Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/848a40f7-7dc1-332d-a0a2-7dcb29d55d1b.roa
File: 848a40f7-7dc1-332d-a0a2-7dcb29d55d1b.roa (raw, json)
Hash identifier: r6AWF27jmBcxdZQZ4CO2/JDmo5PcManT5S3EW3jePo8=
Subject key identifier: 56:BB:E6:18:B4:47:F3:6E:E2:8D:AA:42:1F:22:78:25:9D:45:BD:6E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858426FF3159D3607BE31CEAF4980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/848a40f7-7dc1-332d-a0a2-7dcb29d55d1b.roa
Signing time: Tue 04 Jul 2023 17:49:46 +0000
ROA not before: Tue 04 Jul 2023 17:49:46 +0000
ROA not after: Mon 02 Oct 2023 17:49:46 +0000
asID: 11798
IP address blocks: 166.1.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:6f:f3:15:9d:36:07:be:31:ce:af:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 4 17:49:46 2023 GMT
Not After : Oct 2 17:49:46 2023 GMT
Subject: CN=2ac19e50-bdf5-4190-8266-23477fb1b834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:9b:3f:d7:18:46:1e:3d:3f:62:19:5e:51:
ac:6f:b6:50:bf:72:52:9a:1a:46:8d:0f:31:45:bd:
be:e4:40:54:82:9f:94:1d:c1:47:47:5b:8f:9e:1e:
ac:28:f8:ac:f4:6c:c5:3f:35:df:38:38:e6:f7:d4:
f0:e8:83:3f:51:7c:3c:7d:56:6a:71:dd:fb:b2:df:
d0:9a:e9:8c:8a:c0:28:e3:d7:82:d5:77:52:de:79:
fa:60:54:12:bb:04:3e:1e:a1:98:08:f5:36:0a:d6:
4e:78:89:cf:74:08:1a:d7:cb:2b:c6:7d:19:f3:79:
40:58:49:8d:fe:91:5c:6f:59:56:9a:f4:fd:f4:67:
83:2f:00:79:f7:81:53:84:93:7a:27:26:58:57:ec:
3b:33:ce:fc:fb:40:2b:96:0e:14:9f:3c:db:ff:ae:
ae:0d:06:38:1a:6b:8b:b3:79:18:73:d2:9e:37:26:
33:e4:f2:6d:de:32:fd:48:32:cf:44:df:d6:3a:6d:
3e:a0:a9:e0:c9:f0:b5:40:e3:e1:f4:87:26:80:9a:
89:6c:13:e8:7c:bb:0d:6c:64:bb:71:88:ac:a4:60:
a4:ca:59:33:8b:e9:00:12:51:fa:a8:b5:8c:1e:42:
e1:da:ed:42:ec:7e:a6:41:27:16:77:db:d3:96:7c:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BB:E6:18:B4:47:F3:6E:E2:8D:AA:42:1F:22:78:25:9D:45:BD:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/848a40f7-7dc1-332d-a0a2-7dcb29d55d1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:97:19:4d:d8:07:05:98:8d:98:8b:f6:86:d3:59:56:71:50:
83:9c:76:57:c2:4e:8d:01:a2:4f:1e:cd:16:b2:33:76:44:fb:
0a:78:b7:b3:96:b5:9d:84:53:ce:fd:f5:72:88:28:72:47:1e:
0d:13:f1:af:88:c7:73:fa:94:45:7e:73:ff:cd:b5:94:b6:b4:
4d:9f:2c:2f:b6:84:af:7a:6c:18:27:fd:4f:42:0f:7b:9f:e2:
8a:96:fb:b9:af:73:0c:fc:97:1d:5f:b8:3a:fb:37:de:51:1f:
95:6b:3f:51:7a:88:bf:fd:70:f0:89:f6:39:49:ae:73:32:d5:
b2:8d:70:40:db:37:e1:ed:56:f3:66:67:fd:5e:ff:e3:b8:9f:
99:f4:fd:a1:98:72:71:7d:70:40:7c:00:dc:06:29:7a:2c:31:
7a:47:ff:0a:3b:21:15:45:5e:04:65:fb:4a:9c:e2:31:0f:a9:
54:4c:1d:4a:16:9b:fa:b3:fa:f4:57:48:7a:c9:e1:4e:93:92:
1d:8c:eb:aa:40:46:09:61:31:2a:f3:df:88:57:ee:02:9b:2a:
04:93:60:f2:a3:a7:2e:87:e5:48:a9:7e:6e:f9:70:b5:b5:89:
fd:6a:10:78:95:94:04:02:b5:7a:33:ee:cb:87:c9:4b:b1:7c:
3d:67:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:46 2025 by rpki-client