Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a3b51bb-aab1-3b62-8d6c-f0659c0ba905.roa
File: 0a3b51bb-aab1-3b62-8d6c-f0659c0ba905.roa (raw, json)
Hash identifier: aWRdaLG9KGHJ5YtK688Dd7SkWTO7IioNg2OeHR1ZpT4=
Subject key identifier: 1C:19:FC:21:27:5A:5B:E8:0A:45:30:05:03:A8:1B:11:43:C8:76:CA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843871DBACDB74AE538DFFBCD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a3b51bb-aab1-3b62-8d6c-f0659c0ba905.roa
Signing time: Thu 12 Oct 2023 17:46:14 +0000
ROA not before: Thu 12 Oct 2023 17:46:14 +0000
ROA not after: Wed 10 Jan 2024 18:46:14 +0000
asID: 834
IP address blocks: 166.0.110.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:87:1d:ba:cd:b7:4a:e5:38:df:fb:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 12 17:46:14 2023 GMT
Not After : Jan 10 18:46:14 2024 GMT
Subject: CN=14443b92-817f-4f72-a079-41196f52bb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:ff:c1:bb:05:1c:a6:83:c6:3c:f4:ce:83:
14:50:78:05:ff:d2:d7:25:e3:25:a3:94:70:6e:db:
e8:24:65:1c:5b:db:ff:d5:7f:4b:1c:f0:d8:3e:28:
c3:44:21:80:93:51:ed:07:1d:5b:75:2b:9a:21:49:
80:6d:3f:30:e8:04:0c:2e:1c:d9:e1:e7:a1:d2:dd:
66:6f:ec:08:93:37:24:9d:db:3a:3e:2d:82:a7:65:
4c:51:85:11:a0:6f:e1:66:d9:66:b0:62:3a:98:2b:
f9:45:e9:91:76:d7:85:1a:24:c2:40:59:6a:7a:7e:
88:1a:6c:36:d2:29:8d:aa:de:b4:f6:35:cb:17:47:
d3:ef:26:97:e5:81:a2:de:2d:6d:52:1d:83:44:3b:
6f:05:68:00:e8:ed:8c:24:16:56:0a:34:07:86:03:
81:cf:e4:5f:a1:52:aa:05:f2:35:02:47:40:17:66:
43:d1:7c:c1:92:5c:68:81:d4:75:5f:0f:72:65:b7:
7c:0e:36:85:44:a4:c9:1e:cd:ce:b1:b1:14:9b:fb:
2d:3d:c6:30:57:8d:1f:7c:bb:22:c2:10:39:1c:ab:
5f:55:f1:19:09:46:fc:b8:38:01:a5:c3:25:04:94:
f8:9c:b1:ac:8d:40:f8:38:bd:d6:7d:3a:26:76:d1:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:19:FC:21:27:5A:5B:E8:0A:45:30:05:03:A8:1B:11:43:C8:76:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a3b51bb-aab1-3b62-8d6c-f0659c0ba905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:ed:03:c9:25:b3:71:2d:f2:a3:53:b5:06:32:08:94:48:66:
f4:90:46:50:92:c2:78:3d:49:13:46:e3:11:47:d5:61:ca:55:
84:d8:69:67:27:12:f9:41:fb:37:88:c7:84:63:3f:bb:3c:72:
75:00:ee:1a:f7:e3:ac:7d:f7:ba:df:6e:db:25:1e:3b:6b:34:
50:68:d7:ec:50:ed:79:91:d5:46:92:2a:a1:d1:10:91:91:1e:
10:ef:65:f7:87:14:55:ee:a6:41:62:94:35:44:f0:dd:13:75:
8f:9e:ff:94:7a:b9:fd:40:79:65:dc:c0:29:29:11:78:d3:4e:
0d:f0:09:16:ad:04:9f:00:70:1e:06:a7:95:49:53:a8:e6:fc:
fc:b3:80:ea:4a:78:9b:88:36:7b:fb:c2:18:5b:bd:ba:63:9c:
3f:cc:d3:f7:11:cc:db:d6:73:fe:f6:77:9e:50:8c:b5:7d:27:
b5:3f:3c:79:4a:5d:3d:bf:70:67:68:ef:53:37:0f:72:1f:3a:
42:0d:87:0c:12:37:4f:e7:0c:40:7e:2c:8e:b8:b5:a2:94:43:
c9:20:e7:6f:44:2c:5b:9f:11:51:30:5a:30:6a:1f:c8:fc:39:
43:0a:49:d0:7d:52:9c:b6:69:04:7f:53:e4:5f:cd:5a:bc:5d:
fd:ef:c6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:38:43 2025 by rpki-client