Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5fb6dc6-3c1e-353f-b8ad-50c73a41538d.roa
File: b5fb6dc6-3c1e-353f-b8ad-50c73a41538d.roa (raw, json)
Hash identifier: poseUdqHrWTL9Kcv9JGKCKhfrhhN48PQSCgDFJnSRUc=
Subject key identifier: 8D:85:6A:EA:51:1B:A2:05:E7:F0:08:F8:BD:E8:56:5A:07:03:D9:E9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841F7CF3C5816A8DD6F8CDAD0E8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5fb6dc6-3c1e-353f-b8ad-50c73a41538d.roa
Signing time: Mon 22 May 2023 17:00:32 +0000
ROA not before: Mon 22 May 2023 17:00:32 +0000
ROA not after: Sun 20 Aug 2023 17:00:32 +0000
asID: 398465
IP address blocks: 166.0.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:f7:cf:3c:58:16:a8:dd:6f:8c:da:d0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 22 17:00:32 2023 GMT
Not After : Aug 20 17:00:32 2023 GMT
Subject: CN=0ae67027-8b76-414c-a221-61f8e7c219e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:ad:e9:1a:40:90:55:58:05:09:ae:34:50:
7c:a8:d7:a3:ea:86:13:89:d6:79:36:3b:26:54:a4:
3d:a8:3a:33:e1:e3:cd:40:5e:15:5c:f6:7f:46:da:
90:82:d4:53:58:c3:80:d1:b2:29:34:81:5a:55:3d:
f9:62:f1:ee:8c:bf:01:a4:38:c1:e9:41:18:a9:10:
ac:49:35:49:cb:d2:39:25:20:cf:32:79:a4:53:39:
ae:80:fa:5c:c1:b1:84:ba:1b:4a:53:33:6d:2f:df:
14:47:1f:e3:5d:64:8b:46:f4:d2:36:20:af:ce:5c:
50:df:fa:ff:f0:92:1c:15:85:38:f1:07:ec:5a:a4:
80:ad:5d:11:b4:76:94:57:a7:42:ee:8b:ad:2f:ea:
f8:69:90:f8:0f:0c:0c:bc:58:a3:6b:9e:8d:9d:d3:
88:c5:d4:d9:2b:50:4b:6a:36:f4:94:a5:ea:7c:bd:
c0:b1:f6:c1:a3:22:6b:6b:20:d9:c9:1a:a9:53:b4:
01:ca:a9:64:c3:46:2e:b6:9d:d3:fc:9c:53:32:85:
4f:fd:88:83:b1:8c:e5:17:b3:3b:b5:3b:ec:3f:2b:
15:cb:46:03:db:c6:ce:c3:6b:4d:8e:18:35:aa:f5:
2c:ed:0d:18:11:df:bf:30:09:4d:41:03:77:42:a6:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:85:6A:EA:51:1B:A2:05:E7:F0:08:F8:BD:E8:56:5A:07:03:D9:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5fb6dc6-3c1e-353f-b8ad-50c73a41538d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ed:66:e3:b1:60:ba:a0:82:f6:55:cc:74:5e:ab:88:a1:98:
6c:30:7f:27:f2:ac:fb:03:a5:5b:b5:ba:c9:c7:ea:4b:25:49:
a8:6d:0d:e2:d2:d9:8b:79:98:f3:1c:df:b7:6c:49:6b:7b:5d:
d4:0e:ba:35:4e:f1:65:a8:bd:77:39:f9:fb:08:0a:b3:b2:c8:
6f:51:90:e8:92:51:a2:f3:8d:df:15:8a:37:a6:31:16:1c:7c:
27:1f:92:72:64:bd:d4:c2:fb:12:4c:c9:1c:a3:88:ce:4b:00:
e6:24:69:ab:ba:0b:aa:b3:c2:4e:7f:dd:2a:80:d7:d2:21:08:
60:b5:dc:97:ab:cc:c4:d3:56:8d:cd:cc:97:54:82:f1:11:ee:
a8:a4:b0:16:da:5b:73:12:5d:4b:37:6a:33:35:cc:ff:6b:e6:
10:38:2e:19:4d:29:ab:88:85:d2:02:92:bc:da:41:d4:9b:52:
ba:56:2a:92:26:fe:16:38:0c:f4:a2:c3:b5:83:fc:f1:d0:e1:
5c:81:40:d2:0c:77:1e:25:9a:bc:0c:49:78:9e:fb:4a:fb:f4:
38:c2:86:a4:1c:4f:6d:7c:98:9c:e6:b3:50:4d:24:58:77:5b:
a5:66:fb:75:8c:f1:19:ec:ab:53:bb:d0:a2:c6:85:02:ab:72:
49:d4:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:37:26 2025 by rpki-client