Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e9c826d-3952-3c30-87a0-efbb87f2a7d9.roa
File: 8e9c826d-3952-3c30-87a0-efbb87f2a7d9.roa (raw, json)
Hash identifier: v6ZxWJdJAPA718Oq5od2YaS2/VpAjDBTvLy7cY5mYmg=
Subject key identifier: 85:91:CE:22:72:7F:89:00:20:FC:29:5F:B9:98:61:69:2D:47:EB:E5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843041EDA10C8F3C8BBDBB30800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e9c826d-3952-3c30-87a0-efbb87f2a7d9.roa
Signing time: Sat 26 Aug 2023 19:37:36 +0000
ROA not before: Sat 26 Aug 2023 19:37:36 +0000
ROA not after: Fri 24 Nov 2023 20:37:36 +0000
asID: 15731
IP address blocks: 166.1.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:04:1e:da:10:c8:f3:c8:bb:db:b3:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 26 19:37:36 2023 GMT
Not After : Nov 24 20:37:36 2023 GMT
Subject: CN=2cc69093-3bb3-4531-96d8-3d888258a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e2:30:53:a5:c8:74:0e:0f:1d:e5:b0:f1:bd:
c3:ea:9f:9e:72:58:65:89:81:80:7f:f4:90:a6:8d:
28:6d:32:af:99:5b:77:f8:11:78:58:48:83:32:ee:
04:60:21:6e:36:09:b8:ed:4a:18:e7:94:7a:1d:32:
90:8d:25:0f:1a:d9:1a:23:a7:24:06:79:f1:84:28:
04:7a:f6:fe:ea:ff:44:0d:fa:98:d3:bb:3f:b6:c8:
97:80:35:aa:26:ce:24:56:0d:8a:46:10:bf:62:14:
37:0c:1e:b1:64:66:29:bc:4b:c3:ca:78:9d:80:f2:
cd:08:39:8b:76:c1:d5:08:24:d5:92:7b:df:0b:39:
a1:c0:ef:7b:a9:fb:fc:8e:d5:89:17:2d:75:02:29:
d2:95:5e:56:00:7d:e4:1c:08:f8:6a:81:b7:8c:a3:
29:fe:3d:70:15:58:da:2f:c9:b4:c8:5d:3d:dd:c3:
d6:1b:02:a1:63:eb:c4:fe:b2:4c:5f:33:92:c4:de:
49:bd:5e:e8:4e:34:65:4b:b2:4a:2d:2b:ad:21:4b:
af:4e:9c:25:88:d6:63:ec:f1:a6:fb:e9:3e:bc:6d:
4a:75:66:02:b0:e0:26:b8:37:dd:1c:6d:8c:e1:b3:
70:78:7b:ec:2b:cd:ab:32:36:95:e7:0f:09:3e:21:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:CE:22:72:7F:89:00:20:FC:29:5F:B9:98:61:69:2D:47:EB:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e9c826d-3952-3c30-87a0-efbb87f2a7d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:27:98:02:12:75:ea:ed:25:fd:8d:02:5a:c7:be:42:fb:b0:
03:df:9d:a3:70:41:69:ce:90:13:5d:f5:5c:ea:82:15:28:df:
0b:31:6a:a7:22:7d:c9:28:c7:8b:da:fe:74:b8:9d:d5:69:39:
16:0b:c5:9c:38:90:fd:2a:29:50:04:4c:50:a5:a7:13:11:b3:
30:b9:91:90:df:d5:ba:7c:1c:c1:9b:e6:c4:1f:d4:e5:f0:67:
46:b9:16:f4:5c:0f:be:dc:e7:b4:d2:6a:99:75:1c:25:44:5a:
af:39:3d:e6:5c:5a:18:56:5e:c6:a5:e4:df:5d:52:42:af:97:
a0:04:b5:20:11:5a:9c:b8:f8:4d:a7:d5:07:26:a7:c9:c8:02:
41:99:c1:e7:bf:78:23:9f:23:ad:e0:f8:e4:99:34:8b:5b:8e:
7e:a1:8b:fd:a2:9c:24:d7:c5:a0:d2:bd:d1:4e:f9:5a:26:91:
85:d2:38:1f:64:08:33:41:40:12:8e:89:0b:55:87:41:eb:ac:
81:0b:d9:cb:93:41:83:27:51:5a:cb:04:25:6b:9e:ec:d8:99:
ec:be:57:c4:f4:5e:9c:9c:f1:f2:75:21:9d:56:ed:13:b6:83:
81:18:31:d9:b0:4f:7a:bb:d7:0e:dd:51:37:b0:20:c5:a3:0e:
ac:90:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:12:21 2025 by rpki-client