Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e9551f4-3dc8-3b79-af42-d2f023b51142.roa
File: 0e9551f4-3dc8-3b79-af42-d2f023b51142.roa (raw, json)
Hash identifier: ImFxjIvaw52lx8PxCUSeDO8KTdTTjwM/yuB9Rus1Y0U=
Subject key identifier: 38:F7:C5:E2:D0:4D:2F:79:8C:D9:CB:65:A1:61:FD:A0:DD:DB:1A:FA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858441243DD7F20B0FA9331964F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e9551f4-3dc8-3b79-af42-d2f023b51142.roa
Signing time: Fri 01 Dec 2023 14:00:21 +0000
ROA not before: Fri 01 Dec 2023 14:00:21 +0000
ROA not after: Thu 29 Feb 2024 14:00:21 +0000
asID: 834
IP address blocks: 166.0.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:12:43:dd:7f:20:b0:fa:93:31:96:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 1 14:00:21 2023 GMT
Not After : Feb 29 14:00:21 2024 GMT
Subject: CN=ec4af143-e1de-472b-baa7-6ea3a1746e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:d7:fc:db:72:df:b5:2b:f4:0f:82:de:32:
20:d6:5b:6c:4e:12:1c:0b:7f:04:19:c7:11:9d:ba:
99:eb:23:79:05:0b:40:d4:33:be:cc:23:dd:4f:be:
1c:ca:95:02:0e:65:23:2d:72:34:58:36:11:3b:2b:
93:ca:27:f3:2c:b7:b5:a9:1b:f6:d3:ba:73:f3:b2:
3d:52:cb:6b:fe:d3:f9:96:8d:54:23:3b:f8:ef:2c:
5e:21:4e:09:f8:91:4c:16:7e:75:83:ea:a3:da:56:
7f:44:a1:0e:5d:a1:3a:0c:f9:fb:fe:6b:96:dd:b5:
24:40:ed:49:54:ec:9e:77:94:45:34:41:cb:92:1f:
a1:7e:0b:23:e9:d7:23:ed:34:cd:14:b9:ae:39:01:
24:d0:ed:b3:47:ff:16:b1:21:2f:ae:39:41:ac:a4:
d2:c4:5b:6a:3f:e5:1d:ad:2f:67:a0:6d:b5:52:e5:
7a:d6:43:e5:a5:88:ba:57:27:a8:04:bf:39:24:46:
4f:d4:7a:79:c0:62:b4:c5:51:ff:25:06:27:17:b8:
54:3d:6f:ff:21:62:7c:61:bd:40:66:62:1a:db:a0:
34:63:40:d9:55:14:de:b5:52:cc:56:02:1d:cc:fd:
49:27:1b:5d:73:8d:c4:a1:f9:ba:82:15:c6:a9:0e:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F7:C5:E2:D0:4D:2F:79:8C:D9:CB:65:A1:61:FD:A0:DD:DB:1A:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e9551f4-3dc8-3b79-af42-d2f023b51142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b9:f3:8e:80:62:55:09:58:ac:6b:56:a0:2d:7e:8d:e4:23:
35:d5:e2:b6:3a:1e:6c:80:4b:89:82:75:21:51:04:13:1a:a3:
f2:d3:ee:aa:44:4f:62:85:88:d1:7f:1f:59:b7:09:85:11:9a:
df:17:15:d9:da:2a:1f:b0:a4:1c:c1:ef:af:90:d3:16:74:89:
cc:a0:43:12:70:83:31:3b:e2:b1:4f:3e:8a:37:2f:1f:17:89:
18:90:ea:76:71:0d:74:65:4b:35:d5:90:19:8a:1c:7c:cc:10:
69:2f:50:13:42:99:c7:49:57:b7:cc:06:22:22:2a:e6:af:a6:
22:df:69:0d:c4:ed:97:19:22:8c:d6:16:1a:ce:94:eb:d2:74:
c7:2e:f4:ab:15:dc:4f:d1:18:12:91:aa:2e:ec:30:7c:c6:ad:
8b:51:36:e6:77:0a:b3:26:8c:7f:83:2c:f6:6d:a3:26:8c:0b:
00:cb:c7:66:89:10:a4:3c:1f:4c:38:8d:56:e1:07:89:13:c3:
7c:87:44:ba:3b:79:ae:4c:4d:e0:27:7a:46:c3:fe:36:8e:d6:
89:d8:9f:87:8a:6d:9f:04:c1:93:1b:ab:60:dc:4a:b8:a9:0e:
9d:43:8b:27:65:f5:d4:d2:68:76:bb:08:bb:bd:94:41:f5:80:
5b:91:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 13:13:58 2025 by rpki-client