2:c3:3a:b4:2e:
8e:eb:85:66:66:98:36:88:f5:59:99:ab:1b:5f:6a:
30:5c:1a:94:a4:f8:e1:c1:c9:ec:d7:dd:e9:3a:0d:
33:98:85:34:26:c1:59:01:d2:39:c1:1c:69:e7:88:
da:c3:5d:08:a7:c0:c3:d9:03:0b:77:e8:08:ef:ab:
bc:9f:75:2f:f1:2e:c6:b8:5d:87:54:a4:35:58:04:
cf:92:8d:85:eb:97:df:73:1a:ba:c1:8e:13:6d:8d:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0F:71:3F:19:E9:B9:59:22:7A:A0:13:E6:93:10:8C:FB:7F:31:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79f12125-371f-3096-8bc5-97d36fd8622d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:d7:25:98:bf:10:e4:95:02:86:e7:03:f1:11:8b:39:5d:ae:
2d:6a:43:63:82:29:ee:61:52:bb:a9:65:9a:3f:44:a5:c2:8c:
e0:1b:5e:a7:46:05:a9:2e:f3:df:7b:4c:75:bb:89:14:91:5c:
52:10:9a:b0:45:e6:f3:07:69:32:45:a0:48:12:01:e3:2e:14:
04:06:b7:6c:b3:57:fe:ae:ff:13:41:13:5a:22:cc:c5:c4:76:
2f:50:db:03:2a:ad:83:dd:5e:5a:f6:b1:7f:68:3e:09:7e:d7:
8a:9c:93:9c:5e:7b:ce:d8:60:81:95:4c:5f:72:b1:6c:1f:57:
b4:9a:f0:cf:c7:a5:e2:4b:39:fc:bd:d1:f6:7d:d8:e6:65:3f:
81:62:4d:80:64:7b:ce:0f:1f:81:92:63:63:6d:d3:67:09:7b:
f0:de:8d:e7:6e:2c:ed:05:bf:47:f0:51:ed:aa:8a:1c:06:aa:
ac:30:f8:bb:45:39:3c:b8:c9:d8:a6:f2:56:6f:4a:07:be:4e:
43:54:46:df:4a:c9:0d:e1:63:d1:c5:2b:51:98:45:c1:56:50:
89:7e:a6:fc:a1:ad:cd:b6:ac:1d:1c:8b:2c:5f:c3:4c:fd:3d:
0e:fe:c5:4e:b4:42:31:1b:2f:36:3e:88:88:81:3f:00:42:b8:
04:18:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:30 2025 by rpki-client