Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91e9f656-11f4-30d6-8497-1090b41358fe.roa
File: 91e9f656-11f4-30d6-8497-1090b41358fe.roa (raw, json)
Hash identifier: YTK/4UQYMHdpvhsyyHAJfAlpbDhPO9E9pG4Hah5Ekyk=
Subject key identifier: C2:23:75:51:C5:6D:3C:F5:A3:FE:7E:01:7D:FB:B4:48:2C:3F:FD:36
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841ECE96D41E9B7578E86D7F860
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91e9f656-11f4-30d6-8497-1090b41358fe.roa
Signing time: Thu 18 May 2023 19:19:25 +0000
ROA not before: Thu 18 May 2023 19:19:25 +0000
ROA not after: Wed 16 Aug 2023 19:19:25 +0000
asID: 43260
IP address blocks: 166.0.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ec:e9:6d:41:e9:b7:57:8e:86:d7:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 18 19:19:25 2023 GMT
Not After : Aug 16 19:19:25 2023 GMT
Subject: CN=3fc09f84-56f0-4149-95bc-c020b89f1bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:1f:7d:f4:16:7e:22:9b:1e:57:99:e7:5a:
53:9b:e1:90:48:b5:a1:32:97:65:21:b5:a9:69:17:
2c:18:1a:84:d2:12:05:f6:5c:eb:c4:16:fa:fa:dd:
5d:65:99:5e:2e:e6:87:73:91:a2:bd:20:93:64:e0:
36:4b:71:7d:2a:f0:f2:49:71:34:bd:8c:00:04:e9:
bb:28:2d:70:0d:d2:b7:99:04:b8:7e:44:0c:22:6f:
c0:ce:c9:de:0c:cf:80:c5:88:79:b3:ea:8a:3a:21:
d4:ca:06:be:4a:9a:46:6b:3f:6a:43:c2:59:e5:11:
4e:de:07:e1:8f:16:d4:d5:bd:1c:dd:bf:63:3f:83:
d0:d3:6b:e4:10:b4:f9:4e:73:15:9e:87:37:05:76:
80:08:af:d0:09:3e:47:80:c8:12:c5:e9:f4:ca:dd:
ea:be:bc:47:ed:cb:8b:d9:07:8b:81:e7:9d:ca:b8:
e8:2e:f3:f3:46:b6:76:f4:fb:0b:d6:ac:40:bf:1f:
27:a0:99:c1:73:2e:9f:4f:6c:db:0f:b2:45:83:ea:
15:94:e0:3b:04:34:d0:3e:58:82:89:d6:83:04:10:
ae:8f:26:be:ad:d6:1d:0c:26:17:6d:ca:99:42:be:
63:0e:9f:01:1d:af:4c:18:cf:9b:d0:73:8a:c0:81:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:23:75:51:C5:6D:3C:F5:A3:FE:7E:01:7D:FB:B4:48:2C:3F:FD:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91e9f656-11f4-30d6-8497-1090b41358fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:54:83:1a:6e:a6:f6:52:69:f3:81:cf:29:ec:1a:e4:7d:32:
1a:97:e9:7e:3e:0f:7c:2b:e7:9a:a5:ab:ec:5b:76:6c:ae:5c:
08:a1:ab:54:d8:5b:67:cb:a5:01:d5:68:be:87:9d:33:5c:f2:
8d:ba:dc:f1:b9:cd:84:7e:0d:62:f1:c1:8d:7e:59:a2:df:7d:
15:1e:f0:23:a2:a8:be:08:6f:04:ad:5e:68:6a:c4:c1:72:2c:
27:f4:38:f0:25:33:51:45:84:bb:64:95:df:4a:56:43:a2:8d:
a1:d3:79:e8:ca:c7:b9:14:03:16:69:df:c9:96:22:59:de:00:
40:9c:6e:84:fa:2b:63:19:32:f3:cd:12:3b:a4:c4:cd:19:46:
e7:49:a2:f0:e0:66:cf:b6:d2:0f:3e:b2:7f:8c:94:67:de:7f:
4c:17:06:2e:e5:d8:e2:d3:3a:26:15:17:ef:6a:9c:5b:df:6c:
8b:c0:be:62:d4:20:fe:4a:d9:7d:45:58:3d:ad:0b:f6:9d:42:
91:fb:19:3c:e1:31:a6:47:34:57:0c:51:dc:6e:81:1c:13:4c:
9c:fd:2c:cf:d5:62:4f:01:09:ab:ff:96:01:3d:30:6e:a4:69:
67:6a:90:af:5c:b7:a3:74:97:a9:33:98:7f:f3:02:4f:1e:ff:
68:49:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:51:55 2025 by rpki-client