Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/988e4065-b12b-3947-adda-852ab1442652.roa
File: 988e4065-b12b-3947-adda-852ab1442652.roa (raw, json)
Hash identifier: tU4m6rc3yNcunFD9BLGD2z7rvV5NLPl+jn6R/JNaZwQ=
Subject key identifier: 59:0D:92:3C:D4:E7:D2:A1:AB:78:EC:E6:9E:29:35:5F:7C:7A:1F:E3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E55B072780E15C6AA1C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/988e4065-b12b-3947-adda-852ab1442652.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Tue 08 Aug 2023 07:17:00 +0000
asID: 834
IP address blocks: 166.0.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e5:5b:07:27:80:e1:5c:6a:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 8 07:17:00 2023 GMT
Subject: CN=f72fa458-ccba-41af-a06a-0f7c7a82eef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:e8:8a:88:66:8c:bd:a3:c5:21:c9:d3:5e:
08:e0:b0:2e:93:26:a7:70:f8:b1:8f:b9:8b:49:90:
82:01:97:8a:d4:a9:ad:84:c8:d3:e2:19:fe:12:7a:
02:30:9e:54:e7:96:9e:9e:78:d1:2e:6d:6c:9c:30:
79:fa:13:40:be:9e:45:62:87:c9:89:dd:00:8b:e2:
73:93:bb:38:15:76:ad:a1:a3:06:1c:ba:74:b3:3e:
74:87:7d:14:0d:8b:d7:bd:6a:c2:75:aa:ca:c1:70:
03:97:65:27:9f:03:92:a7:0e:b8:ad:a0:4d:b7:cf:
8f:b2:80:ff:6d:07:25:35:7e:e1:e2:06:c3:dc:63:
28:b3:c1:c9:14:82:c9:f5:6c:34:dc:43:8e:b8:88:
82:c8:b0:cc:91:36:0b:91:fb:5a:6e:5f:00:3b:ad:
ed:5b:d7:c3:8b:cf:3e:7b:36:50:b5:9c:e9:9b:92:
26:31:75:77:af:4c:6f:69:e9:8b:20:89:67:7a:be:
e3:4a:61:23:61:1d:90:c7:86:1e:e2:c6:19:7d:10:
a3:14:89:5f:28:2e:55:5d:53:4e:06:46:59:02:12:
76:5a:6d:e2:16:5d:94:52:31:8b:c7:bb:87:70:c8:
68:ed:b2:f9:3f:82:ca:7e:ba:a4:1e:99:59:a2:5e:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0D:92:3C:D4:E7:D2:A1:AB:78:EC:E6:9E:29:35:5F:7C:7A:1F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/988e4065-b12b-3947-adda-852ab1442652.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:34:a8:ac:b1:8a:7d:2d:5f:00:04:09:84:97:27:c6:df:0a:
67:80:b8:23:4e:c2:3c:77:77:77:83:22:0a:b7:b2:b8:2c:ab:
b0:63:ec:14:4d:a9:eb:6c:2e:63:da:6b:b6:ee:b4:8e:e7:68:
fd:3a:a1:cd:1a:e5:55:fd:9a:38:4c:cd:1f:9a:69:50:b1:53:
75:72:83:8b:06:d5:03:56:38:bc:1d:b1:5c:44:1d:2c:c1:49:
a7:f3:cf:b3:e6:9c:9e:28:3f:17:64:3a:21:c2:6e:28:3b:6d:
82:9d:fc:01:48:2c:7d:75:b9:15:6a:1e:c5:1c:7a:34:4e:c9:
36:0b:9f:e5:9e:01:b1:af:a4:e5:da:67:64:48:8b:78:98:75:
ba:02:b3:de:05:64:9a:4e:b6:af:c3:ee:21:60:35:ac:e0:3b:
94:43:26:1a:02:43:42:8b:5a:73:b3:a4:c9:cf:a3:7e:df:b1:
be:56:e5:da:ea:1f:29:ed:24:4d:fa:e2:b4:46:1e:3c:56:4b:
21:1d:3d:e8:64:88:c1:f6:96:32:aa:d0:e3:82:ad:5e:d9:b5:
91:c7:87:47:fe:ff:c8:88:b1:d5:01:16:35:57:83:a7:62:ec:
e4:f2:ac:a2:af:73:8a:76:2e:d3:56:d0:6a:82:aa:5f:61:b8:
43:d4:6a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:58:51 2025 by rpki-client