Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3c40cc4-8d0e-3d10-86ce-1fa215fa163b.roa
File: c3c40cc4-8d0e-3d10-86ce-1fa215fa163b.roa (raw, json)
Hash identifier: n3RZI8EKEbpi5LdtFkNYC4mKwzVFA0j5zlGsb89K76E=
Subject key identifier: 14:06:E1:CD:54:85:3C:9B:87:5F:7C:C0:72:BE:18:86:84:96:E9:E2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A171953E375B398FD83900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3c40cc4-8d0e-3d10-86ce-1fa215fa163b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 66.102.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:71:95:3e:37:5b:39:8f:d8:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4efd72d5-cc24-4665-a20f-cf95de3561eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:f5:df:bd:4d:ed:a0:1d:b3:94:87:f0:06:
e7:a2:46:bf:a9:dd:fc:b5:ad:56:b3:65:40:16:93:
cb:65:2e:18:53:83:8e:e2:6d:0b:4f:f2:fe:2a:d0:
55:e7:e1:06:97:fd:4a:20:7f:cd:88:7b:1d:8f:a3:
b4:5e:43:45:86:1d:82:f6:ad:c1:37:0d:ec:95:28:
98:0b:5e:88:1d:44:32:a7:f9:b7:61:18:0a:45:33:
26:8f:21:33:35:fb:60:6b:83:a9:d8:51:d8:32:f2:
5e:6b:31:9c:29:a5:9e:e3:ba:9b:92:6a:1d:6b:23:
99:73:40:26:b1:c8:8a:e2:ef:86:3e:b1:d9:0a:39:
cd:ca:36:fc:71:d4:3b:04:ca:ac:4c:af:54:46:c6:
6a:1a:57:6c:37:7d:4b:21:64:3d:75:e2:f2:ec:1d:
92:85:62:26:7a:0b:ff:ba:26:db:cc:c9:e5:5c:36:
1d:ac:73:75:ab:87:f8:0a:8e:e3:3f:64:65:fa:a7:
78:5b:ab:cb:4e:95:04:2f:17:85:eb:b7:65:d3:44:
45:c5:0f:33:77:29:70:82:cc:2b:56:45:50:04:85:
b2:b7:6f:ea:86:1a:b7:01:0a:0c:6b:61:87:a6:51:
51:26:a5:1e:dd:5d:6b:02:e7:96:31:4f:05:76:9d:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:E1:CD:54:85:3C:9B:87:5F:7C:C0:72:BE:18:86:84:96:E9:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3c40cc4-8d0e-3d10-86ce-1fa215fa163b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c6:f6:02:c1:6d:42:30:e2:c7:6e:b7:17:6c:75:62:55:85:
8e:56:e2:d5:2f:10:5a:69:04:d4:21:92:d2:4a:ef:89:5f:e4:
3d:e2:3b:33:94:17:b9:2d:0d:dd:d8:03:9c:96:2e:b2:40:c9:
62:b5:0e:0f:41:6f:3c:2f:09:e6:80:26:5f:27:06:fe:97:a2:
4e:36:d1:54:43:79:49:e4:c4:d1:e9:b6:fe:aa:fe:28:60:23:
0f:d0:cf:72:5e:fc:c3:e7:84:2b:9a:f6:b6:67:77:2a:5c:6a:
d5:a9:c3:a6:e6:83:9f:7d:9b:33:0a:b8:14:01:97:88:76:69:
21:a1:48:79:eb:e6:08:d9:12:1c:5f:2d:3c:9a:f0:a3:d1:c3:
36:64:74:6c:28:bc:f7:4a:56:16:9c:71:cb:78:33:11:a9:a1:
cb:40:15:3b:b6:1c:2e:e4:65:30:95:9d:3c:79:a6:b1:c3:f5:
a0:fe:bf:0b:e0:dc:6e:99:01:d1:28:1e:05:39:20:57:a3:43:
bd:47:0a:f0:fc:e2:d4:ba:d5:99:1a:3d:ea:c9:23:07:aa:72:
0c:d7:b7:f7:3f:da:b8:fd:d1:45:79:bb:70:8b:fd:53:56:a3:
e2:3c:93:58:a5:63:55:1f:4e:56:60:1c:7c:07:df:9c:32:c6:
62:67:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:50:53 2025 by rpki-client