Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1d5049e-4256-3d27-933e-1f6b1f6ff74f.roa
File: c1d5049e-4256-3d27-933e-1f6b1f6ff74f.roa (raw, json)
Hash identifier: tqP08x+1OAuou+8r0eAe9jwOf/P2LCAS4WhjYtp4N38=
Subject key identifier: 1B:FF:4C:E9:0C:67:25:8C:D1:EF:00:D2:17:9F:FE:CE:15:BE:9F:F9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842FE22631354044749BBD3F1A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1d5049e-4256-3d27-933e-1f6b1f6ff74f.roa
Signing time: Thu 24 Aug 2023 16:09:52 +0000
ROA not before: Thu 24 Aug 2023 16:09:52 +0000
ROA not after: Wed 22 Nov 2023 17:09:52 +0000
asID: 11798
IP address blocks: 166.1.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:fe:22:63:13:54:04:47:49:bb:d3:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 24 16:09:52 2023 GMT
Not After : Nov 22 17:09:52 2023 GMT
Subject: CN=85f7e0cf-baf9-4610-9a0f-62ded232429c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:cb:b4:f0:f8:1a:14:df:d9:c1:a0:5b:ad:
8a:4e:eb:b8:0a:82:87:44:08:4e:ba:bb:55:e0:cb:
16:09:44:73:21:05:62:64:c4:ab:46:47:1b:93:52:
d8:2a:89:28:92:1f:40:03:cc:9e:5b:a2:9d:6b:d4:
0a:7c:6d:c8:88:28:75:96:c3:e8:a7:49:d6:af:50:
89:49:ee:a2:2f:8a:2f:12:83:0d:85:4d:a0:a7:d9:
54:3c:8e:94:8b:0e:71:03:d9:a4:69:b6:cf:3c:9c:
9f:5e:11:0d:47:83:9f:e3:dd:4e:90:6a:60:56:a0:
4b:ca:fe:e4:37:61:2d:bc:ee:87:7c:d2:d1:e1:30:
dd:fa:ac:63:86:ac:91:6f:9c:3b:fb:53:b9:a7:6c:
80:7b:0c:86:50:56:ab:8b:fe:6f:69:18:2c:44:43:
6e:50:31:87:47:34:01:db:16:b6:02:8a:76:86:24:
15:fe:14:3b:55:02:7b:41:58:3d:ea:eb:c3:f1:0f:
cd:7f:c5:78:cf:cf:72:8c:80:67:f5:39:65:a2:91:
26:b4:38:f3:ba:11:b3:43:0d:0f:c5:49:91:44:88:
a5:1b:17:5e:2d:5c:97:33:7d:67:88:ad:72:91:b0:
04:a9:0f:5c:62:ff:d9:7e:c7:48:80:8c:31:f8:df:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FF:4C:E9:0C:67:25:8C:D1:EF:00:D2:17:9F:FE:CE:15:BE:9F:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1d5049e-4256-3d27-933e-1f6b1f6ff74f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:03:d6:65:fb:44:a5:04:52:ec:05:a1:86:0e:f8:a9:91:3b:
9b:ae:58:f5:8b:0f:4e:8d:9f:74:9b:58:5d:dd:31:99:43:58:
a9:0d:b2:05:9b:90:c9:d3:77:c7:04:aa:b2:15:c1:16:86:e5:
74:bd:0a:88:61:6b:d7:aa:02:05:79:bc:91:54:4b:09:24:5b:
d9:c2:04:18:37:9f:66:a2:ee:6f:3e:9c:13:ba:20:66:7a:5c:
21:ef:02:8e:63:4f:cc:d7:35:04:33:90:10:3b:8b:a0:a8:66:
d2:44:fe:d0:a6:e8:c4:43:1d:df:7a:81:fc:a4:c7:39:c1:77:
19:7a:7a:8b:b6:b4:7b:13:40:03:ad:c0:98:ab:b8:f1:3b:d1:
78:4f:cc:cc:10:f9:bc:08:98:f1:5d:48:c1:74:24:47:95:13:
54:c7:8f:8c:64:96:4b:75:be:72:46:82:d2:b7:3d:24:d7:f0:
2a:f0:99:85:21:ea:67:7c:29:55:4d:10:ac:14:c9:47:31:00:
a5:cb:82:47:77:be:65:a7:0d:ce:ec:ee:71:98:6b:56:e9:bd:
d1:2a:83:54:2e:e2:4a:2c:a2:2c:3d:a3:96:ad:8c:db:f4:da:
a6:68:b7:7d:a3:40:c3:99:1e:b4:47:61:68:de:4e:b8:b8:32:
4f:e5:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:05 2025 by rpki-client