Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfeea257-d2fe-33ed-af51-0d0e7cb5f3a9.roa
File: bfeea257-d2fe-33ed-af51-0d0e7cb5f3a9.roa (raw, json)
Hash identifier: JfdURz0LeXHonrm1HG8E3f98tWAha+jDGVY6YnLPVyQ=
Subject key identifier: 84:D1:B1:61:B8:7D:B4:7A:EA:CD:85:55:B5:65:CB:A2:63:86:0A:FB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842FE2481074319D545F8BD01C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfeea257-d2fe-33ed-af51-0d0e7cb5f3a9.roa
Signing time: Thu 24 Aug 2023 16:14:08 +0000
ROA not before: Thu 24 Aug 2023 16:14:08 +0000
ROA not after: Wed 22 Nov 2023 17:14:08 +0000
asID: 11798
IP address blocks: 166.1.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:fe:24:81:07:43:19:d5:45:f8:bd:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 24 16:14:08 2023 GMT
Not After : Nov 22 17:14:08 2023 GMT
Subject: CN=9a07b70b-87b6-435b-9b43-00b1c93a5a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c7:b2:6e:83:42:0a:e6:f9:5d:09:b1:1e:f0:
a6:0c:56:f1:ee:b1:8e:5f:83:a4:a1:ab:b5:d0:d1:
72:d6:a2:c5:22:b3:d2:af:2b:a4:cd:bf:e4:01:31:
c7:22:d7:ee:97:0c:c5:e8:61:f6:58:84:1f:39:ec:
3c:56:26:87:e6:19:10:42:bb:ef:06:fa:60:26:d2:
e1:ca:6b:27:0d:1b:a2:b7:7c:81:5f:dd:30:19:c2:
83:73:55:36:2a:b2:42:ba:ea:66:c3:93:5a:ec:2b:
64:7d:5b:89:12:54:a8:d3:85:03:94:0c:10:9f:77:
df:8a:3a:00:b0:ae:eb:c9:4e:de:f2:d3:90:23:d5:
d7:e6:3e:24:11:1e:27:ac:a5:aa:c7:38:de:50:64:
2b:30:2f:f1:b5:1f:c4:47:9a:67:2f:24:27:4f:cf:
79:30:9a:97:7a:18:d5:84:61:53:9d:75:19:d6:61:
04:2a:27:37:69:5d:0b:3a:d2:3b:e3:76:c2:2e:d0:
95:31:61:00:70:f4:a1:e5:07:13:4f:d5:e8:c1:5b:
5d:8d:ec:8f:8a:80:9d:31:01:b4:9a:83:bd:17:64:
f6:87:74:45:1f:5f:d5:5a:8d:8b:0e:e5:ef:3b:77:
41:01:85:16:60:ff:8e:30:47:14:91:f0:7e:4c:22:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D1:B1:61:B8:7D:B4:7A:EA:CD:85:55:B5:65:CB:A2:63:86:0A:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfeea257-d2fe-33ed-af51-0d0e7cb5f3a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:66:be:0b:2f:31:29:32:1c:de:af:07:eb:02:40:d0:62:03:
47:54:1d:33:2e:67:08:fa:ce:5c:d5:c6:65:a6:c0:ae:f9:42:
6d:4e:ce:a5:9a:2a:b2:44:c8:ee:dd:55:1a:4e:dd:cd:40:04:
0e:5c:1a:03:f4:1c:d4:d7:41:1e:8e:44:f3:33:23:40:cc:82:
76:3e:02:04:29:55:c4:36:fb:09:2d:b6:0c:bc:ea:02:67:74:
6c:5a:ec:46:11:1f:c2:6d:d6:ee:01:bc:44:79:2a:35:57:19:
59:82:47:0a:e4:60:6f:6b:ad:92:e7:a7:46:37:91:36:3c:94:
a6:80:6d:b3:ae:61:92:07:c1:91:3f:1a:7d:a6:f9:b3:db:f4:
36:1f:c4:53:ec:6a:89:33:6f:4a:44:0a:b5:db:b5:4a:76:22:
87:40:c0:5d:5c:6e:63:fc:73:12:c0:f0:40:c8:4f:73:75:03:
8a:94:1a:f5:d9:a9:78:e0:e9:2b:31:bc:93:32:15:e1:aa:a7:
6b:1c:70:78:c3:88:bc:18:75:50:43:71:28:9c:8e:da:b8:74:
3b:13:77:44:81:15:92:3c:74:f0:b2:8c:13:f8:3f:cd:8f:d6:
d1:ed:fd:5f:9d:6c:a7:71:2d:8c:1e:4a:2b:6a:09:ac:39:30:
86:02:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:57 2025 by rpki-client