Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3813a4f-74d4-3e3c-99a2-f01d91866d8a.roa
File: c3813a4f-74d4-3e3c-99a2-f01d91866d8a.roa (raw, json)
Hash identifier: EBnHzMJkRUIPh1Wy+KjYKtIdVVOnhVAUM+uZWFTHIyM=
Subject key identifier: 16:B0:AE:61:7C:E9:20:FE:A3:EF:C7:90:B5:F3:05:5A:51:63:76:F3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858436C0A67A26E2578CF91718148
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3813a4f-74d4-3e3c-99a2-f01d91866d8a.roa
Signing time: Tue 03 Oct 2023 01:00:23 +0000
ROA not before: Tue 03 Oct 2023 01:00:23 +0000
ROA not after: Mon 01 Jan 2024 02:00:23 +0000
asID: 61317
IP address blocks: 166.0.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:6c:0a:67:a2:6e:25:78:cf:91:71:81:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 3 01:00:23 2023 GMT
Not After : Jan 1 02:00:23 2024 GMT
Subject: CN=b8b26f21-4f73-4653-bc96-1ad9063c60b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:4f:60:45:06:30:79:d8:72:0b:34:57:ad:
cc:f0:5c:bd:c2:fb:99:b4:27:80:1d:e6:c5:81:77:
4c:89:39:7b:b3:e0:13:6d:e4:18:3a:58:68:ec:91:
09:fa:8a:90:a9:8d:34:f5:16:01:8d:dd:fd:2a:d5:
f4:f7:08:01:b8:1d:8e:6e:90:5d:1a:96:72:f7:f1:
e2:ca:06:9a:af:7f:00:96:45:b1:11:0b:8e:a5:14:
b0:ac:90:ec:9a:cc:9c:a0:8f:e3:5b:eb:93:f2:e9:
48:c9:65:ed:d8:dd:a4:bc:c2:1d:48:a2:f9:81:57:
a9:77:c8:96:d9:14:e3:e6:f4:fc:72:e8:ea:d1:b2:
08:01:a9:9b:ca:4b:3f:62:ea:e2:1b:0e:33:63:00:
85:29:cb:a3:79:06:ee:d8:c8:64:be:ec:47:e8:57:
ab:73:02:ab:7f:c3:85:ba:c9:a3:df:fe:11:f5:e0:
2c:f9:f0:99:be:15:48:97:ae:d1:36:b8:b2:b1:35:
fc:95:47:53:be:0a:17:ac:ba:78:f8:4b:be:1d:59:
ba:11:0f:4b:ab:0d:8d:44:6f:09:d5:31:15:a6:67:
c4:91:6d:3b:ab:62:c0:00:ea:90:f1:fc:05:6c:4b:
3e:25:c4:88:b2:eb:fd:15:72:fb:60:3e:dc:2e:4e:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:AE:61:7C:E9:20:FE:A3:EF:C7:90:B5:F3:05:5A:51:63:76:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3813a4f-74d4-3e3c-99a2-f01d91866d8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:c5:1c:ac:e9:1c:40:1f:24:5e:dd:aa:23:ce:d1:d7:21:2d:
55:17:8f:6f:04:17:a3:e9:94:3a:da:27:f7:95:fa:62:e3:46:
d6:5d:d7:4c:26:61:7f:21:49:98:af:e0:a8:b6:3d:04:e1:1b:
73:6a:71:78:fe:74:69:e4:e6:21:f7:34:72:b5:fc:e5:9c:3b:
0f:ec:28:e9:17:12:f3:1d:8c:b1:db:6e:94:20:06:c0:65:70:
32:44:00:5f:ad:59:2f:7a:a9:16:00:b3:10:15:ed:f1:13:82:
34:95:9b:33:40:3e:58:f3:e5:f2:e4:9a:bf:62:89:63:8b:8c:
57:a8:6f:0b:1e:96:a2:5c:13:70:18:cf:c8:07:52:5c:54:dc:
0e:aa:f8:7c:9d:4e:ec:78:60:f4:29:db:5d:ca:85:7e:7f:3a:
7f:79:8b:1a:0b:8c:43:cd:4f:15:7a:87:3a:cd:7f:7e:78:df:
a5:d1:60:ab:3e:ba:0e:12:05:bb:72:ab:3b:a9:4a:04:20:61:
88:39:ff:97:6f:49:17:de:0a:80:45:b3:d9:6f:d3:ba:40:a5:
13:9e:3c:7e:3a:92:5e:c0:2d:f2:fe:dc:4e:a6:09:b6:21:f9:
4a:30:a9:d9:11:cb:da:12:14:d1:74:3e:36:ae:bb:eb:be:c6:
18:55:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:34:02 2025 by rpki-client