Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14d8e31d-c1de-3710-ac49-677ba8436e7e.roa
File: 14d8e31d-c1de-3710-ac49-677ba8436e7e.roa (raw, json)
Hash identifier: JK+I6Sbf4lOYvKQS/rM3GmsGz0bQDir0Kcxc6BWu288=
Subject key identifier: 18:4C:2D:EB:A4:E6:69:4F:C9:CD:DB:BF:FE:F7:80:E6:29:7E:4A:40
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858428F7E505E2A5D78C842290580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14d8e31d-c1de-3710-ac49-677ba8436e7e.roa
Signing time: Sun 16 Jul 2023 01:00:17 +0000
ROA not before: Sun 16 Jul 2023 01:00:17 +0000
ROA not after: Sat 14 Oct 2023 01:00:17 +0000
asID: 35913
IP address blocks: 166.1.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:8f:7e:50:5e:2a:5d:78:c8:42:29:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 16 01:00:17 2023 GMT
Not After : Oct 14 01:00:17 2023 GMT
Subject: CN=98e226fb-77c9-45c7-bd08-90a351e4cede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fb:d9:df:04:5f:cf:4d:14:66:6c:34:6c:d6:
da:1b:33:ab:f6:7c:33:74:4f:cd:73:da:e5:34:e4:
06:d5:01:ff:79:ed:84:ae:4f:4e:ca:02:16:ec:fe:
73:25:24:b6:03:8c:c1:5d:79:b5:31:a7:17:10:78:
38:1e:1b:e9:a7:6f:bf:dc:70:ef:31:93:2b:52:98:
16:5e:d6:c9:3b:82:5f:04:0f:48:1b:e1:96:ef:2a:
47:44:70:d7:5f:fa:3c:e5:a4:4c:14:85:d7:48:cd:
07:1d:b8:22:db:a2:48:49:a2:59:50:e9:68:56:d8:
94:c4:d4:11:37:78:42:df:f4:df:e2:60:60:c9:cd:
51:75:53:38:21:d2:58:7f:f5:b5:49:db:bd:af:a6:
97:5b:6c:0d:f2:8d:7b:75:54:3a:98:f5:e5:ab:69:
c2:06:a3:13:66:71:3c:04:a5:77:ca:71:59:df:3f:
1b:0b:a9:08:a2:a3:e1:f6:14:9b:06:00:a8:a1:9c:
c9:34:75:a3:fa:83:d8:f5:81:82:85:39:c2:cf:31:
7b:87:5b:e5:9a:6c:69:15:40:78:bf:ac:5a:03:9c:
8c:11:0e:b5:99:45:fd:fc:9f:71:42:c7:36:fb:4d:
f7:8f:53:da:97:3f:5a:da:2b:d3:bd:80:3f:95:ca:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4C:2D:EB:A4:E6:69:4F:C9:CD:DB:BF:FE:F7:80:E6:29:7E:4A:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14d8e31d-c1de-3710-ac49-677ba8436e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:0e:50:cf:47:91:0f:5d:16:5f:53:db:de:e6:3e:f4:e2:59:
bc:5a:5d:b0:28:44:e1:0e:ee:b1:33:20:5e:54:dd:37:8f:55:
a0:fd:a0:6d:05:e0:5e:f8:b7:de:62:2e:e4:be:e0:ab:8d:ee:
75:f4:61:27:75:c3:b9:c0:d5:27:4a:d1:d9:bd:e5:00:42:34:
f5:00:14:43:f8:ca:6e:15:40:52:be:a2:30:ac:ca:e1:2d:83:
0c:41:14:12:76:1d:24:b3:bd:14:1c:ce:84:a9:04:06:8b:e6:
22:a4:2d:5c:ba:52:4b:40:c6:b5:9a:c4:b5:24:64:88:f8:31:
3e:4a:f6:7b:ad:ab:2c:16:e8:bf:72:e7:53:9b:6b:9a:a3:9e:
57:29:7e:2f:7a:e7:65:6c:1b:a3:fb:58:4f:18:7f:9e:75:5c:
62:70:d9:c1:48:5b:ef:e3:44:e0:17:3f:95:9e:35:2d:f1:54:
76:51:e0:ad:36:93:4e:53:da:cd:8d:a8:f0:bf:4f:d5:4f:0b:
d0:9a:db:82:74:b8:4d:4c:1d:43:85:58:cd:59:44:ff:91:30:
6b:04:3c:6d:87:a3:73:43:e1:4a:5e:7e:a9:d9:f6:9c:a3:f0:
38:5a:72:b4:77:6a:a5:8f:fe:2f:d8:df:d7:b9:ef:8e:4a:9f:
89:a6:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 23 07:57:44 2025 by rpki-client