Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/054188d6-77d6-39bc-924d-30c80458803b.roa
File: 054188d6-77d6-39bc-924d-30c80458803b.roa (raw, json)
Hash identifier: so7jGYrkskfXt7tlj3CSyRViIeT6D5UKPrCtC0+oTKo=
Subject key identifier: 83:58:87:33:2A:64:B1:CE:9D:11:E0:A5:62:2E:8A:39:FF:21:F6:5F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584855D5A0E3F338F8D8F0324E40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/054188d6-77d6-39bc-924d-30c80458803b.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 395681
IP address blocks: 166.0.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:a0:e3:f3:38:f8:d8:f0:32:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=f0be0c9b-69d1-4bbe-abc2-db4ada2bdf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:81:11:37:9f:66:69:e2:00:16:e0:b7:4f:
4a:07:a1:c6:bc:6a:44:e9:0e:83:d3:1d:08:92:52:
96:e7:97:3c:33:ca:e4:75:b0:c8:1f:5d:92:8b:92:
dc:7d:6a:9b:7a:9f:79:71:c4:4c:20:38:21:24:d2:
c0:5c:64:be:c0:17:4f:ec:d9:fa:ad:74:81:5c:8c:
8e:3e:6c:69:d6:86:24:84:2d:1f:14:36:b3:78:9b:
26:27:e8:98:b2:a7:9b:63:d6:60:88:3d:e3:6b:b6:
ff:1d:81:16:4c:95:18:2a:3d:0b:fd:24:68:b6:91:
03:9d:ff:05:04:56:b8:32:43:d4:18:1b:b4:db:91:
50:a3:17:44:b3:85:77:96:d6:ea:b0:92:24:85:79:
fc:a1:ff:20:a8:62:e1:4a:cd:6e:51:20:c1:ce:93:
43:36:ae:e8:ad:02:cf:a0:4a:b3:b3:b8:58:1f:b7:
ed:37:ab:72:e5:25:85:16:71:a0:4a:ac:9c:b7:f4:
3c:c5:73:04:eb:ba:da:88:d6:31:5f:d4:25:56:c0:
e0:f1:d6:ba:a1:ac:d8:6d:46:56:32:7a:d9:5f:2b:
9a:93:e1:38:74:a1:4c:a4:00:c1:7c:58:51:25:aa:
16:1e:5b:2d:4b:5b:60:70:c3:30:b3:89:93:65:b0:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:58:87:33:2A:64:B1:CE:9D:11:E0:A5:62:2E:8A:39:FF:21:F6:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/054188d6-77d6-39bc-924d-30c80458803b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:73:d4:8f:7c:f1:2d:fc:30:8b:bc:95:fc:7a:9e:da:36:d5:
be:1b:38:da:8c:b9:23:0c:3e:45:0f:d4:88:98:76:65:c0:05:
07:18:df:0a:4b:9e:c6:a2:73:3f:16:7c:7c:59:b8:17:d5:55:
a3:dc:58:93:c4:9a:65:b4:7e:2c:a5:04:48:3a:a5:95:29:a6:
e8:32:b8:14:04:d3:d2:ba:b2:90:77:dc:6f:ff:67:50:2a:c1:
6f:b4:1c:09:b3:47:8b:20:b1:6d:b1:0c:41:53:a4:1e:35:7a:
d1:fe:6f:db:ef:8a:ea:98:62:6e:b1:87:74:56:47:a9:7c:df:
05:82:56:f4:0c:d3:51:ba:1a:7b:86:01:ad:9f:0a:6f:78:8f:
0c:7f:83:f8:63:66:90:d3:3d:97:34:b5:81:fc:0c:b1:70:23:
a6:ba:9f:a1:6f:2b:74:bb:37:20:9c:7a:19:ef:e5:6f:6b:9f:
3c:4d:cd:9e:c4:fc:dd:47:9c:04:8a:28:51:c8:9c:6d:6e:f6:
07:11:6d:57:8d:ba:37:c1:1b:64:b9:e1:d7:e9:cd:bf:c1:bd:
bf:fb:ca:1b:8f:21:3c:c5:12:b9:9e:a8:db:31:e7:be:12:0b:
7e:c5:8e:9c:7a:5b:ed:ff:1c:2c:5e:96:39:f9:b1:34:5d:3c:
5c:d7:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:39 2025 by rpki-client