Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8646e9dc-d51a-346a-a69f-96405ba24381.roa
File: 8646e9dc-d51a-346a-a69f-96405ba24381.roa (raw, json)
Hash identifier: MXodmzuLLuaE1EVhzgkyDkDmjgvYgc+Wiwy268phM/Y=
Subject key identifier: 76:E0:4E:09:D9:5C:D7:6D:00:FF:DE:65:C8:66:68:BA:57:8F:D9:98
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858439AC3091EF79EC41BE0DEA800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8646e9dc-d51a-346a-a69f-96405ba24381.roa
Signing time: Thu 19 Oct 2023 18:39:39 +0000
ROA not before: Thu 19 Oct 2023 18:39:39 +0000
ROA not after: Wed 17 Jan 2024 19:39:39 +0000
asID: 11798
IP address blocks: 166.1.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:c3:09:1e:f7:9e:c4:1b:e0:de:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 19 18:39:39 2023 GMT
Not After : Jan 17 19:39:39 2024 GMT
Subject: CN=3b42379b-eb9a-4c3e-97cf-d781f1d611fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:b0:c1:25:d7:8b:7c:86:09:30:c9:46:b8:
d5:ab:55:f1:05:00:94:f3:28:56:c0:95:0e:d2:ad:
7c:a0:af:21:db:67:02:4e:4c:65:35:5c:7d:c8:7a:
ee:2a:40:6d:7e:aa:30:ea:e5:58:1a:6f:64:e6:16:
3b:67:fd:34:13:12:a0:6a:19:4a:e3:bb:de:db:dd:
72:ca:f1:6d:22:27:80:83:cc:15:1a:17:06:28:0f:
bc:8a:3d:54:56:a4:c4:6f:30:6b:0c:29:3a:9f:df:
0c:5b:93:ad:fd:e3:d9:08:01:a6:7e:fd:fe:0f:66:
73:d1:96:7c:da:b1:d8:3d:58:a6:b3:8b:62:82:3b:
fb:95:a7:cc:cf:3d:d5:74:b0:35:50:9c:0e:64:b2:
0d:1b:0f:25:e1:0b:ab:a8:2b:3f:ce:25:69:4b:d8:
be:a1:ef:a4:37:1d:dc:90:20:b1:b7:fc:e5:2d:b6:
98:37:aa:a3:06:d0:71:c6:de:06:a5:77:ce:5c:c8:
93:06:99:9d:4f:fb:c3:f2:30:05:e4:32:0b:db:7a:
92:3e:67:a0:6d:06:6a:4b:42:79:10:d4:e0:39:e2:
57:06:59:3b:cd:49:46:c9:d6:09:e6:98:be:fc:04:
5c:d7:b2:58:a1:62:37:73:0a:95:b2:52:15:ac:80:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:4E:09:D9:5C:D7:6D:00:FF:DE:65:C8:66:68:BA:57:8F:D9:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8646e9dc-d51a-346a-a69f-96405ba24381.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:0b:97:96:74:5e:fa:31:da:3e:a3:eb:80:ff:6e:e5:e5:3b:
fe:a2:13:ea:cf:6e:cb:ac:16:ac:b3:ab:82:0d:e6:9a:f7:e5:
80:83:c1:2c:fa:8a:72:6d:58:5c:ae:a9:bc:94:cd:e5:b2:c7:
b5:1c:4e:cc:dc:88:ee:0d:9e:a0:be:77:30:a3:96:e5:05:a3:
62:c5:63:ac:bc:b9:af:24:de:cd:45:d4:fd:54:fa:c0:59:10:
bf:c2:57:cb:59:19:dd:ec:74:ab:e2:1e:96:d6:a0:e7:b7:5d:
35:68:7b:72:d2:b3:39:2a:4b:09:af:2d:2d:2d:28:fa:5a:44:
84:97:97:4a:89:a3:ac:ef:be:fd:8a:22:70:69:73:f6:92:cc:
ee:ec:0e:dd:06:63:f7:de:36:56:9a:f4:d3:7c:0a:54:0a:82:
a9:0b:d9:a6:ec:8d:a9:78:e8:ad:2d:d0:3a:c0:13:39:18:88:
63:3c:4e:27:77:7c:af:c2:73:99:50:91:b1:41:30:d5:cd:8b:
f9:79:de:72:0e:a6:04:24:71:5f:8f:a8:9b:80:45:8b:18:2f:
1d:80:e9:ea:54:08:33:68:1d:af:7b:bf:76:2b:81:c9:30:7c:
d5:54:29:c4:00:ba:f8:bd:c4:c8:ac:e5:ad:4b:83:ab:ab:e6:
82:52:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:27:34 2025 by rpki-client