Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0f414df-fc82-3189-ade3-c6982d8b458d.roa
File: c0f414df-fc82-3189-ade3-c6982d8b458d.roa (raw, json)
Hash identifier: umZYNB/SMMhjYZEaYurEBkDSAeSWxjlQaVjeJphMbtw=
Subject key identifier: 51:44:E8:F9:82:DB:83:34:D5:88:0D:41:74:7A:C4:E9:60:6D:65:AF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858468A7A1C519414E3A8CD7B1740
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0f414df-fc82-3189-ade3-c6982d8b458d.roa
Signing time: Mon 15 Jul 2024 01:00:24 +0000
ROA not before: Mon 15 Jul 2024 01:00:24 +0000
ROA not after: Sun 13 Oct 2024 01:00:24 +0000
asID: 61317
IP address blocks: 166.0.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8a:7a:1c:51:94:14:e3:a8:cd:7b:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 15 01:00:24 2024 GMT
Not After : Oct 13 01:00:24 2024 GMT
Subject: CN=99e8b637-6fbf-4a8a-becc-5627843dc3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:84:6f:71:28:0a:8f:9f:db:f0:5f:fd:de:
75:25:2d:3b:c4:f8:88:85:17:30:da:04:38:53:8c:
a4:ae:76:bf:c7:9f:53:36:ac:a9:e9:97:9a:e0:a7:
ef:dd:cd:54:bf:85:bd:00:69:af:c6:fd:a1:ed:53:
19:ac:78:b0:71:e2:91:87:eb:4e:33:77:ba:a6:1e:
7f:dd:dc:a9:e3:67:dc:00:02:36:b4:ce:9f:65:58:
8d:ce:0a:9d:ce:22:23:14:d2:5d:1c:09:c2:f2:fa:
66:ba:d9:4c:9c:65:b7:c7:26:25:e3:6f:8c:b7:dc:
49:1b:e5:94:6a:a2:0a:ea:a3:b5:00:eb:4f:67:fe:
eb:a2:45:8b:6e:8b:cd:d3:57:87:bd:a4:e4:e4:76:
87:25:5a:09:c5:4b:ef:e6:be:b4:27:00:ab:42:ce:
b8:a3:84:3e:0d:9e:c5:76:5f:bf:0b:f7:a6:38:41:
5a:23:27:1b:ff:f8:bc:40:6c:79:b8:98:01:9c:57:
07:58:29:78:ed:e4:80:ff:5f:d9:5d:56:5b:10:ff:
a1:54:b8:c5:c6:66:9e:02:1d:86:e7:45:22:3c:85:
eb:0d:b4:d7:d3:13:0b:1c:9e:a0:3e:a1:88:1a:98:
53:ea:a6:d7:f5:87:2c:cb:ea:19:0e:6a:80:91:bf:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:E8:F9:82:DB:83:34:D5:88:0D:41:74:7A:C4:E9:60:6D:65:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0f414df-fc82-3189-ade3-c6982d8b458d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:43:3c:5d:13:37:6e:d6:b7:2b:db:32:75:ca:9b:d9:40:ed:
02:39:3b:4c:e7:d8:35:b1:8c:e9:be:76:38:d9:cb:86:7f:e7:
f2:29:81:34:34:61:ec:f9:4e:2f:9d:0f:78:5c:42:e0:95:21:
0e:17:49:3e:90:6f:fe:6c:fe:54:9a:30:c5:09:da:be:ea:c6:
07:03:32:af:44:43:52:d4:6e:52:0f:cf:91:fe:95:3b:83:ec:
3c:c2:10:c6:ac:d9:bc:c0:00:3e:05:db:21:00:24:3b:a5:92:
94:29:03:45:fb:f9:65:2f:81:88:7e:eb:fd:48:c0:15:2a:ba:
0c:3d:18:f7:bc:fd:c2:2e:7e:63:95:8a:9a:91:a3:aa:4d:a1:
f5:7f:48:01:2e:82:74:9f:81:79:70:21:b9:c0:62:2f:c9:6a:
e5:7b:cd:f0:18:3e:86:dc:d6:d9:94:df:12:e6:7f:d6:bb:c5:
6c:b1:fe:3b:49:f1:59:b6:81:d4:fc:1c:21:80:6f:30:3e:e2:
6e:34:92:72:04:29:97:0f:dc:6a:4e:75:3e:01:61:36:de:7c:
10:b6:98:fa:7f:c4:e8:75:20:6f:1e:ee:49:76:d8:0c:3b:41:
f5:d4:ba:b3:c1:62:ba:44:e3:6b:b1:44:b7:c5:52:5e:fb:36:
6c:1c:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:27 2025 by rpki-client