Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/833e1434-60f1-3047-b647-173000f86544.roa
File: 833e1434-60f1-3047-b647-173000f86544.roa (raw, json)
Hash identifier: 3aR/eKd/J05y4Y124A/6wIvPNDRLlzUhszwrdQRGUyg=
Subject key identifier: 89:0E:C7:56:E9:3B:F7:73:77:8D:C1:F8:03:04:93:B5:92:94:81:45
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858462B8ECD4EBF9386AA14147DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/833e1434-60f1-3047-b647-173000f86544.roa
Signing time: Tue 11 Jun 2024 01:00:24 +0000
ROA not before: Tue 11 Jun 2024 01:00:24 +0000
ROA not after: Mon 09 Sep 2024 01:00:24 +0000
asID: 205220
IP address blocks: 166.1.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2b:8e:cd:4e:bf:93:86:aa:14:14:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 11 01:00:24 2024 GMT
Not After : Sep 9 01:00:24 2024 GMT
Subject: CN=1cd7f57f-d651-4d8a-b3bd-90dc3cc64fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:83:f3:57:0c:c9:2c:43:15:3b:01:f4:8d:
e3:8f:1d:fa:e9:8e:42:2b:84:7d:88:63:c7:26:15:
58:71:b3:17:56:b1:a1:51:54:c5:a3:f8:3b:11:0a:
c8:aa:21:28:a9:95:78:cd:b9:84:2a:b9:1a:d4:fd:
ba:49:26:e6:81:5b:67:0e:27:48:e3:38:2c:0e:a1:
09:5d:12:55:66:f4:cc:94:fe:67:30:75:aa:c8:08:
99:4c:6b:57:af:0d:6b:1f:2c:2c:14:28:55:05:de:
97:a9:3d:74:a6:6a:b3:09:0e:b1:b9:c3:3c:64:17:
aa:9b:b9:7d:1a:32:0f:47:05:7e:2f:1c:53:1b:fe:
0c:03:4c:06:b5:b8:b1:41:c4:73:ec:66:8a:02:1d:
8e:c9:68:96:10:f4:73:12:a9:e4:1e:4c:6c:34:20:
5b:75:b2:a1:5b:60:cc:14:42:64:11:99:37:9e:eb:
88:fc:91:e7:20:a1:48:ea:93:7c:e8:e7:bd:68:bc:
b9:77:56:29:cf:1a:05:bc:84:cc:c4:24:1a:6a:b0:
20:86:76:a7:c9:fc:64:35:80:3c:1a:bc:d5:de:52:
6e:3d:4d:c4:28:d0:c6:48:a7:43:93:ea:33:6b:7f:
b5:98:02:9b:c5:2e:c4:69:4e:cf:53:53:aa:da:b0:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:C7:56:E9:3B:F7:73:77:8D:C1:F8:03:04:93:B5:92:94:81:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/833e1434-60f1-3047-b647-173000f86544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:04:44:db:17:db:a9:60:bb:46:68:15:e7:04:30:43:4b:82:
d3:05:a9:de:32:62:26:a9:53:6a:df:ad:7f:a5:bc:4e:56:0f:
dd:88:e9:a0:92:3f:c5:d8:8e:ba:ca:33:11:d0:0d:37:ef:36:
60:07:3c:74:51:0f:fe:54:3a:77:fc:e9:d1:99:8d:71:1b:b7:
93:87:5b:4d:9c:06:90:f5:b4:b5:82:b7:5f:57:d5:46:2b:78:
99:8e:9f:c3:6f:2c:56:16:22:74:23:a4:b0:2b:cc:b6:12:e1:
6d:05:00:71:71:9b:23:df:1a:a5:7e:7a:21:f3:77:c0:26:95:
89:c4:0b:ba:1e:74:8c:49:0c:ae:d6:0c:9a:bf:bc:fe:28:a4:
6a:48:2f:88:83:bb:d2:51:fe:2b:52:9d:4d:9f:74:a3:f2:bb:
46:33:2b:5e:7b:44:e2:d7:ad:34:b2:96:21:93:1f:71:23:f4:
d7:a5:02:d9:93:1b:f2:22:43:3c:0b:1c:34:49:02:af:28:fe:
99:e9:30:1d:48:eb:90:6b:9c:0f:34:2b:0c:1a:80:16:dc:ef:
bc:14:e4:f0:89:86:59:c2:e9:2d:4a:3a:52:eb:df:de:48:45:
b0:61:c0:09:dd:e3:a5:5a:6f:b6:8c:e9:8d:13:cb:00:b4:f4:
af:3c:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:34:29 2025 by rpki-client