Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b02eef28-cb6c-3c65-b5c8-83f351fb4103.roa
File: b02eef28-cb6c-3c65-b5c8-83f351fb4103.roa (raw, json)
Hash identifier: XHk9pqNgRiSx3xd4dgb4ATnnPQuyHr9QPEtHEzkMhDc=
Subject key identifier: 2D:1D:68:27:27:CA:13:CC:E7:5D:5A:C0:89:98:2C:FD:92:BC:9C:CB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842B06607707825DF55DCDE2320
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b02eef28-cb6c-3c65-b5c8-83f351fb4103.roa
Signing time: Thu 27 Jul 2023 19:53:06 +0000
ROA not before: Thu 27 Jul 2023 19:53:06 +0000
ROA not after: Wed 25 Oct 2023 19:53:06 +0000
asID: 11798
IP address blocks: 166.1.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:66:07:70:78:25:df:55:dc:de:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 27 19:53:06 2023 GMT
Not After : Oct 25 19:53:06 2023 GMT
Subject: CN=d2d4b0a1-9942-47bc-8ab9-9accc436ab11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:40:ee:98:44:c5:10:dc:60:87:a6:83:36:
a4:84:c4:ad:6b:1f:93:ef:c5:21:55:0c:66:7c:c1:
f6:38:e7:15:f6:d4:7c:f6:09:6e:fa:23:3c:4f:a4:
ba:2c:f9:89:01:f7:93:01:7a:1b:fc:9c:36:df:6c:
26:cc:a7:0b:18:dd:4f:be:a1:88:41:59:65:48:af:
a5:55:ad:ce:7c:76:8c:bd:b1:01:70:66:1f:59:69:
b3:51:5c:57:02:c2:3b:98:5d:e4:9b:f7:0b:cb:0b:
18:30:d9:8f:96:d2:12:4c:82:a4:61:08:9a:5d:0c:
f1:32:df:a0:f7:f4:fa:d1:33:9a:f1:e7:e1:2e:e5:
40:31:43:79:12:e4:4f:88:68:56:d9:d2:6e:99:e0:
55:c2:04:fa:0c:66:22:e5:bf:23:4b:3f:b9:80:5c:
7f:f3:5f:e4:0f:97:c2:b5:f6:60:70:a1:0e:30:fe:
0a:e9:76:7b:13:85:53:e7:ce:9c:05:1a:35:d3:3a:
6b:61:34:d4:36:14:3f:6b:0d:86:d2:3a:6b:b9:f4:
56:ce:12:29:af:d9:d4:94:6d:51:08:13:e4:d4:e9:
51:2f:78:66:16:9b:45:db:4c:cb:59:fa:89:9d:e1:
e7:ce:9e:31:fe:9f:fb:a5:e5:81:58:b8:61:22:56:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1D:68:27:27:CA:13:CC:E7:5D:5A:C0:89:98:2C:FD:92:BC:9C:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b02eef28-cb6c-3c65-b5c8-83f351fb4103.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b5:5f:81:14:76:2d:99:49:e5:19:a4:b9:0e:4f:a1:42:64:
fa:21:72:d6:79:d2:81:8a:54:88:85:8d:bb:6b:2d:6f:54:90:
5c:11:92:1c:d5:a0:23:87:85:c5:cc:85:9b:15:a4:46:df:29:
29:1e:e8:5d:ec:76:81:8f:b6:03:44:b0:36:c7:59:9e:8a:93:
f5:34:68:99:da:8b:11:58:08:1c:8e:59:48:f3:0b:f0:aa:25:
74:bc:df:4a:c7:82:1c:2e:2d:c6:f8:d9:34:e2:b9:c8:b7:92:
a3:cf:dd:84:db:a1:8a:88:04:70:74:c6:dc:a3:21:62:ee:c6:
c0:9a:64:72:96:6a:ec:6e:28:8b:65:cb:b7:51:c4:c1:43:51:
2d:d4:e3:1a:16:ed:23:ef:6f:c5:6f:2e:b4:97:ab:81:34:a2:
ab:f5:46:92:92:3c:dd:19:05:93:b7:43:e1:d3:fe:0a:36:52:
a2:9e:b1:13:1f:ac:13:3d:65:9c:ee:34:a9:19:a7:8e:de:5e:
03:49:82:24:72:0b:c2:45:f6:21:bb:99:f4:2b:9a:0d:8c:02:
4b:cf:7c:76:d5:af:4a:9b:71:23:00:b9:6f:f1:03:de:7a:b2:
36:d3:15:0b:a2:6c:67:90:ef:89:ea:90:69:39:ca:a0:a3:b4:
49:2c:84:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:57:17 2025 by rpki-client