Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9dc4a4b3-d128-32e2-baca-bfaf34274997.roa
File: 9dc4a4b3-d128-32e2-baca-bfaf34274997.roa (raw, json)
Hash identifier: xjnJrrGC7pv7ZS9NIbvtCIk0OTqpLsvTO+tczvM1N50=
Subject key identifier: 36:10:13:2E:04:EC:52:A0:DA:58:D9:DC:F1:6B:E1:85:C6:EE:F1:63
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583EDBAC1F5E0EEF7A322F372340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9dc4a4b3-d128-32e2-baca-bfaf34274997.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Tue 12 Nov 2024 05:00:00 +0000
asID: 271729
IP address blocks: 166.0.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:db:ac:1f:5e:0e:ef:7a:32:2f:37:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Nov 12 05:00:00 2024 GMT
Subject: CN=4e2d4f80-0711-4f82-86ee-47d2918776fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:ef:fe:5a:ef:68:76:53:93:1d:6a:c4:3b:
9f:34:02:13:83:5c:61:80:8f:a0:f1:26:91:27:1d:
58:24:ce:1b:71:88:05:51:e3:60:ba:23:70:b8:94:
60:d8:c0:7e:c3:20:05:d9:01:df:da:4b:1c:0f:d4:
0e:ee:e7:ab:f1:97:b2:3d:92:e6:9d:54:ea:94:df:
d5:0c:9f:e8:f3:c7:34:e4:77:f7:c7:b5:48:6f:4e:
fa:cc:75:94:b7:b5:75:be:34:a8:0f:2f:93:48:7c:
30:67:4f:a5:77:f0:46:16:27:61:92:e2:d5:a0:35:
cb:4f:9b:c6:4b:83:30:5d:33:f8:48:f5:21:db:25:
f4:52:fa:a3:48:07:af:1e:6e:8c:2f:0c:ed:6c:d8:
61:0c:e2:45:f2:8f:19:57:a1:14:5f:b6:dc:c4:c6:
89:21:fa:18:b8:d1:76:97:a2:5d:3e:76:1d:6b:4a:
b1:50:1a:af:6d:cb:22:f2:16:d2:64:7c:20:27:8f:
b7:23:5a:b0:c4:37:b1:ce:c6:8d:c2:f4:a0:39:d1:
f7:b1:2f:fa:43:d8:cf:fe:9d:33:9a:a8:06:78:f4:
c8:63:36:bb:d1:d9:72:02:c5:22:23:b2:15:fe:53:
11:6e:fb:a0:6a:68:75:1d:c9:7f:79:06:bc:e3:5e:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:10:13:2E:04:EC:52:A0:DA:58:D9:DC:F1:6B:E1:85:C6:EE:F1:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9dc4a4b3-d128-32e2-baca-bfaf34274997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:e0:01:f6:d3:5e:22:0a:d7:75:44:4f:18:a5:d6:c8:c1:c0:
3b:14:88:a7:fb:09:67:18:6d:6c:60:ca:12:bd:a8:02:1d:c8:
8f:2d:35:42:39:43:53:00:d2:55:6e:12:64:7a:4c:fe:bc:f8:
ee:a3:94:6a:f1:a7:66:ff:55:a1:28:05:f9:07:12:e4:38:80:
19:a7:64:d0:d8:2c:be:ac:1a:7e:d0:7c:20:e1:a3:67:ca:d1:
93:e1:42:cb:7c:63:f3:27:e9:6e:bb:8a:73:f8:ad:12:82:6d:
55:b3:76:95:56:b3:75:29:ef:6c:1b:6f:ae:0f:7c:32:dd:c5:
94:fd:0c:c0:a0:30:26:40:a1:4f:35:5d:38:6a:ab:9e:bc:e2:
d3:fa:f4:3b:13:1c:dd:7a:30:57:28:05:05:1d:ff:a1:cd:0f:
f8:b8:7e:ae:1e:fa:ee:1f:fd:cd:ea:b3:de:86:b3:21:72:d0:
56:51:84:82:71:95:08:73:af:bb:d8:ee:d1:8d:c0:aa:81:0a:
4c:29:ba:d5:c1:14:0c:fb:07:4f:9b:1b:8b:37:5d:f9:6b:e8:
cb:fa:23:80:b1:0d:4c:cb:91:e9:09:cb:53:53:84:d6:5b:e1:
24:d7:a4:20:27:b3:67:ff:59:66:b3:b0:94:97:fa:13:3d:47:
ae:be:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:08:58 2025 by rpki-client