Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09bc5c67-1819-3f82-a227-4636ca30b2fa.roa
File: 09bc5c67-1819-3f82-a227-4636ca30b2fa.roa (raw, json)
Hash identifier: DlTW5mWs5+0NpSjK1N+vuSBogLyD5/4eS0lDyEx2BMQ=
Subject key identifier: 19:6A:5A:48:9C:0A:A8:25:F8:37:1D:BD:45:2F:91:08:04:3C:DC:74
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583BEEC817699230BF3CF756C340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09bc5c67-1819-3f82-a227-4636ca30b2fa.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Sat 17 Feb 2024 05:00:00 +0000
asID: 19437
IP address blocks: 166.1.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:ee:c8:17:69:92:30:bf:3c:f7:56:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Feb 17 05:00:00 2024 GMT
Subject: CN=be458913-104b-4ae6-960d-4a359ba2a9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:74:91:2b:53:2b:0e:87:ea:aa:5f:75:fd:
4d:e0:3c:73:03:8d:c8:c0:26:bd:2d:14:90:38:f3:
c0:a3:ff:1d:ce:f3:8a:38:3e:12:51:d8:f6:8c:15:
76:a9:c2:d3:6a:95:bd:d4:8e:4c:f0:ed:9e:26:b0:
13:3a:20:6a:2f:f8:b5:4a:71:c3:e3:ab:07:90:ec:
26:53:2c:8a:01:13:f4:29:2c:25:95:4e:61:6d:be:
9a:01:bb:12:11:0c:3b:15:4c:6e:16:bf:d8:c4:01:
5c:a9:f8:71:57:13:68:36:62:bb:93:3c:03:14:1d:
16:ba:ee:a0:c7:b4:ec:4f:8a:0a:df:60:ba:d3:a0:
14:5a:03:10:a9:80:13:42:24:ce:a3:dc:72:02:aa:
6f:13:e3:91:7c:95:22:bb:62:45:ca:30:be:d5:4a:
7f:2f:4c:cc:63:9a:2a:44:19:52:21:0b:eb:66:4d:
6f:15:08:05:6a:03:4c:61:11:46:ba:95:ab:0a:b6:
91:48:f1:ff:9b:fa:68:91:e1:48:5b:9f:77:01:27:
6e:8c:6c:9f:98:f1:72:8e:10:c0:4d:f0:d1:b6:08:
ad:15:8f:ba:1c:d8:d2:0c:30:46:31:1e:0c:f2:6e:
2c:ce:f7:a6:0f:d4:1e:88:4f:83:72:15:ac:ca:ae:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:5A:48:9C:0A:A8:25:F8:37:1D:BD:45:2F:91:08:04:3C:DC:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09bc5c67-1819-3f82-a227-4636ca30b2fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:47:02:8d:c0:21:ca:4b:1a:e9:9a:7a:a3:0f:6e:93:27:9c:
ea:df:82:03:10:67:0f:b6:ba:77:95:01:90:f9:61:cf:aa:29:
82:12:ec:2b:92:81:81:eb:05:a5:76:84:fd:70:7b:26:57:f1:
cf:a9:35:78:85:65:0e:14:a2:ca:3c:75:7c:50:4d:4b:19:f5:
9d:66:d4:7b:c1:c0:56:29:a2:ad:90:63:17:1f:10:e2:2d:74:
8b:b5:ff:13:7f:a4:95:7c:f8:e3:e5:85:ee:4c:74:93:32:e9:
d3:8e:8b:f9:4b:c4:65:21:d0:68:5c:2d:82:eb:52:d2:3c:53:
20:76:dc:13:0b:09:c2:01:31:0c:a4:ef:2b:e9:9f:15:ec:46:
be:67:17:5d:db:82:b7:a0:3c:f4:77:01:06:9d:0f:7a:29:c3:
08:cb:ea:bb:ba:b8:a4:5b:09:17:3c:2e:54:67:5f:02:a8:24:
c2:22:6a:55:74:e1:44:6b:2f:67:53:a7:99:a9:7e:c0:e7:a6:
64:9a:da:af:79:1a:73:6b:30:32:ba:4a:bd:1a:a4:af:70:1e:
6a:0c:5d:43:ff:13:71:5f:13:c7:b3:33:2d:69:e3:10:72:5b:
4a:7c:60:5a:9f:ae:d3:d6:29:fd:6c:91:a7:b1:c7:24:f6:28:
7b:c7:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 03:01:11 2025 by rpki-client