Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89afdad7-6b5c-3dd8-b9ab-488bf38e9f21.roa
File: 89afdad7-6b5c-3dd8-b9ab-488bf38e9f21.roa (raw, json)
Hash identifier: 03MEaOKImKei3m1VggEfFj5S4PthOB4nsnnQJVwK/58=
Subject key identifier: 9A:54:29:74:9C:CD:B2:0A:14:13:FD:E6:49:E1:B4:A0:C9:CA:0C:FC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842FE25D51EDB50D43AC08AD588
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89afdad7-6b5c-3dd8-b9ab-488bf38e9f21.roa
Signing time: Thu 24 Aug 2023 16:16:49 +0000
ROA not before: Thu 24 Aug 2023 16:16:49 +0000
ROA not after: Wed 22 Nov 2023 17:16:49 +0000
asID: 11798
IP address blocks: 166.1.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:fe:25:d5:1e:db:50:d4:3a:c0:8a:d5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 24 16:16:49 2023 GMT
Not After : Nov 22 17:16:49 2023 GMT
Subject: CN=f406f169-54ff-446d-9520-0c0f74fcdc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:85:8a:0a:32:43:5f:4b:ce:b3:21:a0:02:
47:93:88:88:e5:29:af:0c:2e:27:f2:27:f2:89:bf:
b6:5d:b4:64:11:cc:20:78:95:ed:f9:55:52:11:7e:
fe:31:dd:83:1e:bc:5e:9c:96:ae:65:8d:5b:77:29:
36:94:d3:72:a8:67:89:ed:44:02:09:e0:98:31:78:
f4:80:24:21:17:bd:15:cc:26:2b:d6:89:98:8a:b8:
41:80:94:ba:06:95:07:ac:84:50:ed:32:49:48:ff:
b0:74:d2:51:19:54:83:00:d5:5c:0a:3c:cd:27:15:
28:7f:34:da:ff:c7:29:64:1c:22:46:ba:d6:c8:ad:
a7:fb:f1:88:8a:f9:a5:e9:ee:bb:0c:6b:f0:ac:88:
99:a5:33:e9:b7:51:d6:87:3e:08:3b:be:2e:ae:7d:
9f:c8:f6:57:64:51:a6:8f:d4:9c:74:cf:2d:c6:68:
77:5b:15:0e:0b:64:39:c8:77:99:8a:ca:3c:d2:ea:
f2:1b:b9:9a:2f:ba:02:30:7c:3e:a2:86:e2:8b:9e:
1e:3d:9d:6c:b0:bb:58:de:be:c4:37:9e:3f:a5:da:
bf:85:91:fa:e9:a6:8d:3a:e4:8d:05:d1:cc:9d:e5:
6f:f1:aa:fa:db:02:f5:8f:f7:37:0c:0e:6f:3d:17:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:29:74:9C:CD:B2:0A:14:13:FD:E6:49:E1:B4:A0:C9:CA:0C:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89afdad7-6b5c-3dd8-b9ab-488bf38e9f21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:f5:31:9c:b8:14:29:51:77:e3:8a:9b:68:10:c9:85:22:70:
a0:64:3a:e5:5e:1e:3e:f0:28:ef:3e:fc:ef:76:69:ee:b7:40:
66:34:50:92:04:8d:91:36:d4:ec:46:c1:f0:5f:8f:ae:81:11:
10:5a:48:6d:9a:68:44:82:f7:e2:4b:e0:22:43:36:4b:50:06:
df:71:fb:a7:01:3f:c2:e0:10:c1:f0:39:da:fe:e0:73:e5:65:
28:83:53:27:4b:18:af:39:37:df:d8:97:a4:6a:c5:f9:18:92:
45:d5:af:ea:36:23:f0:45:9c:d3:c1:8c:1d:60:25:56:73:b5:
7e:c0:05:cf:1f:45:f3:62:e1:d6:6f:df:53:75:67:90:34:a5:
c9:f8:db:9b:79:12:d7:4d:93:04:42:39:09:70:b2:6e:d2:b6:
c3:76:54:9c:ab:e8:23:2b:f1:42:ba:20:5c:0b:88:47:17:00:
a3:08:eb:5d:86:eb:a0:6c:60:49:78:ec:fc:6d:b7:7a:50:77:
3f:4f:7e:3a:35:f1:04:0a:05:20:4e:8e:40:44:80:78:fd:e6:
bd:09:54:32:48:02:2a:e4:12:96:72:49:68:1a:d6:96:f6:ca:
d6:f3:a7:23:bd:e5:82:17:80:66:47:be:39:3f:ce:0d:7f:43:
2b:8e:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:56 2025 by rpki-client