Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/895edb48-4bc1-3f5a-83c5-d797d689fa6a.roa
File: 895edb48-4bc1-3f5a-83c5-d797d689fa6a.roa (raw, json)
Hash identifier: UjMqE+7dIcUDmH/aTn6Hs+iWIY5h5dZPMa2B6Axl0CE=
Subject key identifier: A6:CA:34:35:19:D2:8A:0F:C7:95:A1:16:13:C9:B5:13:9C:B0:ED:A1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842EB3020A8A12FCFDF3BF9BB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/895edb48-4bc1-3f5a-83c5-d797d689fa6a.roa
Signing time: Thu 17 Aug 2023 21:17:12 +0000
ROA not before: Thu 17 Aug 2023 21:17:12 +0000
ROA not after: Wed 15 Nov 2023 22:17:12 +0000
asID: 32613
IP address blocks: 166.0.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:eb:30:20:a8:a1:2f:cf:df:3b:f9:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 17 21:17:12 2023 GMT
Not After : Nov 15 22:17:12 2023 GMT
Subject: CN=d41c9166-d022-494e-b4bf-cc620ef1f495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:f5:fc:47:92:4e:9a:1a:62:f3:97:d6:e5:
c2:6e:99:dd:a2:c8:6f:fa:5d:28:5f:f3:38:e3:39:
4d:0a:1f:6b:fc:e5:f7:48:7e:89:ab:e6:be:ac:96:
fd:94:8c:5f:c0:f9:da:43:7c:b6:55:4a:c5:d4:77:
93:d4:0d:ee:c7:82:73:8b:c1:9b:c4:95:5f:89:0c:
7a:f7:4f:0c:8f:97:41:96:ad:a1:9b:12:9c:2e:03:
7b:a8:a4:f6:9b:66:90:6e:35:73:c5:00:7f:8f:a6:
f2:c6:e2:6b:c7:b9:51:f7:ad:aa:4e:66:fa:bd:dd:
de:41:bb:ed:c5:06:d6:85:51:1f:30:9a:3d:d5:00:
b9:29:80:1e:89:96:ef:d2:97:47:31:b6:18:90:a1:
1b:d2:bc:6d:37:8a:e6:3b:f7:16:50:65:7c:fd:df:
98:4e:63:2e:31:87:5a:70:cd:aa:2e:36:44:35:65:
56:6d:54:f4:af:06:48:d6:e1:61:4e:4b:3f:48:58:
5f:aa:68:a1:45:71:29:4a:be:69:f0:33:4a:ce:30:
5c:ee:de:b5:0b:08:e7:91:ab:4f:6c:63:7b:07:3d:
61:d5:ee:e5:67:62:6f:76:74:c3:65:26:18:ac:b8:
26:ca:6e:ab:ae:07:6a:f9:a8:49:ce:1f:b0:55:5d:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:34:35:19:D2:8A:0F:C7:95:A1:16:13:C9:B5:13:9C:B0:ED:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/895edb48-4bc1-3f5a-83c5-d797d689fa6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:9c:9b:a4:39:8f:b8:11:a1:18:5b:d5:2b:ef:2a:45:b9:55:
4e:06:b2:b2:a1:e4:08:01:7f:27:b6:2b:8a:ed:56:c8:0b:5f:
2a:95:02:e9:6f:71:55:5b:14:8f:d9:e2:16:fa:44:15:8f:c5:
fd:d2:d6:d3:7e:16:06:99:a7:75:64:c9:e2:7e:f9:cd:7a:52:
ce:1f:a7:f3:b8:79:2c:2b:eb:2d:5a:b4:c3:fe:61:50:db:17:
7f:fd:bb:a1:d8:78:48:eb:23:8f:61:7c:5b:f0:1c:83:0d:e8:
c8:9e:02:06:6e:84:1c:40:8d:8a:2b:51:86:8d:07:51:fc:6c:
38:08:c2:e3:94:d8:f6:7d:2d:d7:ca:bb:dd:e5:11:40:18:7d:
2a:1a:61:8d:2b:33:1f:eb:2c:3c:24:9e:90:c5:24:5f:45:50:
8b:90:85:cf:89:66:1d:f7:98:33:ec:fa:20:22:86:a2:f3:f8:
c4:7c:53:44:41:d9:05:64:7c:43:2c:61:cd:e5:58:2b:ad:2c:
7a:45:58:82:9b:db:20:7e:d8:b7:3a:af:be:4e:c1:7f:77:fb:
2f:f4:67:bf:13:d4:84:34:9e:ab:2a:7f:79:9e:40:64:55:ae:
8f:97:1f:4c:cc:12:d4:d3:59:0e:69:4f:c7:7a:fe:31:5f:9d:
15:b3:83:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:04 2025 by rpki-client