Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa497e77-91aa-3709-b1be-aa056fb6f8e6.roa
File: aa497e77-91aa-3709-b1be-aa056fb6f8e6.roa (raw, json)
Hash identifier: QpWKYWri1qc7J00/lUeVde2gck2T6VlgwZHnhutOvFI=
Subject key identifier: C2:50:A1:C4:C2:99:86:48:19:6D:66:EA:F5:93:22:5D:52:DD:A4:A5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D1860FEF5DB3C5367F540000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa497e77-91aa-3709-b1be-aa056fb6f8e6.roa
Signing time: Tue 08 Aug 2023 16:39:20 +0000
ROA not before: Tue 08 Aug 2023 16:39:20 +0000
ROA not after: Mon 06 Nov 2023 17:39:20 +0000
asID: 201106
IP address blocks: 166.1.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d1:86:0f:ef:5d:b3:c5:36:7f:54:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 8 16:39:20 2023 GMT
Not After : Nov 6 17:39:20 2023 GMT
Subject: CN=1c08b889-cc2b-4859-8b1d-3283c09a702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:a8:bd:db:00:c9:b8:82:c4:26:6a:20:21:
0e:86:3b:ec:0a:23:f6:67:32:e1:45:15:53:aa:f4:
5f:92:f8:57:36:1e:eb:3d:1a:25:81:ae:5d:c8:41:
54:21:31:ef:84:cc:b6:3a:c3:85:93:93:94:76:75:
cb:c0:d8:a3:3f:54:35:08:3f:7a:1a:fa:02:4f:3e:
b4:9f:37:16:5a:44:e2:5c:7d:c3:1a:7e:d5:f7:dc:
52:8c:02:2d:ff:2f:76:8f:b2:6b:a4:1d:6f:fe:45:
2c:24:3a:67:4a:c3:6b:c0:e1:d8:5f:f2:76:fc:1e:
00:24:bb:72:9e:6b:30:dd:7e:36:1a:6d:73:95:66:
e7:ce:e0:fb:63:ea:58:26:73:7c:c9:55:1e:b0:4d:
6e:a2:89:8f:8c:9a:c2:88:1a:a9:b1:7d:91:0d:80:
3c:50:9b:22:8c:de:80:d0:35:ca:eb:92:a9:e3:ff:
6d:b2:0d:61:dc:7d:2f:18:7b:d0:00:d7:a0:a7:0f:
c4:54:af:69:6c:bb:73:a7:a1:72:01:9c:bd:7c:55:
a1:29:04:f0:4b:6b:fa:b5:71:59:8a:00:70:d9:ec:
87:e5:73:45:4c:43:f6:38:03:f2:a2:78:a9:0b:fe:
04:a3:fe:ac:b4:2f:0e:3f:43:1d:4b:07:33:17:ab:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:50:A1:C4:C2:99:86:48:19:6D:66:EA:F5:93:22:5D:52:DD:A4:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa497e77-91aa-3709-b1be-aa056fb6f8e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:67:96:38:c1:0c:95:6c:d1:8e:8d:82:03:1b:87:14:3a:f1:
f6:e0:26:d0:e2:ce:3e:9b:1d:5e:d5:d1:88:98:44:1e:10:62:
e3:1e:1f:9d:78:b0:a1:22:55:ce:d3:6a:b4:49:23:e9:44:b1:
8b:a7:82:d7:62:3a:ed:a6:81:ad:17:a2:e4:c1:c5:ac:bc:6b:
80:c1:8c:fe:e2:ff:e8:4a:ec:d1:37:a8:b0:2f:f9:bf:25:8f:
44:4e:34:ad:d3:8f:c5:dd:82:25:5d:3f:55:0c:29:49:c0:45:
cb:99:84:39:29:2e:5c:e7:ea:16:6f:8d:f5:72:62:de:ef:7a:
56:d5:3d:33:d9:24:8d:25:16:c8:f2:17:8d:2d:a1:6c:c8:b0:
fa:6c:7d:6c:8f:5c:cb:49:a0:b9:2f:e1:55:12:3f:c3:20:64:
5d:f9:06:84:5d:fb:97:0c:35:09:85:7b:3b:fe:4e:57:fa:56:
e3:17:93:6e:2b:86:e3:af:b6:01:6e:c7:7e:74:ee:16:26:2a:
d1:6b:10:26:0d:d5:cf:42:77:14:1a:61:a3:c9:2b:8c:c6:6d:
b3:18:fe:6b:b1:b5:7e:9a:04:51:c8:79:5f:70:58:8a:b1:f0:
4a:36:20:54:ab:79:cf:c0:66:f9:1a:12:b7:1f:c6:a6:ce:0c:
c9:f7:87:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:00 2025 by rpki-client