Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6403e7b-f10a-3499-9c6d-18587c3805d2.roa
File: b6403e7b-f10a-3499-9c6d-18587c3805d2.roa (raw, json)
Hash identifier: zbGjptnLMCWpsDlaA26P2dnlPhhoRc3sZVKBHROZuAQ=
Subject key identifier: C3:4B:06:9B:E2:0F:55:D3:29:4A:A9:1A:25:12:BD:97:18:B8:62:96
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842FE2B89051E6C580D4A6D55C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6403e7b-f10a-3499-9c6d-18587c3805d2.roa
Signing time: Thu 24 Aug 2023 16:28:18 +0000
ROA not before: Thu 24 Aug 2023 16:28:18 +0000
ROA not after: Wed 22 Nov 2023 17:28:18 +0000
asID: 11798
IP address blocks: 166.1.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:fe:2b:89:05:1e:6c:58:0d:4a:6d:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 24 16:28:18 2023 GMT
Not After : Nov 22 17:28:18 2023 GMT
Subject: CN=960b7cde-cf62-4ba9-a709-e97e6be8bc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:6c:02:6e:54:1b:ef:2d:c5:81:04:f0:d5:
4d:66:23:40:1d:62:3a:d3:5b:8b:87:01:d9:e1:bf:
f4:f6:c0:e4:8d:e6:9b:c4:97:bf:f7:f8:a9:cc:2d:
35:33:ef:d8:80:ea:e3:0e:ed:e7:ed:06:e1:62:bc:
bd:b7:47:ad:69:7d:37:69:31:f3:83:fe:5e:04:91:
73:0e:50:00:05:a2:ac:d9:0e:95:ab:09:bd:b5:c2:
b8:26:53:3c:a4:cb:51:5d:da:e9:1b:f6:8b:da:d0:
02:18:6e:c3:7d:47:bc:f4:7a:08:6e:f5:97:ef:3f:
b4:49:bb:94:9d:64:3e:a7:3a:12:4e:f0:6b:2f:bd:
4c:fc:f2:fa:58:b0:a8:f8:d4:10:ea:4d:68:8e:b3:
5d:6d:69:79:17:51:dc:11:b8:cb:ed:de:79:ff:1b:
7c:3b:69:c1:6d:06:54:3a:58:74:63:62:34:d8:5c:
b8:bc:ab:8b:49:8c:f9:93:08:df:a6:bf:31:f7:62:
97:24:09:02:c0:4f:77:e2:13:41:aa:d7:14:d9:ac:
db:85:c4:71:3f:a6:8e:69:fe:7d:f4:df:75:63:ee:
2c:02:2a:d3:87:32:64:45:e2:f7:61:a2:4d:79:52:
4f:d3:86:8b:1b:dd:25:4a:05:d6:75:09:75:c5:ff:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4B:06:9B:E2:0F:55:D3:29:4A:A9:1A:25:12:BD:97:18:B8:62:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6403e7b-f10a-3499-9c6d-18587c3805d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:7d:60:ea:94:60:5a:3b:26:7d:22:b1:58:21:57:57:cf:94:
82:e2:ae:ee:70:d1:68:2f:73:13:f9:51:88:dd:cc:b5:1d:06:
3f:85:d9:e9:46:42:82:54:0b:0e:1b:d6:97:72:9d:78:62:f3:
74:ca:bd:b6:e2:54:71:22:fe:ae:10:bc:90:cd:b9:f6:42:19:
48:a3:d4:cb:16:84:21:9c:eb:dd:95:67:55:ff:80:db:3e:39:
a3:63:57:95:56:cf:b8:68:62:50:87:db:fc:5b:1b:23:ef:6a:
82:cf:24:dd:75:36:07:a0:e0:59:49:dc:58:f9:bb:95:29:de:
c4:1b:a9:14:d1:77:8d:57:fc:01:97:37:b9:19:36:90:31:31:
d1:f0:54:22:77:33:2a:ba:42:c6:be:6d:63:a1:a3:a2:33:48:
e8:15:0c:bd:fa:10:d5:8f:6f:db:d5:2a:96:ff:b6:ea:4f:e4:
0b:96:ad:6d:02:d7:ad:99:de:63:08:b8:f3:fa:44:da:4c:02:
e6:0a:26:86:8e:51:a9:62:b5:96:30:ca:2e:54:ef:e3:76:37:
b4:44:09:6b:41:44:21:3f:eb:34:65:37:9c:01:4d:51:69:be:
36:34:45:c3:18:04:16:8a:e4:93:a4:58:1f:48:64:26:58:3e:
51:f2:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:39:06 2025 by rpki-client