Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf6ce3cd-5a98-384b-ad53-bd18ad6c9a3c.roa
File: bf6ce3cd-5a98-384b-ad53-bd18ad6c9a3c.roa (raw, json)
Hash identifier: 4vyE1vsBYr9IIDIwQ2/Ai9MxWWYsd6w4xyGl3z5xjig=
Subject key identifier: A8:F6:09:28:0D:B6:9F:E1:F2:1D:FC:65:93:AF:CB:CF:60:06:3A:15
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858442CD3E1061BBB282B9D8EBC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf6ce3cd-5a98-384b-ad53-bd18ad6c9a3c.roa
Signing time: Mon 11 Dec 2023 02:21:37 +0000
ROA not before: Mon 11 Dec 2023 02:21:37 +0000
ROA not after: Sun 10 Mar 2024 02:21:37 +0000
asID: 834
IP address blocks: 166.0.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:2c:d3:e1:06:1b:bb:28:2b:9d:8e:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 11 02:21:37 2023 GMT
Not After : Mar 10 02:21:37 2024 GMT
Subject: CN=e966787f-1353-4d98-8abe-5b6129bfb566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:ac:b9:0c:ff:cf:90:d3:49:0b:98:35:62:
9b:6d:0f:99:1d:57:e4:35:91:62:ec:60:36:01:7e:
85:0e:4a:bd:e3:ee:77:4d:c6:1e:78:4d:b5:41:53:
7b:b9:73:80:43:6c:eb:ad:49:c4:68:86:8a:8c:ca:
fe:d9:79:1d:51:da:4f:21:4a:6f:6b:c6:51:7a:b9:
51:45:86:e2:28:e4:c7:e5:72:cd:ce:9c:fd:d5:60:
b9:7c:43:eb:d7:12:2e:bd:03:bc:4e:37:88:39:40:
82:e0:d9:d7:60:57:a6:8c:42:66:93:4c:ea:7f:0d:
e1:82:06:46:88:27:81:4c:51:79:91:ab:c7:ae:9b:
6c:d0:2a:c7:da:5f:10:7d:92:57:3a:ce:9f:7c:8a:
f5:99:76:b8:84:26:60:11:57:79:cd:26:97:cd:1d:
1e:b3:ee:1d:62:12:55:3e:b4:4e:b7:30:db:fd:fb:
db:ac:49:fb:f0:43:42:ba:a9:e7:05:7b:8a:35:c2:
72:e2:8e:b8:f3:26:3a:c1:be:27:dc:fc:48:9c:09:
4f:2a:25:5f:ca:cf:40:5d:17:60:94:15:29:6b:d3:
9b:ed:5f:c7:de:06:3f:6a:3f:7b:53:a5:fa:f8:69:
6d:9f:21:b3:24:0c:59:ed:1c:d6:97:e0:c4:4b:4b:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:09:28:0D:B6:9F:E1:F2:1D:FC:65:93:AF:CB:CF:60:06:3A:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf6ce3cd-5a98-384b-ad53-bd18ad6c9a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e1:80:d1:6a:64:f8:18:9d:93:d2:cc:ed:2a:ba:16:50:c8:
58:1f:16:a7:dc:a4:31:b7:4b:e9:38:6d:f3:59:db:00:d0:f3:
fb:7b:b4:9a:d5:b5:3b:d7:9f:3d:80:0c:56:52:6e:85:8f:14:
09:5a:55:b2:ec:c0:ad:50:ee:5d:e8:10:6e:f4:a4:07:57:5b:
43:07:f7:0f:c5:bc:e7:5b:5c:c2:7c:ef:c9:09:89:0d:e9:5d:
1f:37:fe:e5:98:ef:d9:1e:a7:71:c9:46:9a:4b:25:53:ee:70:
87:93:b6:09:c9:72:84:e4:ab:a2:84:1e:eb:b1:12:fa:43:0f:
50:64:c7:90:24:26:75:1b:33:bb:9c:12:70:b8:c6:9a:de:7d:
67:bb:da:5a:cf:59:b6:01:70:13:cc:68:91:76:10:e9:0b:9e:
09:87:91:40:0e:a8:a2:cb:c0:08:7d:7b:5f:b8:1d:0c:26:8a:
65:13:f5:5d:3e:71:78:db:99:b3:ea:04:41:59:27:12:92:3e:
99:d9:b5:13:44:e3:af:2d:3f:cf:12:89:6e:2b:9d:b6:b9:93:
a6:11:3e:d9:ea:4b:46:f9:ab:fb:ef:ae:36:bd:3b:20:ef:c6:
08:82:0f:02:cb:0d:85:66:ff:65:96:e5:ca:7e:f7:33:41:3d:
f5:b0:5f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:02:41 2025 by rpki-client