Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ff7a71c-aed1-3582-8b5c-23f5977fd485.roa
File: 8ff7a71c-aed1-3582-8b5c-23f5977fd485.roa (raw, json)
Hash identifier: vYnig7/Mo6WX6tk4dk82rcPcv33McLZb+IE1+5hToNc=
Subject key identifier: 16:12:0A:3E:BB:26:8D:4E:67:8D:29:82:3C:E6:5A:81:9A:73:AD:50
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844CAEB709AF096D333F0468FD8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ff7a71c-aed1-3582-8b5c-23f5977fd485.roa
Signing time: Mon 05 Feb 2024 17:26:48 +0000
ROA not before: Mon 05 Feb 2024 17:26:48 +0000
ROA not after: Sun 05 May 2024 16:26:48 +0000
asID: 11798
IP address blocks: 166.1.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ca:eb:70:9a:f0:96:d3:33:f0:46:8f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 5 17:26:48 2024 GMT
Not After : May 5 16:26:48 2024 GMT
Subject: CN=ef1dbd84-f5ba-46b1-9033-b603f4930cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:e0:91:fb:24:3f:4d:20:a3:67:b1:b4:12:
2e:cf:5e:e2:1b:cf:a5:06:05:a2:d3:fd:b9:f4:d8:
39:03:50:42:72:9d:a3:54:1c:0b:aa:bf:f9:8f:3e:
4b:bd:52:f5:5e:68:43:a1:ab:ec:39:20:3d:f3:cd:
64:47:e0:56:d6:a7:ed:c4:4b:c9:e7:66:58:d9:19:
18:81:17:4a:20:d4:86:7b:25:91:03:70:31:5c:e9:
aa:b3:00:5f:c2:01:1d:f1:10:b5:1b:0a:29:cb:25:
6f:63:2e:cd:f3:dd:47:00:67:51:2b:8b:e2:36:0e:
ea:6e:93:ef:4c:c8:0e:4f:b0:d8:f9:16:45:78:a0:
67:44:7f:56:da:a8:18:a8:f1:d0:4d:8e:b1:22:84:
1a:2e:4b:ad:82:86:1c:d7:8a:05:38:f9:17:46:1a:
73:21:76:52:15:da:a3:57:51:96:41:7f:93:53:2f:
45:da:bc:5a:c7:3f:77:20:5b:6c:6c:0d:07:1c:82:
51:16:7b:49:3e:77:fa:aa:58:b8:62:63:39:80:f1:
cf:20:e2:61:07:40:d9:01:bd:2a:48:f5:99:c2:4d:
0d:e8:1f:36:8a:c4:a4:5a:6c:f3:9b:e2:8c:32:a5:
4b:4c:bb:18:e8:80:60:0a:fe:7b:d7:72:00:38:4d:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:12:0A:3E:BB:26:8D:4E:67:8D:29:82:3C:E6:5A:81:9A:73:AD:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ff7a71c-aed1-3582-8b5c-23f5977fd485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:80:33:66:8a:0e:83:24:10:ed:f0:d7:33:f5:bf:d0:f6:cb:
cf:6a:ac:17:e6:ac:c5:1a:d8:87:7e:87:0a:7d:1f:c5:8f:30:
fe:04:fe:21:90:68:9a:8c:05:58:86:4e:9e:8d:88:34:1c:78:
cc:02:45:95:50:da:a6:f5:85:86:89:08:8a:f7:b7:9f:1f:db:
86:c0:46:4b:b9:c2:a2:70:b0:de:d9:17:95:5d:97:e8:46:f2:
ae:29:1c:ed:42:58:6b:ea:bc:2a:4c:36:80:fc:a5:82:2e:81:
aa:45:09:7a:86:44:73:05:24:50:a8:0b:73:05:bf:66:de:c7:
32:68:4a:b4:29:a1:c8:eb:4d:15:3b:da:6f:58:d3:76:e2:94:
e0:00:5e:4e:c6:70:48:d2:cd:a1:12:e6:09:f0:89:fe:35:92:
8a:08:08:a4:8a:f2:d4:20:03:86:8d:cf:08:db:9d:57:64:c0:
e7:0b:31:7d:9d:7e:91:40:4e:a7:8c:b6:4d:dd:b9:1c:b8:21:
44:2c:bd:16:ed:4a:5b:10:d7:7e:73:26:30:fb:ab:a6:4d:fe:
4a:35:d6:e7:80:62:55:af:a4:47:bd:cb:0f:1f:16:a9:76:07:
d6:54:87:5e:c0:00:2d:da:db:9c:92:c0:ec:24:01:61:32:7d:
dc:a4:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:14 2025 by rpki-client