Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87948c4a-29e1-3646-a2ca-0802f7549703.roa
File: 87948c4a-29e1-3646-a2ca-0802f7549703.roa (raw, json)
Hash identifier: p5BJ7+G13Go2O56fAFnJ4vCJXvYq1ttfHlX5KYBhYL0=
Subject key identifier: 5B:80:8B:01:93:0A:08:36:CC:FB:19:54:66:14:F4:66:1F:0F:F2:DF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858471AAA50CEFE3CEC05E7F84380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87948c4a-29e1-3646-a2ca-0802f7549703.roa
Signing time: Wed 04 Sep 2024 16:34:08 +0000
ROA not before: Wed 04 Sep 2024 16:34:08 +0000
ROA not after: Tue 03 Dec 2024 17:34:08 +0000
asID: 11798
IP address blocks: 166.1.68.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1a:aa:50:ce:fe:3c:ec:05:e7:f8:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 4 16:34:08 2024 GMT
Not After : Dec 3 17:34:08 2024 GMT
Subject: CN=b981b3b8-0cd0-4a01-b728-700500b13639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:32:3a:19:9a:bb:a3:61:0a:99:b8:b5:bf:
d9:19:34:d5:b7:23:fb:d2:05:d3:3f:99:4a:56:d7:
b5:e1:4d:d1:01:a0:6c:b9:db:5b:31:34:95:fe:2d:
73:01:56:79:f8:26:26:f4:5f:b4:1f:85:23:a1:e5:
ec:33:a9:31:e2:09:a6:11:19:16:86:3a:74:9b:9c:
c0:af:9c:98:2c:cd:4d:69:e3:1e:d5:a0:03:4d:a4:
34:0d:87:b1:cc:6f:90:ef:e1:b5:e8:7a:8a:b3:43:
8d:86:29:0b:99:43:0f:e6:ac:a0:cc:b6:6c:35:27:
d5:96:21:95:2c:b7:11:23:3d:86:69:00:80:40:8f:
20:c4:8a:29:46:f4:aa:25:7d:07:8c:81:65:a2:5f:
be:09:ba:e4:85:52:bf:57:8a:01:27:9c:fc:b8:15:
a6:96:b4:62:8e:29:a0:f8:be:d0:76:fb:0b:dc:d6:
86:24:7c:42:96:dd:a3:41:09:b7:8e:19:cd:cc:7d:
d2:28:77:8d:28:03:21:45:68:ea:49:70:e6:07:17:
bd:2a:ca:b1:da:04:29:04:28:a2:4f:d2:9f:2e:94:
27:b4:cc:7d:90:9f:e9:a1:9b:8c:76:66:e5:5f:35:
55:2a:86:4c:a7:a1:b5:79:6a:ea:cf:4e:d3:6e:3b:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:8B:01:93:0A:08:36:CC:FB:19:54:66:14:F4:66:1F:0F:F2:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87948c4a-29e1-3646-a2ca-0802f7549703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:56:91:cd:98:0e:60:b3:1f:c7:1c:63:6a:4f:89:c5:0e:38:
72:b6:2a:1b:e2:18:ce:ea:fd:1d:94:c7:2b:6d:ab:58:ac:c5:
f8:42:6e:6c:ef:f9:87:21:a3:52:c5:b8:65:d7:06:dc:90:57:
5f:eb:ef:9d:bc:2b:58:5e:69:89:9e:b0:d0:30:b2:1c:41:c9:
c1:c2:b7:f2:3f:b4:14:93:d5:ae:f3:6f:1e:ba:ac:93:2d:b7:
b1:07:5e:d7:d7:43:e2:ab:d9:d7:00:70:c5:04:f5:41:1d:1a:
0e:0f:31:e5:ff:6f:ba:19:7c:a7:21:bb:60:90:74:16:f5:47:
1e:54:04:50:0c:11:da:b1:f0:24:17:0b:19:7c:d8:65:86:a5:
e0:41:48:5d:7d:92:cf:89:da:e6:b3:58:a7:22:1a:de:bc:4f:
4c:ac:16:2c:4e:2f:a8:92:51:38:69:fc:25:0c:a7:79:27:e6:
c1:91:db:0f:34:ab:1e:b0:c3:33:aa:b0:4c:d6:23:b1:84:0a:
93:66:68:3d:39:af:a9:6d:91:9f:01:98:52:26:aa:db:a4:86:
8d:fd:cf:70:7b:a6:3c:7d:2c:95:69:df:26:c9:75:6e:62:4c:
7f:33:98:1f:74:52:d0:b9:87:84:86:74:80:ce:be:2b:0f:58:
a2:55:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:00:12 2025 by rpki-client