Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/3b2b0d0f-4f45-3669-9861-1e7bd0a5397b.roa
File: 3b2b0d0f-4f45-3669-9861-1e7bd0a5397b.roa (raw, json)
Hash identifier: Stbh43+8yzdQuo4MkzPE7m6ij9ZOIkcC4Jkn15xg7+4=
Subject key identifier: A8:52:BD:CF:07:6A:A2:79:BF:FD:23:49:3D:2B:DB:74:D2:8A:16:A2
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F4328576D51CC73C042CFC17372247979
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/3b2b0d0f-4f45-3669-9861-1e7bd0a5397b.roa
Signing time: Tue 21 Jul 2020 16:10:59 +0000
ROA not before: Tue 21 Jul 2020 04:00:00 +0000
ROA not after: Wed 12 Jul 2023 04:00:00 +0000
asID: 30682
IP address blocks: 168.146.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:72:24:79:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Jul 21 04:00:00 2020 GMT
Not After : Jul 12 04:00:00 2023 GMT
Subject: CN=c6cf563e-b0ee-4967-bb06-19c02055e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:59:40:35:02:a1:08:35:bb:87:86:34:d2:
36:f8:76:8a:55:c4:43:fc:90:80:ab:1c:1c:b6:82:
ed:5f:df:85:cf:f5:17:7d:b4:5d:86:ff:d4:3e:21:
12:c3:a4:d4:dd:d0:2e:2f:76:ce:6d:a0:59:12:f0:
97:56:95:47:b9:0e:6d:b2:eb:3d:c9:f3:61:34:e3:
e2:d0:48:68:24:20:1d:b8:71:3d:33:d3:df:54:77:
f0:6f:2b:ea:63:27:13:25:b5:e2:2a:94:3f:5b:73:
9f:ea:aa:29:1a:9b:61:cd:35:b5:48:5c:44:b3:a2:
bd:b6:8b:7d:5b:4c:85:fd:de:70:03:98:e6:29:e0:
c1:a0:98:b7:0c:a8:de:91:3e:8f:5e:7e:4d:20:f7:
4f:40:c5:7e:40:57:8f:58:cf:e3:df:28:af:20:4b:
52:ef:ab:2e:4e:e7:8c:47:2d:38:ce:3c:e5:56:25:
d5:59:ea:c4:70:ba:d5:e8:f2:8b:af:92:1c:b3:bd:
38:ac:97:81:98:d7:c8:4c:fa:c5:cc:59:14:47:4b:
38:8a:47:30:84:8d:e6:48:1b:4d:98:34:ac:90:11:
ee:8e:db:fc:c7:89:fd:df:58:eb:6e:b6:f4:d2:66:
c3:b7:60:9b:ec:b5:93:55:3e:6a:e6:a2:a3:17:04:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:52:BD:CF:07:6A:A2:79:BF:FD:23:49:3D:2B:DB:74:D2:8A:16:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/3b2b0d0f-4f45-3669-9861-1e7bd0a5397b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
168.146.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:b4:55:70:e0:4b:3b:f1:61:64:1d:06:09:6f:cc:2a:e3:ab:
cd:f2:e0:9e:97:c0:52:07:d9:3d:b5:f8:f5:e4:77:f0:03:8b:
2c:99:a6:7d:42:3a:6f:4d:dc:fd:7e:d2:d0:9d:31:7d:8b:88:
fb:06:92:bd:33:af:65:79:af:46:a8:28:e7:ef:f7:46:c2:48:
bc:5a:72:1c:61:c4:98:28:5d:ab:e7:92:6e:cc:9c:c1:71:a1:
0a:de:8a:dd:25:ea:d7:43:2f:dc:dd:a6:d0:5b:49:b2:aa:6e:
77:ad:15:41:bc:12:6e:13:61:50:af:8e:63:4a:61:a1:d9:ef:
e7:7f:50:0c:0c:af:fc:11:0f:9f:c5:13:6c:9a:be:df:46:52:
e9:81:68:c1:36:0f:1f:9a:f2:70:f7:81:e4:2f:89:fb:e5:a4:
2d:c8:fa:a2:78:ff:3d:f1:37:49:17:2c:6e:64:35:26:be:50:
c0:d7:22:47:aa:57:ca:90:81:00:70:1c:57:84:ca:a5:b6:98:
fe:a8:d9:e4:9a:fb:77:cf:03:9d:0d:7a:3a:2c:fa:3b:11:df:
88:e4:33:db:dd:96:87:12:02:8e:c1:6b:29:41:26:93:fa:03:
e7:db:b8:a9:a5:c3:85:de:20:a8:b2:49:96:f2:10:3f:27:b7:
45:36:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:58 2025 by rpki-client