Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a2d8703-3273-3f73-85a7-d174fa8c0e94.roa
File: 0a2d8703-3273-3f73-85a7-d174fa8c0e94.roa (raw, json)
Hash identifier: ujttbIEiIie1jtPPufzuvd5g9ZUJp2uQ9PytTa/0sNA=
Subject key identifier: 04:32:9B:CD:F1:D9:E5:DF:6F:69:9D:37:1C:82:C8:CB:6D:C1:BE:61
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843D7A388957FE1B430321C1B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a2d8703-3273-3f73-85a7-d174fa8c0e94.roa
Signing time: Fri 10 Nov 2023 14:00:20 +0000
ROA not before: Fri 10 Nov 2023 14:00:20 +0000
ROA not after: Thu 08 Feb 2024 14:00:20 +0000
asID: 834
IP address blocks: 166.0.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d7:a3:88:95:7f:e1:b4:30:32:1c:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 10 14:00:20 2023 GMT
Not After : Feb 8 14:00:20 2024 GMT
Subject: CN=f12b41ce-8f30-49f4-8df9-60e45b356062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:8c:bc:b8:84:7a:79:24:af:db:af:e4:68:
b8:3b:ff:94:cf:cf:ef:41:2e:d5:7d:04:7e:9b:a3:
de:cd:64:e8:6e:60:7f:80:97:f7:c7:2a:a6:fc:09:
39:20:87:34:f0:a0:e2:24:41:38:09:12:20:4e:79:
30:94:f0:eb:85:6c:e5:2e:71:81:93:c1:3c:c1:57:
36:d3:92:7e:27:ca:d5:69:1f:8d:ae:d4:53:fc:1b:
c7:0a:b6:7d:e0:e2:7b:bf:6b:74:02:42:c9:29:cc:
b2:f1:63:26:40:63:2a:2e:a7:b9:73:0e:be:99:e5:
2e:af:60:4f:d5:48:f8:6d:09:10:96:4c:0c:af:75:
8b:7e:ad:b1:6a:69:a6:41:fa:f9:ba:4e:a1:49:d5:
be:86:8d:09:a4:91:51:95:50:28:3d:17:51:cc:ad:
47:fe:07:de:9c:62:46:53:75:ad:0f:50:1a:a7:20:
ad:5f:08:51:da:aa:d9:c5:1a:1d:a0:9e:af:c0:51:
3c:2b:69:2e:f4:6e:d6:0e:05:98:be:47:a2:78:28:
8d:25:14:42:b6:f8:25:42:34:c2:e7:a6:eb:d0:8d:
cc:eb:ca:92:dc:95:21:75:25:67:2f:49:f9:35:a6:
4a:e2:17:b6:04:25:eb:58:b5:60:a0:cb:7b:97:6f:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:32:9B:CD:F1:D9:E5:DF:6F:69:9D:37:1C:82:C8:CB:6D:C1:BE:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a2d8703-3273-3f73-85a7-d174fa8c0e94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:a9:fd:7b:53:ac:89:52:48:90:0c:c8:7a:bc:9d:7e:5f:80:
14:5e:86:c3:97:96:21:e5:e3:25:12:93:26:57:76:45:60:ed:
8c:82:b9:12:50:8c:cd:80:ea:86:fc:89:8d:87:7c:79:cc:0a:
0f:e8:49:3e:66:8c:10:21:9d:81:48:46:e8:23:7a:21:4e:7f:
86:52:e3:f9:c6:91:c0:6d:55:1d:f9:0b:42:28:fc:9f:ea:ea:
16:d7:75:0c:e8:a9:8e:d0:d4:d1:ba:c3:83:6c:69:0e:09:cd:
fb:e2:c2:6e:b8:81:5c:d6:a2:98:f5:f3:3c:c2:ff:e8:23:ca:
8f:2b:34:13:fa:14:37:3a:ac:fb:4d:ff:7d:9b:83:37:27:8c:
ab:35:b8:77:c2:23:32:34:ab:42:fc:ce:5f:ce:89:53:6e:6a:
ef:b8:a8:90:b9:7b:a8:66:61:20:e5:08:f4:16:e4:14:29:67:
7a:ce:b4:da:f6:96:ee:74:7c:61:d5:1e:c5:75:8b:f7:48:52:
e2:a0:e6:70:01:21:58:b1:fd:7c:40:5e:84:50:20:d3:97:16:
41:82:62:70:f3:1f:39:92:fa:60:1e:3f:33:7a:c0:ae:96:b2:
a8:e5:09:12:2c:c1:45:53:b5:eb:27:b3:b8:56:0a:2a:e8:93:
fb:b2:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:18:03 2025 by rpki-client