Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bc9d3fce-d959-3349-bd1a-fa55132a3aa3.roa
File: bc9d3fce-d959-3349-bd1a-fa55132a3aa3.roa (raw, json)
Hash identifier: oapZrUAseXvwoB6sEcfb+AUEU03u90mpTNUMzFWa77w=
Subject key identifier: 53:8D:BF:00:BB:4E:5C:EF:F5:09:22:82:0C:0E:C1:28:DA:93:56:E2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D18762506831388497D20CC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bc9d3fce-d959-3349-bd1a-fa55132a3aa3.roa
Signing time: Tue 08 Aug 2023 16:41:59 +0000
ROA not before: Tue 08 Aug 2023 16:41:59 +0000
ROA not after: Mon 06 Nov 2023 17:41:59 +0000
asID: 201106
IP address blocks: 166.1.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d1:87:62:50:68:31:38:84:97:d2:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 8 16:41:59 2023 GMT
Not After : Nov 6 17:41:59 2023 GMT
Subject: CN=8b8861af-603d-41d2-80a2-7e6998cca630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:07:e8:ce:91:f6:c9:47:07:bf:01:4d:ba:
fa:77:a0:63:2d:14:ca:e5:f0:92:c2:ac:70:e5:0b:
4b:dd:2a:9f:25:b2:1e:5d:2e:11:e7:2b:a2:1e:74:
80:0a:de:25:bc:34:f0:6b:e6:38:f6:cb:f3:9a:3a:
46:d0:e4:cf:e4:5f:f7:87:77:23:47:b6:bd:20:c8:
53:57:33:fc:31:ec:e8:fb:60:d3:f8:f2:30:c8:7e:
85:07:60:4e:75:7a:71:bf:7f:8a:e4:f8:bd:a5:0f:
eb:bd:c3:10:4f:21:5b:7a:5c:80:d7:e0:c0:43:65:
68:1a:58:30:32:74:e7:ed:bf:7f:75:76:7f:f2:aa:
15:2c:8b:a9:cb:66:27:1c:38:49:48:35:b8:49:46:
b7:1f:50:a0:50:e4:d7:ab:6f:0f:af:80:83:6a:0d:
12:d4:81:86:93:37:dc:ac:e1:6f:ce:47:71:54:02:
0c:b7:29:7f:2e:15:2a:44:bb:d5:54:f9:d4:89:57:
70:27:f5:e7:20:10:a1:ab:44:0e:07:93:21:90:05:
56:86:4f:8d:1c:f2:cb:a4:00:e7:ca:a9:f4:59:45:
c6:a8:e7:65:6e:a3:34:87:25:e1:06:f9:57:47:a6:
3c:ec:e2:7b:4d:42:6e:01:9e:65:0b:9a:01:8d:b1:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8D:BF:00:BB:4E:5C:EF:F5:09:22:82:0C:0E:C1:28:DA:93:56:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bc9d3fce-d959-3349-bd1a-fa55132a3aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:af:78:91:94:95:3c:39:05:67:0e:e5:a8:b8:a3:b1:3f:30:
85:70:90:ba:03:ed:d2:0a:d4:b4:14:df:64:db:5b:22:40:36:
c0:64:05:b3:7e:e1:a3:ac:d8:bc:cc:62:d8:83:01:1d:38:92:
4d:cd:70:85:85:9a:2e:ab:f6:b5:44:f9:ff:77:69:4a:91:d3:
14:8d:ae:63:0a:ba:d3:18:ca:13:46:21:05:90:32:dd:58:37:
89:bf:93:05:75:92:27:6f:4e:77:bb:b2:48:b3:51:fe:24:34:
8a:26:66:89:05:ac:f5:ab:c2:40:56:8b:b5:53:8f:e6:fb:06:
60:ea:5c:b3:0b:8d:10:d0:73:ec:32:4b:4f:3a:eb:82:86:56:
cb:79:d6:12:be:27:c7:d4:33:b6:eb:4a:64:11:38:fa:a6:94:
1c:c0:23:91:81:a8:26:75:eb:7a:9c:8b:d3:bf:f3:8e:be:7b:
03:a5:49:7a:36:fb:ef:17:65:8b:03:a5:76:2c:76:2e:ce:e1:
f9:f5:5c:74:63:98:d8:f7:a0:8b:72:93:9a:ac:4e:53:8d:73:
a6:89:d0:aa:26:96:4d:26:48:90:9b:5c:ea:d3:2f:8c:be:04:
22:67:59:b7:ff:73:e7:a9:05:83:40:32:2d:54:2f:ca:45:67:
aa:99:2a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:12 2025 by rpki-client