Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/942b55f6-bfcb-349d-a82c-72ea1c4891bf.roa
File: 942b55f6-bfcb-349d-a82c-72ea1c4891bf.roa (raw, json)
Hash identifier: 9Hl5vlSqDK32PrTNLviEVhmjw7hpwv9BsbG25B+K89k=
Subject key identifier: 25:9B:19:7B:B1:3D:DC:D6:90:37:A8:DC:17:B8:E0:B0:64:F5:FC:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842A7B8FAD0BD6B06DCC05C824D
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/942b55f6-bfcb-349d-a82c-72ea1c4891bf.roa
Signing time: Mon 24 Jul 2023 17:17:58 +0000
ROA not before: Mon 24 Jul 2023 17:17:58 +0000
ROA not after: Sun 22 Oct 2023 17:17:58 +0000
asID: 11798
IP address blocks: 166.1.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a7:b8:fa:d0:bd:6b:06:dc:c0:5c:82:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 24 17:17:58 2023 GMT
Not After : Oct 22 17:17:58 2023 GMT
Subject: CN=5bdd1a40-be1e-4283-b882-216a568c4481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:ca:93:e6:f7:3d:74:26:26:6e:5c:5f:f9:
dd:d2:88:d5:e9:44:cf:d9:fd:24:be:e8:43:7e:7b:
f2:35:dc:7e:22:81:b2:5b:d6:2c:b9:e6:24:d9:95:
aa:c6:bc:ac:12:a0:98:ce:95:ba:9c:07:1b:97:2b:
c9:d7:09:22:44:22:4c:98:5d:8b:24:86:08:96:e2:
3a:eb:85:ea:ef:be:85:55:d0:e4:2d:c7:d5:44:be:
53:22:45:ac:9d:92:0f:08:cd:c1:5d:cb:df:8c:43:
dd:b2:2b:65:6c:3a:d5:16:4a:f4:6f:b0:a2:be:73:
bd:5e:ea:a7:7a:cc:8c:4c:3d:ae:ec:bc:bd:92:c9:
90:16:8e:6f:2a:4a:9c:22:84:e5:1d:2d:7f:5f:c1:
f6:7f:fd:d9:6f:df:b4:a0:69:dc:f9:3e:5b:bb:9c:
2d:1b:09:31:dd:64:6a:fb:63:cd:48:1b:9d:f7:82:
49:45:be:85:f1:ea:71:fd:99:ee:c7:12:2e:b2:ae:
dc:1b:0d:c7:ff:72:d4:62:5f:76:2d:86:1a:7a:ab:
59:cf:e6:27:ca:ee:f9:5e:81:08:ea:fe:2e:13:bf:
f5:40:b0:ca:e8:d9:ac:29:f5:f6:a1:b4:92:43:25:
82:6b:ce:1d:ca:07:6a:2e:47:13:cb:7a:3d:31:eb:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:19:7B:B1:3D:DC:D6:90:37:A8:DC:17:B8:E0:B0:64:F5:FC:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/942b55f6-bfcb-349d-a82c-72ea1c4891bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:7c:7f:f0:70:86:b8:b3:a2:0f:6d:e0:24:30:0f:d6:e8:b8:
c7:8a:0b:8c:6b:7a:35:29:fd:9c:a9:24:cb:03:91:e5:2b:77:
b7:8d:9b:f4:c6:0e:ee:f9:f4:52:24:b1:93:61:d7:81:ef:ce:
5c:d9:fc:92:de:25:55:35:b4:6e:3f:53:48:5e:32:8a:72:16:
e1:63:f0:d8:67:4a:58:86:f5:cc:61:a6:f0:05:b4:95:11:c4:
8a:72:db:ac:6a:52:10:e7:04:09:83:26:90:26:37:9a:3f:1c:
89:5b:33:a5:38:c0:7e:a1:bd:a7:40:36:0a:36:ce:5f:c4:9e:
b6:6f:79:44:0e:1d:b1:7b:2b:d6:b0:e9:6e:56:b9:2e:97:58:
95:02:cc:2b:32:3c:5b:73:2c:59:d4:4a:81:9b:01:cc:18:36:
e2:08:bf:92:91:5a:d0:26:7d:cf:f5:4b:89:fb:26:99:1b:f5:
1c:4a:90:7a:fa:b8:e1:f8:18:09:7c:bf:cc:e9:20:99:76:db:
f6:64:c6:e6:d5:45:8e:d4:fe:5c:a4:7f:cd:54:e6:9a:fb:2c:
4e:c8:20:3b:87:c6:16:89:1f:3f:3b:91:8b:90:77:b5:df:89:
e8:67:fa:69:c6:b3:a8:a8:04:8d:d3:47:ae:1e:bc:c1:98:6e:
61:6f:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:41 2025 by rpki-client