Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1012d9f6-13fa-3b60-a583-3b999b7dddfe.roa
File: 1012d9f6-13fa-3b60-a583-3b999b7dddfe.roa (raw, json)
Hash identifier: vGFBglsBVYaJ3ZFxfQztnkwccKyHzRZLRnDZC/XgMSs=
Subject key identifier: 2D:E5:14:F4:D6:9E:62:D0:1B:08:29:37:14:10:7C:FB:00:A7:10:7E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842C3878A804840AA382DA00E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1012d9f6-13fa-3b60-a583-3b999b7dddfe.roa
Signing time: Thu 03 Aug 2023 16:20:59 +0000
ROA not before: Thu 03 Aug 2023 16:20:59 +0000
ROA not after: Wed 01 Nov 2023 16:20:59 +0000
asID: 11798
IP address blocks: 166.1.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c3:87:8a:80:48:40:aa:38:2d:a0:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 3 16:20:59 2023 GMT
Not After : Nov 1 16:20:59 2023 GMT
Subject: CN=06bdf1cd-30f7-442f-a59a-621cea0991b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:f1:7e:ed:93:73:93:9b:c5:d2:27:a5:f5:
d0:e3:5e:cd:b9:01:1f:55:76:11:41:a5:ac:cc:7e:
55:2c:6d:72:d0:1e:73:84:9e:29:30:80:fd:ce:ad:
96:51:e9:46:65:f4:da:ff:de:0e:88:ff:b6:66:d2:
8a:86:94:da:9c:10:e1:cb:75:87:e4:72:39:29:dd:
d8:91:d2:37:f8:6d:66:d5:d0:c1:b0:dc:d3:44:d0:
5a:c9:5d:b8:e1:43:97:27:7c:30:71:74:62:18:60:
c4:b8:57:5d:33:b6:1a:0f:a4:d5:27:85:95:c1:76:
bc:df:09:18:c8:ac:fc:8c:da:ea:8a:3e:79:de:04:
17:40:82:c7:8f:09:56:6f:b1:49:27:d1:a0:7a:85:
f6:48:0a:52:04:ee:48:de:b2:8d:14:de:1f:d1:b4:
b2:17:de:c6:1a:72:3d:07:d5:31:88:f5:09:58:25:
cb:3e:97:1a:26:0b:5c:bf:6e:45:d8:02:6b:2e:80:
59:68:f2:94:fd:3d:f3:b3:46:8b:a1:38:32:91:c7:
5d:76:a0:a5:77:59:78:07:17:4c:ab:d1:b1:24:34:
74:fd:28:bc:b4:3c:b1:d6:26:bb:60:79:c9:1d:0c:
a3:03:fb:27:f5:4b:41:55:51:3b:f3:47:a4:66:36:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:14:F4:D6:9E:62:D0:1B:08:29:37:14:10:7C:FB:00:A7:10:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1012d9f6-13fa-3b60-a583-3b999b7dddfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:49:3a:ca:2a:b1:31:2c:39:69:db:55:c0:22:98:65:cd:0b:
aa:1f:9b:0c:86:ab:0f:f2:24:68:a4:b5:bb:01:8d:b0:f2:95:
1f:f7:a5:fa:58:85:f0:0b:20:6a:ea:8d:61:e9:88:89:d9:6f:
ec:1a:bf:6a:21:75:c7:72:d3:91:54:f7:4f:6d:0f:f2:0c:d9:
6f:9e:76:f8:8c:d5:4d:12:5e:ad:72:d7:c5:82:97:6c:5b:56:
e8:29:4a:17:b8:54:c6:da:0a:54:70:71:83:7c:e5:7b:7c:b0:
2c:c4:8d:2c:bf:cd:9c:a7:96:fa:7e:83:d3:14:90:7b:72:32:
cb:5d:59:0e:87:dc:c8:14:c7:8e:dc:5f:cb:4a:d8:15:91:9b:
ee:b9:ca:00:e0:6f:65:3d:7e:05:f9:c3:12:d9:6c:59:df:6b:
fd:10:09:78:b6:aa:3a:76:ea:37:6d:45:b2:e8:b9:f3:57:7d:
ab:8b:5e:0c:f9:69:88:42:bd:52:dc:b2:a7:a2:29:17:b8:79:
5d:93:61:c4:ed:df:36:d7:ef:a4:16:46:3b:5e:a8:43:3f:0f:
ca:e1:8a:7a:26:6f:ec:63:83:0c:92:f3:86:69:83:44:8f:4b:
ba:c1:a6:74:a6:e9:46:99:07:23:d0:27:fd:b6:27:cb:14:b7:
42:cc:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 27 21:12:52 2025 by rpki-client