Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/058975fd-fdfb-3b92-acf0-bf7dfd88fe86.roa
File: 058975fd-fdfb-3b92-acf0-bf7dfd88fe86.roa (raw, json)
Hash identifier: sxWKk+YyYAxeG7oAdGluImeSBoj3SokHK8ripfMv7b0=
Subject key identifier: DE:1E:2F:52:E2:84:B8:73:2A:47:F2:06:DB:8A:F3:6B:7B:66:0C:7C
Certificate issuer: /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial: 010D0C9F4328584B2066D637E7D318C977E25000
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/058975fd-fdfb-3b92-acf0-bf7dfd88fe86.roa
Signing time: Mon 08 Sep 2025 13:00:41 +0000
ROA not before: Mon 08 Sep 2025 13:00:41 +0000
ROA not after: Sun 07 Dec 2025 14:00:41 +0000
asID: 205220
IP address blocks: 66.245.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:20:66:d6:37:e7:d3:18:c9:77:e2:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Validity
Not Before: Sep 8 13:00:41 2025 GMT
Not After : Dec 7 14:00:41 2025 GMT
Subject: CN=bcd7e7cd-1539-450f-a319-e498c44b70ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:17:db:01:43:69:31:8b:82:b2:bd:ef:c9:
d9:e3:77:02:21:3b:e9:e8:ef:60:c1:42:2c:fd:1d:
59:2b:20:2c:56:ed:23:97:c1:50:a6:34:99:b6:05:
72:39:8f:ea:af:80:a0:f9:63:c8:be:a4:99:d9:0f:
46:a4:2d:77:f4:12:6e:35:3c:35:0d:d6:eb:98:83:
2c:6d:07:2b:d8:5e:e8:75:f0:8b:6a:96:b9:18:7e:
57:13:b5:02:27:e7:6d:04:cd:cf:2c:aa:27:78:1b:
59:4b:b4:71:b0:c4:e8:1a:05:29:01:4c:f8:64:62:
7a:7d:f6:60:d3:c7:cd:bb:b1:fa:16:bc:00:95:53:
1b:67:47:94:e5:70:87:64:f7:de:eb:64:93:a9:2f:
36:72:6d:e3:ef:4b:07:92:dd:72:a7:28:da:52:e7:
83:5d:57:9d:35:01:fe:3c:79:64:2d:13:79:68:c8:
53:3b:e1:dc:30:13:bd:a7:bf:33:2a:94:fa:ec:21:
02:27:89:f7:fd:bc:da:ab:98:2a:00:f6:dc:fc:f1:
5b:f4:0e:33:39:28:8f:68:48:e7:bc:f4:c2:41:46:
27:c9:29:8d:82:ac:a0:f1:d3:e4:ed:f0:c2:24:a0:
45:47:ef:b1:f7:2d:66:ec:ff:46:35:1d:41:eb:c8:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:2F:52:E2:84:B8:73:2A:47:F2:06:DB:8A:F3:6B:7B:66:0C:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/058975fd-fdfb-3b92-acf0-bf7dfd88fe86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl
X509v3 Authority Key Identifier:
keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
sbgp-ipAddrBlock: critical
IPv4:
66.245.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:02:d1:cc:40:f8:d8:87:13:bb:a8:9b:2a:db:7b:a4:4d:93:
12:4b:e6:57:47:4d:07:76:e3:e1:59:8b:dd:41:ca:c4:f7:77:
57:b4:e8:40:27:ef:36:f9:d8:fd:f1:c3:ae:31:43:97:df:0e:
b5:ba:09:71:86:9b:4d:9d:62:a2:25:9c:eb:2d:ec:14:b9:0f:
45:52:07:f7:cd:91:36:a0:04:19:e5:2d:b4:db:27:0b:69:03:
84:0b:71:66:c9:e9:93:bb:8d:b5:78:2f:0d:a8:86:e8:7d:8d:
d8:af:3d:fd:7b:e5:d0:60:8e:7c:2c:d3:3e:e7:bb:30:2c:00:
5f:1d:68:0b:18:78:43:ff:31:5f:d4:da:f8:bb:2f:82:65:f2:
42:40:65:49:21:f1:46:1c:e2:af:4f:99:c3:15:9c:4c:91:00:
06:87:77:2e:60:23:0c:31:ca:b4:ba:d1:52:e4:f8:2b:5e:ac:
95:ea:3b:86:5d:ec:d0:47:3e:cb:56:cf:f8:44:f2:d5:e9:24:
a1:32:b5:f2:6c:7d:70:bd:4c:61:73:a8:fa:a6:48:8d:b2:87:
c8:b7:a4:30:2b:f0:93:1e:52:6d:99:cb:f0:89:e4:f7:12:6a:
5d:4b:74:45:f2:be:13:f8:cc:43:dd:8a:b0:09:3a:0e:e2:6b:
eb:78:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 08:50:43 2026 by rpki-client