Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7cc2c1a-6e99-3ce2-b2e7-8707c3e0e463.roa
File: a7cc2c1a-6e99-3ce2-b2e7-8707c3e0e463.roa (raw, json)
Hash identifier: xzFFXm3g199mH20wzOBnSIG2E90B4w0HAZp0uteUlTs=
Subject key identifier: 4A:19:43:17:2C:CD:B0:97:1F:81:0D:D7:6C:D4:9C:AE:EA:D9:C6:6D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E056D19663B4C6232000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7cc2c1a-6e99-3ce2-b2e7-8707c3e0e463.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 05 Aug 2023 03:56:01 +0000
asID: 135752
IP address blocks: 166.0.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e0:56:d1:96:63:b4:c6:23:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 5 03:56:01 2023 GMT
Subject: CN=9ac840e8-bf0a-4258-90cf-9c23ba0b7ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:9f:28:b3:4b:63:e8:73:72:8f:23:5e:83:
e8:64:e0:26:0e:f7:a4:89:7d:b1:b1:49:75:54:65:
39:61:0f:97:c1:e1:5d:41:c6:9a:2b:e6:86:1e:74:
08:bc:39:c5:bf:49:df:b0:f7:4a:a4:90:ad:7d:16:
21:2c:c6:36:83:e4:21:a8:0c:90:7e:ab:f5:26:73:
37:3f:e7:3f:34:68:a8:29:0b:ee:1e:d9:9c:bd:01:
89:46:09:a6:40:fd:4b:27:fe:77:49:ae:b9:04:dc:
89:5b:ab:66:1f:3a:3f:02:f9:b8:5f:d1:d0:74:0c:
bc:e3:69:15:4d:13:27:6a:23:6c:83:31:56:43:50:
80:a0:c4:bc:b3:a1:19:7c:77:9f:bd:dc:94:7f:5c:
f3:a1:47:c7:81:34:c6:e6:76:fc:8c:9c:bf:2a:90:
27:65:96:68:e2:9f:fe:72:b3:39:d7:37:d8:57:35:
54:6c:07:82:c6:dd:33:b6:f2:89:17:bd:af:46:a4:
97:39:66:d6:e8:b7:e3:19:79:f7:2b:14:af:f1:b9:
95:d9:ee:1d:1f:db:00:79:52:6b:01:0f:50:98:df:
ea:eb:12:ec:32:c9:6f:b2:06:ea:f1:fa:84:10:8e:
46:ff:65:8e:85:2e:c5:3b:96:89:f5:33:a7:02:49:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:43:17:2C:CD:B0:97:1F:81:0D:D7:6C:D4:9C:AE:EA:D9:C6:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7cc2c1a-6e99-3ce2-b2e7-8707c3e0e463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:70:b4:f5:ee:0d:d4:eb:76:2c:1e:41:31:b5:be:fc:d1:45:
be:59:2f:6a:94:35:de:06:d8:43:b3:ba:67:8a:52:28:9c:93:
db:3e:4d:51:45:f3:95:eb:e2:c0:bf:33:e8:d1:94:ae:0d:e1:
7f:81:dd:b5:cb:62:00:bd:0e:f1:3d:9c:89:f4:21:e1:f9:1a:
93:e1:d0:ad:84:50:2b:8b:62:17:55:d0:2a:fe:8d:33:52:6f:
85:5b:ed:d3:8d:d9:eb:42:5d:fa:c1:1a:cb:57:ab:3d:55:dd:
dd:b2:cb:a0:63:e4:b6:07:b9:34:3d:66:6c:d3:1f:42:d0:52:
ad:3e:f5:74:9f:70:a2:1d:50:4b:3e:5d:bf:08:0a:21:1e:4e:
8f:e2:fb:79:f4:45:9c:17:4c:08:81:5c:90:0b:c2:bb:8b:34:
4c:ab:f4:10:39:60:52:40:ca:32:f6:59:d3:db:f1:7e:55:68:
a5:e3:24:e9:57:23:a3:49:25:6f:0e:e6:69:3d:ec:b4:15:6f:
3f:64:6d:c2:d8:0b:c7:8f:ba:1d:be:20:83:f8:47:c0:a4:4e:
07:78:d5:7b:df:fa:0e:23:77:4c:17:ef:3e:c4:52:65:ca:c1:
5e:b9:7d:90:2b:2b:0e:a4:17:3d:26:22:11:e8:b7:6d:dd:cb:
a3:ca:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:42 2025 by rpki-client