Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a3239b0-b46b-3c87-9507-d4a54c063a12.roa
File: 8a3239b0-b46b-3c87-9507-d4a54c063a12.roa (raw, json)
Hash identifier: TqFlptetbIedW+I/yhQyGB8i+hLPZiItV4Qq8N41XHg=
Subject key identifier: 60:E1:84:07:E6:09:76:A3:C0:2E:4C:2A:09:F3:7E:27:FE:AC:36:A6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843F40478DACB4BEB71CAFD7280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a3239b0-b46b-3c87-9507-d4a54c063a12.roa
Signing time: Mon 20 Nov 2023 17:58:27 +0000
ROA not before: Mon 20 Nov 2023 17:58:27 +0000
ROA not after: Sun 18 Feb 2024 17:58:27 +0000
asID: 16276
IP address blocks: 166.0.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f4:04:78:da:cb:4b:eb:71:ca:fd:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 20 17:58:27 2023 GMT
Not After : Feb 18 17:58:27 2024 GMT
Subject: CN=c95ce68d-675c-4d0b-8d1c-0ddb51e959ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7c:de:e1:28:ab:44:5f:07:79:9b:bd:f1:26:
7b:97:55:f3:ff:0a:cc:ec:87:1a:4d:d7:71:9d:04:
6f:3c:f9:9a:82:29:ae:ca:b0:66:e1:c9:4b:36:a3:
ce:37:24:15:17:1a:29:28:3d:47:63:05:5a:7a:37:
1a:0f:f3:0f:51:6c:d7:a4:ce:30:cb:7e:58:e5:30:
30:b3:f4:34:2a:92:17:73:fb:e5:3a:af:f3:cc:b0:
3f:17:83:a0:0f:64:86:bb:00:4c:a0:90:42:91:c1:
2e:c1:63:6d:2d:6c:a5:88:c9:88:78:6c:f9:32:0a:
c9:a5:36:68:56:09:74:25:5b:4e:24:00:df:18:3e:
2a:9e:b7:d8:66:1e:b6:e3:92:4b:c9:d7:b2:41:f6:
c4:da:ea:2d:ee:74:18:98:53:8e:c6:c3:58:d4:d5:
fe:32:f4:1c:3f:38:22:27:73:a7:02:30:d0:c1:f6:
e2:fa:df:72:2c:99:00:36:68:2b:06:f3:0e:80:af:
1d:a6:24:b4:1e:c9:ce:ac:39:be:1e:01:5a:05:94:
21:8b:4b:20:89:63:e0:41:71:b0:8c:55:ca:27:bc:
65:94:42:50:72:4f:38:0d:f6:05:3f:ee:bc:97:87:
19:e5:ed:c1:e9:0a:ce:6c:b0:2c:de:32:a9:1a:6b:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:84:07:E6:09:76:A3:C0:2E:4C:2A:09:F3:7E:27:FE:AC:36:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a3239b0-b46b-3c87-9507-d4a54c063a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:5d:12:fc:cc:33:0b:39:7f:52:2c:9b:5d:a7:c4:28:e9:30:
b7:e6:f6:da:b7:1c:9c:2f:c4:d0:55:ca:ac:85:20:09:f2:00:
a4:02:3b:aa:df:bb:b7:38:d3:a1:f4:c7:cc:53:da:f6:0c:dc:
87:03:1d:55:26:a9:30:a0:04:3f:30:d2:fc:0f:b3:18:ee:e2:
ed:45:74:45:93:ca:0b:f1:69:aa:87:c5:c3:e1:d6:f2:95:5c:
30:ff:d0:9a:8a:77:d5:8a:ce:b0:28:74:4e:26:e4:da:26:1d:
fd:e1:13:2f:8e:16:41:4a:33:04:c9:f9:cd:9e:3e:19:94:3c:
b7:f9:5c:62:e0:e9:0e:6b:eb:3f:61:16:45:92:ab:a2:d6:15:
27:d2:38:96:37:e8:87:92:ba:f0:6d:de:48:4a:35:6f:57:0b:
cc:78:6c:a3:a3:b3:57:09:c6:74:0b:d3:1c:b0:d6:a2:de:e2:
34:2d:58:74:bb:92:cb:c7:5e:65:4d:e9:da:31:ac:4c:08:63:
70:c5:9c:67:e8:ab:6d:d0:41:dd:f7:df:34:8e:35:bd:44:52:
70:0c:93:9a:62:ae:c1:60:56:09:cd:88:73:68:a5:89:86:86:
de:0f:d0:58:40:e8:2b:be:01:35:a2:d1:46:2a:97:f4:26:8a:
05:61:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:18 2025 by rpki-client