Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14effcfd-fd94-33d6-a478-21fe5832be68.roa
File: 14effcfd-fd94-33d6-a478-21fe5832be68.roa (raw, json)
Hash identifier: 1icLOtuue1P77SX3G2b1mb0tvFamOuzRsnTaei+7sUE=
Subject key identifier: 65:B6:C1:25:81:9F:02:5E:85:7D:69:6E:06:17:BC:4F:4F:E0:C3:00
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446DD63A265382E2D55DF20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14effcfd-fd94-33d6-a478-21fe5832be68.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Tue 01 Aug 2023 06:31:14 +0000
asID: 213035
IP address blocks: 166.1.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:dd:63:a2:65:38:2e:2d:55:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 1 06:31:14 2023 GMT
Subject: CN=1102a530-36e6-4a86-807c-689946dd9c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:99:65:25:78:13:50:b4:3e:ed:2a:74:1c:
23:dd:c4:ce:68:c0:3d:ca:50:36:1c:a4:5d:11:9a:
69:04:56:3b:11:c9:40:aa:31:63:05:ce:2f:47:7e:
52:0f:bc:e4:05:2c:10:46:a1:73:1c:6f:ba:e4:17:
c4:c7:4f:94:3b:41:1e:d4:69:b6:a3:dc:e2:5d:fb:
0a:b0:93:11:5e:07:a5:75:88:f8:59:49:0c:8e:1d:
cb:ee:9c:d4:0b:b0:aa:27:fd:06:c6:40:cd:e9:a4:
be:93:6d:9d:f4:79:30:2a:4d:60:a2:3f:5b:2a:07:
c7:33:7d:c9:d3:3d:d6:97:42:92:17:54:8e:84:7a:
2c:72:10:72:dd:c7:1f:0a:84:43:84:99:84:f2:87:
9a:dd:1e:49:3d:06:0b:4d:a9:35:14:81:8a:bc:37:
8d:9b:0f:fe:08:b9:77:38:09:4f:60:20:73:cd:75:
a5:a5:fe:c3:88:f3:cb:9f:1c:51:50:05:7c:26:f0:
9f:fd:12:48:49:2e:ec:1c:2d:7f:3e:d2:c7:45:b6:
2a:53:84:bb:21:de:a1:06:14:b7:63:60:7b:ac:21:
63:88:72:87:ff:66:69:f4:88:00:30:28:35:cc:6b:
a6:51:45:7e:bd:71:c2:54:85:37:10:7f:e9:d0:5e:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B6:C1:25:81:9F:02:5E:85:7D:69:6E:06:17:BC:4F:4F:E0:C3:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14effcfd-fd94-33d6-a478-21fe5832be68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:2b:48:4d:3a:d3:55:e3:c8:e1:32:4e:8b:09:08:2f:ba:e6:
86:ef:96:43:c3:b4:4d:69:5d:dd:47:ad:74:70:6b:66:3e:a8:
db:a3:c1:5b:54:7f:55:bf:74:8b:fa:d0:42:e9:3a:03:3d:31:
57:cf:b8:f2:60:e5:25:b0:28:4b:c8:b7:c5:b7:bc:7d:e1:61:
f2:91:da:d9:59:05:ce:ee:1a:c2:4f:c3:74:a2:91:39:c9:4b:
9a:60:f0:db:3f:02:37:6e:09:7b:79:57:c7:cc:9a:c1:a3:3a:
f1:ba:fa:4d:4d:dc:d3:2b:b8:7e:dd:83:13:21:1d:5b:3e:94:
8a:db:cf:17:80:d5:66:c5:6c:e2:0f:87:e2:d0:60:11:38:07:
c0:e6:91:9a:ff:ba:fa:54:6a:3c:c5:38:a5:02:db:ea:5c:89:
ab:c7:c4:e2:8e:5d:a9:12:b5:97:02:42:05:22:5c:3e:81:f1:
0c:66:3e:62:56:d5:b0:12:e4:9b:c3:60:eb:b9:1f:0c:a1:98:
d5:3b:d9:10:57:66:b1:db:b2:25:0e:b8:85:7b:53:d6:b3:40:
b5:26:18:67:27:bc:5e:1b:eb:79:9f:04:88:8b:cd:b4:b5:5d:
96:e1:9b:e0:a0:70:22:13:e2:c6:44:7c:ec:a9:7c:b2:fb:06:
07:37:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 15:59:27 2025 by rpki-client