Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afac6650-37fd-3341-90e3-00d80a0ca3d8.roa
File: afac6650-37fd-3341-90e3-00d80a0ca3d8.roa (raw, json)
Hash identifier: W4OMLTxPpNRzHsW0eMFd3E8qZSDnOzuiMuN8gIOnk34=
Subject key identifier: CD:7D:7E:6F:22:01:A7:D2:75:08:58:FD:7F:2C:BB:54:54:31:37:A6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842AD2FDBEC84178E599B2C3680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afac6650-37fd-3341-90e3-00d80a0ca3d8.roa
Signing time: Wed 26 Jul 2023 16:16:32 +0000
ROA not before: Wed 26 Jul 2023 16:16:32 +0000
ROA not after: Tue 24 Oct 2023 16:16:32 +0000
asID: 834
IP address blocks: 166.0.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ad:2f:db:ec:84:17:8e:59:9b:2c:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 26 16:16:32 2023 GMT
Not After : Oct 24 16:16:32 2023 GMT
Subject: CN=aa3e538e-2b57-4c6f-a126-5a7de5933f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:7a:97:a2:5b:12:67:e1:58:f5:64:63:ac:
4b:6b:a3:56:73:8c:a8:a8:1a:c0:a0:ca:92:8d:b5:
3f:fc:d8:e4:c8:af:be:62:e2:05:52:c7:65:ab:3c:
1c:1d:ab:ae:61:0d:73:cb:f5:df:02:1a:8f:0d:48:
72:34:67:d2:64:37:3a:7b:b5:c3:3c:d2:36:8f:e9:
0b:b1:53:ed:03:b2:7b:44:ca:d6:f3:74:be:c1:ae:
2a:f5:48:0e:54:6c:96:f8:db:b4:f2:8e:a1:37:1c:
b2:2b:f9:54:f7:a4:4a:20:66:63:35:98:4c:93:76:
10:bc:01:1f:f6:c4:76:f4:f5:17:03:03:c9:f3:93:
a6:af:98:d0:c4:7e:da:51:62:f9:76:69:0b:9e:2f:
82:fc:28:d2:60:ab:b1:aa:17:fc:aa:f3:a1:85:a1:
a1:fb:6a:4a:6e:fe:31:45:5a:70:f4:cf:38:59:10:
09:90:27:de:9e:96:5a:20:91:f9:ef:a1:a7:11:71:
1c:bc:25:80:57:f2:a7:67:40:98:fc:50:f0:63:1f:
46:97:8d:f9:65:61:a4:9d:c0:f3:72:85:59:eb:68:
01:9c:4e:be:54:c7:c3:6c:27:eb:1a:01:e8:e9:45:
37:f8:c9:d2:6e:f8:79:bc:89:d0:be:e3:e5:49:e7:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:7E:6F:22:01:A7:D2:75:08:58:FD:7F:2C:BB:54:54:31:37:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afac6650-37fd-3341-90e3-00d80a0ca3d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:a1:b7:f5:70:39:6c:4a:af:64:d1:51:c5:76:51:39:08:68:
d6:eb:46:30:21:b8:50:6a:b2:a4:90:96:74:12:ed:d4:c7:9a:
74:96:80:5e:b8:53:37:e3:7f:d9:a0:d9:b4:49:01:41:7f:c8:
ed:fb:a7:f1:0a:31:4c:f3:81:13:45:63:c0:91:4b:e6:a9:7c:
07:b3:82:34:c0:66:3c:40:f4:25:89:82:58:d0:11:d1:db:2b:
54:99:14:50:2d:76:89:1b:2b:af:90:8e:44:17:1c:9b:98:a4:
3f:d8:0d:ee:74:7d:fa:3c:76:d3:94:06:0b:ad:17:67:9c:36:
91:99:6e:11:12:8e:37:bc:ab:08:32:c1:3f:8c:66:75:e6:a3:
74:c3:80:3e:d4:04:31:79:da:77:06:a2:0e:77:c3:1b:b1:74:
bc:1d:5c:44:53:27:cc:f3:da:fb:a1:46:61:b4:7e:7e:c2:19:
5f:ff:b9:2a:98:03:d2:8e:75:de:c3:36:1b:5b:fc:3b:55:7c:
9b:5f:ef:e2:ab:64:22:d7:25:27:21:ff:6f:18:f4:4c:98:03:
46:b9:c6:dc:25:bd:b8:83:ee:11:f6:19:27:07:a5:8b:af:5c:
3f:d5:0c:aa:9a:6f:a6:58:ff:87:ed:fb:71:5c:16:8f:1a:1b:
d4:bd:6c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:44:56 2025 by rpki-client