Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/984f2da2-8529-3926-bb03-002ec3aeae89.roa
File: 984f2da2-8529-3926-bb03-002ec3aeae89.roa (raw, json)
Hash identifier: 5khkUQrz4s5nJq5r92uCxTP9UwHXIeQzttYRl+TzHc0=
Subject key identifier: 7C:20:A7:33:9A:9E:5D:F5:91:31:5B:A3:4E:BC:AD:7E:5F:04:CE:4F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858421F153BC38D95E9073A474040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/984f2da2-8529-3926-bb03-002ec3aeae89.roa
Signing time: Mon 05 Jun 2023 18:38:06 +0000
ROA not before: Mon 05 Jun 2023 18:38:06 +0000
ROA not after: Sun 03 Sep 2023 18:38:06 +0000
asID: 200482
IP address blocks: 166.0.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:1f:15:3b:c3:8d:95:e9:07:3a:47:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 5 18:38:06 2023 GMT
Not After : Sep 3 18:38:06 2023 GMT
Subject: CN=af93356f-7b6d-4ab4-ab97-418719248017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4c:65:c6:c4:ab:f3:ef:a4:90:62:00:11:0b:
52:31:54:dd:af:25:e5:7b:cb:64:c4:4d:dc:72:7a:
28:b1:3b:3c:59:01:e5:76:2e:fa:4c:e1:69:f3:13:
d1:74:e2:69:66:d4:2a:fa:77:5f:11:d3:9e:de:75:
09:01:f6:1c:48:ea:b7:03:3a:72:71:aa:8c:36:b0:
1a:fd:a8:4f:8e:aa:3f:45:77:80:ac:8f:20:14:97:
6d:44:93:6b:e4:03:b7:3a:cc:85:19:5c:48:bb:9c:
fc:fd:ea:7d:8d:64:c3:90:d0:43:2c:a2:51:e6:ed:
c8:13:52:b9:64:3a:9b:59:3d:e7:16:dd:4d:da:3b:
37:ff:d8:ce:30:68:e7:73:5a:b1:15:e5:38:5b:a5:
7d:72:92:26:5e:9f:a7:57:29:89:88:2b:b0:6a:63:
21:6b:33:c3:9b:20:f8:80:31:c5:75:3f:f9:2a:bd:
30:a1:2a:4c:a2:0c:09:94:ab:d9:91:e7:3b:de:49:
7d:03:8f:d3:05:ca:7a:9b:b5:df:29:5f:f9:58:39:
4f:7c:20:b8:da:1d:c9:a1:48:07:fe:69:0e:0a:57:
c7:87:b2:b2:31:55:d9:8e:c1:22:46:14:4b:6b:44:
f3:23:ae:f9:21:d0:45:f5:39:b1:0d:83:9c:76:bf:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:20:A7:33:9A:9E:5D:F5:91:31:5B:A3:4E:BC:AD:7E:5F:04:CE:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/984f2da2-8529-3926-bb03-002ec3aeae89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:71:c0:a0:84:8e:bc:d9:0b:9a:15:6e:93:f3:51:6c:9f:bf:
bf:49:10:97:8b:56:b3:d4:ef:fa:ea:02:b5:e1:5d:f9:10:c8:
3b:88:dc:96:68:f3:bd:ad:6b:9e:d9:a2:3a:8d:4c:28:ad:5c:
af:ae:36:b0:ed:be:94:54:42:0e:f8:24:30:9e:f1:f9:f0:24:
dd:f5:bd:40:bd:cd:a2:ef:e4:df:98:70:b8:0a:6d:d0:a4:f1:
73:91:11:85:bb:e3:a3:0e:ac:5a:2a:37:c9:af:bf:0b:7d:3f:
a4:95:60:3f:f5:7a:cd:4f:81:2d:ec:04:cd:28:bf:fc:24:16:
5b:57:d3:60:61:2a:7c:0a:fe:82:42:2b:17:bd:d8:a6:8f:77:
66:c7:51:3e:9b:56:04:40:5b:1a:71:01:8f:9d:af:cc:42:47:
bf:31:74:e5:3e:66:79:3b:fe:76:1d:e4:5e:a3:d1:3a:5f:00:
c2:c5:65:2f:cc:c4:3f:06:73:41:6b:fa:bd:d3:be:b5:29:13:
ec:7b:4b:45:3a:39:12:cd:2f:99:2a:38:fd:4b:76:39:ef:0c:
ca:af:69:18:85:a0:d6:34:fb:1f:fa:cb:c1:c1:cd:0c:8e:6d:
45:c7:1c:b8:2d:63:1a:01:27:72:b2:40:e1:37:1d:9a:09:8b:
a7:36:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:26:09 2025 by rpki-client