Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8fb6e6b0-2814-3e1c-a862-64eb8580cafb.roa
File: 8fb6e6b0-2814-3e1c-a862-64eb8580cafb.roa (raw, json)
Hash identifier: 4gbN6vob6NGFsxfTUTmy5MrOF9elWbiAs2YNBwd/+fo=
Subject key identifier: D4:6E:99:D3:08:7E:02:16:DF:25:36:26:12:E4:78:37:67:B4:1A:8C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842DC923E5D130C2FF1749BE200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8fb6e6b0-2814-3e1c-a862-64eb8580cafb.roa
Signing time: Sat 12 Aug 2023 15:37:46 +0000
ROA not before: Sat 12 Aug 2023 15:37:46 +0000
ROA not after: Fri 10 Nov 2023 16:37:46 +0000
asID: 21082
IP address blocks: 166.1.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:dc:92:3e:5d:13:0c:2f:f1:74:9b:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 12 15:37:46 2023 GMT
Not After : Nov 10 16:37:46 2023 GMT
Subject: CN=dd9e3002-27fa-4fb2-9190-cd8d691550cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:84:01:55:0e:ae:31:5f:fb:f9:51:95:f6:
ff:54:c1:f9:dd:06:d7:6d:b1:b4:f9:6f:3d:48:6c:
dd:a0:2f:53:e6:8f:30:68:d7:df:1d:30:0f:07:40:
98:11:84:d0:00:61:71:4f:7f:ee:a4:10:7b:b6:1e:
74:94:a8:50:9a:ca:ef:69:e2:ba:52:5f:46:51:f1:
31:84:0e:81:07:57:e7:22:08:11:53:09:cb:bb:67:
33:ec:23:ec:e2:0b:75:3c:c1:0d:89:0d:9a:41:3f:
94:5f:e5:bd:bd:23:d0:9b:43:ad:2d:73:c2:a1:76:
be:10:ba:e7:76:22:b2:b3:86:e2:c1:b0:4f:f6:7b:
4b:23:c9:e2:a8:16:22:96:49:0b:32:18:61:43:6b:
76:6e:74:70:3a:7d:ba:09:bc:72:3f:93:c9:b9:ca:
63:64:89:85:6d:10:d3:63:af:e4:73:4e:7f:18:2f:
88:17:d2:08:61:4e:a8:66:d3:5b:27:76:6b:9d:d7:
5a:45:e4:9c:c3:8a:4d:cc:ed:79:d8:80:6f:ed:48:
9a:76:0d:ff:18:49:ca:f1:74:7e:16:76:00:34:5c:
b8:e1:7a:36:bd:27:b8:04:cc:a4:c0:e3:ac:b2:0c:
19:86:c8:3f:b7:26:44:9e:3a:51:91:e0:19:93:fd:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:99:D3:08:7E:02:16:DF:25:36:26:12:E4:78:37:67:B4:1A:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8fb6e6b0-2814-3e1c-a862-64eb8580cafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:37:e4:f0:77:89:5f:4e:7d:59:d9:69:1d:4f:a4:7c:02:4c:
73:80:93:78:f7:49:2d:72:dd:e4:e5:f1:29:e1:ae:29:49:dc:
5d:80:3a:67:2f:73:11:09:9b:e8:34:1e:48:17:4d:0e:ff:23:
6a:da:ae:d4:f2:cb:ff:ce:a3:f6:61:bf:18:3c:b8:8f:46:32:
53:45:d3:df:82:b7:1a:89:64:16:56:ff:38:89:30:70:3b:d0:
a5:48:b0:ce:21:22:6f:49:fd:97:fc:cd:74:39:57:73:83:fb:
82:69:fa:c5:86:23:e2:b9:1d:27:f5:7f:5e:dc:04:77:51:5f:
a9:af:ac:43:44:29:7a:9b:21:72:31:f8:48:b7:b8:32:2f:50:
3d:64:b8:6f:9c:7d:4a:f7:20:b4:8d:7a:87:0e:14:5b:a6:b2:
36:d4:99:83:e1:65:eb:40:f8:9a:6c:1d:56:41:53:5e:58:a2:
10:f9:c6:a9:26:18:16:04:1a:3d:5b:84:e8:4a:0c:be:8a:11:
52:40:f8:ac:a5:c1:43:c5:43:f4:d8:0f:76:82:5e:77:78:a7:
f0:ec:8f:da:ec:6c:c3:5d:75:c6:67:b4:17:b6:cd:fa:eb:d5:
0a:15:0d:0c:97:ff:aa:62:90:9b:3b:a9:bb:27:45:84:d4:b1:
bd:40:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:27 2025 by rpki-client