Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a00003f-b417-3e33-9fa3-9d06327824d9.roa
File: 9a00003f-b417-3e33-9fa3-9d06327824d9.roa (raw, json)
Hash identifier: 6eZRDB2XY10rKgKdTA0wKoii/wTppRzywygcedBOniY=
Subject key identifier: AA:78:7D:D4:89:B2:1F:DB:EF:06:88:30:98:7D:67:2D:60:F9:55:9D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858433BB1D3CE913665BEC8ED5200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a00003f-b417-3e33-9fa3-9d06327824d9.roa
Signing time: Fri 15 Sep 2023 17:23:12 +0000
ROA not before: Fri 15 Sep 2023 17:23:12 +0000
ROA not after: Thu 14 Dec 2023 18:23:12 +0000
asID: 21082
IP address blocks: 166.0.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:3b:b1:d3:ce:91:36:65:be:c8:ed:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 15 17:23:12 2023 GMT
Not After : Dec 14 18:23:12 2023 GMT
Subject: CN=3c6aeb92-4188-4d54-aad6-ab828f55c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:72:9a:79:e8:fc:7f:77:03:b9:87:aa:6c:
65:0b:a7:88:aa:d7:84:6f:c8:aa:6c:a8:8f:91:21:
f9:6d:44:aa:31:0e:09:63:b3:89:30:25:ee:ba:d2:
01:e5:50:d4:1c:f1:71:2c:2b:cc:d3:cd:36:bb:08:
50:9f:ec:d0:db:6c:89:e6:c1:3e:62:0a:e9:ac:6d:
1e:fd:ce:88:9a:1b:6c:f5:07:46:12:d0:62:ed:75:
aa:fa:34:5e:20:23:ec:a1:bb:ef:83:ae:33:7f:08:
84:0e:74:24:a2:53:f7:67:0a:80:a8:6e:bf:89:fa:
b7:d9:5d:2b:55:c7:59:0b:b5:54:b6:5c:a6:26:bc:
2a:b4:e9:7a:c9:f1:f7:fb:22:2d:7c:fb:a5:f6:7d:
2b:d7:c5:92:5f:77:05:9a:f0:76:18:b5:2b:9d:32:
20:66:43:28:18:3a:56:cc:ce:be:c0:1d:26:a5:03:
98:92:15:c2:0f:88:64:03:3b:d7:95:aa:1f:69:60:
8c:4c:f4:06:61:b1:54:de:dd:bc:1c:e2:e1:a9:c8:
db:f3:e5:ff:10:26:c8:7d:89:8b:47:d0:4c:b5:e7:
44:97:c9:08:2f:14:23:22:51:54:c4:72:5c:0e:e2:
47:9d:07:21:4e:c7:d5:b5:26:e2:9a:5a:b1:77:05:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:78:7D:D4:89:B2:1F:DB:EF:06:88:30:98:7D:67:2D:60:F9:55:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a00003f-b417-3e33-9fa3-9d06327824d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:41:04:50:42:13:97:f9:00:bb:1d:e5:da:63:3a:ab:96:fa:
24:48:86:ca:a1:70:4c:f1:ac:dd:b8:83:ae:b1:35:0f:fa:a1:
af:d9:e6:41:9d:26:8c:f2:4b:a6:24:2c:f4:06:01:6c:b7:65:
d6:a3:75:2f:71:12:03:43:ae:28:73:f8:1f:bb:f2:66:ef:1a:
76:f2:6e:82:0b:4f:58:93:75:a4:9b:5d:da:b9:48:e8:50:04:
a6:47:07:7b:a8:b7:5a:28:21:96:b3:64:f4:66:e5:c8:dd:d4:
14:ac:65:ad:6b:ea:85:22:37:ec:af:c3:bc:a9:9b:c8:f4:7d:
f1:a9:25:86:81:25:d8:3e:ae:3c:60:b1:59:17:ec:24:84:d9:
a8:1e:3f:d7:b4:e8:b3:19:66:c6:79:aa:94:21:4d:21:dd:ee:
be:65:d0:6a:cb:f3:3d:99:ed:db:f6:fe:eb:49:57:35:61:bb:
5a:6f:ae:94:c5:90:7d:a8:a0:d2:a8:50:13:cb:f1:0a:62:f3:
7d:89:a7:cd:a0:b7:a6:30:1f:06:f2:1e:5e:7b:aa:97:ce:80:
36:9a:b2:ad:f5:4e:d6:55:ee:1a:29:2b:49:24:a3:81:bb:e1:
08:26:0d:54:c5:99:19:ee:b7:eb:0a:a0:96:19:a9:bc:5e:89:
70:ab:a2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:30:48 2025 by rpki-client