Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b854aa7e-6f01-391f-9370-0dd4154c49b4.roa
File: b854aa7e-6f01-391f-9370-0dd4154c49b4.roa (raw, json)
Hash identifier: crNnG1k8qc5TnVvOcpFFuGJJUHeLDeJ/KfB+6PvY7qY=
Subject key identifier: 1E:57:FF:00:D4:29:6C:8B:43:1A:BF:77:1B:AF:D4:4C:DE:65:44:2E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843F131F1BADB527D343D968100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b854aa7e-6f01-391f-9370-0dd4154c49b4.roa
Signing time: Sun 19 Nov 2023 17:42:39 +0000
ROA not before: Sun 19 Nov 2023 17:42:39 +0000
ROA not after: Sat 17 Feb 2024 17:42:39 +0000
asID: 216000
IP address blocks: 166.1.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f1:31:f1:ba:db:52:7d:34:3d:96:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 19 17:42:39 2023 GMT
Not After : Feb 17 17:42:39 2024 GMT
Subject: CN=bc3f7f80-9def-4b42-bb8b-f25112011652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f2:a5:67:0f:21:e6:b0:6a:27:a0:f7:a0:b5:
65:62:3a:59:d0:d0:e9:a5:bf:5e:d9:e6:33:29:ed:
bf:88:7a:3f:54:c1:34:06:a1:24:98:aa:d4:61:5b:
e8:40:6a:c9:88:fa:27:3b:aa:fe:95:cc:02:e5:50:
d6:33:63:6b:79:74:e9:69:ae:21:2b:5f:70:8d:bf:
6a:87:39:ce:1a:7e:0d:2a:fd:ab:a0:4c:7a:c2:9e:
35:be:f1:7b:37:92:ad:02:e6:c8:6b:5e:fd:6b:e5:
bc:a1:e3:3a:8b:c4:fd:fe:16:5b:b4:28:b2:9a:20:
2a:69:35:da:b0:19:3c:ea:b7:e8:52:a5:a1:cc:d5:
45:10:d7:ee:6d:35:20:3c:99:22:bd:09:6f:6b:78:
fc:87:83:bd:4d:56:a4:1c:4c:f6:e6:02:2c:e9:9f:
a5:5a:f2:44:ef:d2:71:48:a5:8f:49:04:b8:8d:96:
4f:2a:fd:3c:75:c8:22:3b:df:0b:65:c1:eb:76:31:
5e:9a:9c:dd:a2:50:77:9e:53:07:30:f1:9d:c0:28:
5a:88:42:b2:a0:76:10:a8:f2:86:51:40:06:8c:b4:
83:10:a7:1e:dd:61:75:c5:5e:ab:2d:c4:19:79:60:
40:51:95:bd:b2:74:58:09:ad:e2:cf:b8:75:91:b6:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:FF:00:D4:29:6C:8B:43:1A:BF:77:1B:AF:D4:4C:DE:65:44:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b854aa7e-6f01-391f-9370-0dd4154c49b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:1e:57:26:7d:7d:39:25:7a:3e:2d:4d:5a:d2:93:60:ca:03:
44:a7:42:cf:00:99:3e:5c:d5:d3:9a:d8:53:62:41:88:cd:cc:
87:61:b9:2e:13:8c:91:e8:03:33:cf:db:eb:f4:5b:90:67:9b:
34:cd:2e:9f:6c:71:df:92:4c:90:7f:d2:ab:64:17:20:8f:34:
91:68:d3:99:8f:b3:20:ea:60:2e:bf:3e:fe:87:bd:67:d3:9c:
53:ea:18:94:22:59:bc:f9:bb:40:80:9f:68:68:42:39:ab:56:
ef:80:f9:51:c1:dc:ed:f4:78:d3:c7:55:d4:78:6d:8f:09:1b:
63:8e:d8:63:02:dc:98:d1:6a:5d:98:c6:e4:4d:b6:b3:89:2c:
bd:f9:b9:9d:f1:4f:65:cc:f6:0c:6c:5b:5d:ae:90:8f:a9:ee:
eb:06:0d:f0:d9:31:fa:89:82:b8:3c:64:ae:45:eb:cb:29:5e:
29:4a:23:de:77:9b:5a:62:5d:43:ed:fe:77:b0:bf:82:6c:e9:
e1:cc:02:da:c1:05:60:9c:90:14:f1:bc:05:25:41:ce:c2:06:
ef:48:8c:2e:41:1e:51:04:e7:a4:2c:9a:40:01:de:6d:81:16:
89:20:6b:55:29:b5:7b:c6:c5:71:0f:89:03:ec:d0:f1:94:36:
4a:0e:b3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:40 2025 by rpki-client