Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b060523-6564-3e42-8143-b8ee977a7f09.roa
File: 1b060523-6564-3e42-8143-b8ee977a7f09.roa (raw, json)
Hash identifier: JPPGDkYh8pnpWSnr9663D4Im19LiOp9emuMLySPUvE0=
Subject key identifier: FC:97:AD:24:4D:12:A9:03:C2:EF:D5:06:AB:F2:43:DF:07:E7:E6:4A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584379FFC9E4D4C3C69E88996900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b060523-6564-3e42-8143-b8ee977a7f09.roa
Signing time: Sun 08 Oct 2023 01:00:22 +0000
ROA not before: Sun 08 Oct 2023 01:00:22 +0000
ROA not after: Sat 06 Jan 2024 02:00:22 +0000
asID: 834
IP address blocks: 166.0.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:79:ff:c9:e4:d4:c3:c6:9e:88:99:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 8 01:00:22 2023 GMT
Not After : Jan 6 02:00:22 2024 GMT
Subject: CN=95897561-bac1-4246-8632-5404ce3452f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:ef:57:6b:98:b3:e2:56:fa:d1:48:b4:b2:
43:4a:00:15:9f:fd:00:6f:9a:42:bf:e9:0a:cd:e5:
2b:46:d1:58:43:2b:78:bd:70:eb:3f:1e:19:5d:9e:
df:fe:33:c0:a6:2c:d4:88:c0:d6:f8:90:fa:38:28:
b6:d3:1f:07:e7:cf:9b:ea:fc:a4:c4:ad:6b:5d:70:
6f:40:6d:b8:d5:be:46:ea:3c:b9:db:e5:88:6d:e0:
6f:53:43:1f:dd:e7:dd:12:95:35:84:ce:97:9e:79:
53:1d:cb:8d:34:f3:9c:33:e0:a6:ad:47:a2:9d:ca:
a7:65:79:70:f8:75:60:2e:cd:c5:b7:25:2e:a4:f8:
0c:fb:41:95:b4:db:92:02:d8:6f:49:19:3c:99:f1:
1e:05:85:f7:f3:41:a0:b2:05:98:6e:fd:26:69:b9:
ef:ae:ff:e4:4c:49:92:0e:e9:88:f2:2a:67:4e:4d:
8b:f2:42:e1:b6:2b:63:2e:41:f5:0e:54:ba:51:06:
aa:af:88:55:57:47:73:19:5d:9b:4c:32:66:80:a1:
2e:d2:69:12:84:c7:98:ff:da:0f:7b:08:73:03:b1:
ea:b7:25:4e:60:9a:7f:f3:d8:0c:b7:36:a9:99:39:
ec:73:5d:80:24:5d:ec:60:15:1d:20:68:dc:e1:d8:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:AD:24:4D:12:A9:03:C2:EF:D5:06:AB:F2:43:DF:07:E7:E6:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b060523-6564-3e42-8143-b8ee977a7f09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:0a:2a:97:4f:74:4d:9a:e8:84:8b:23:e9:b4:5e:66:42:62:
46:84:41:66:7b:40:c0:e8:57:5d:66:3a:57:f2:6f:ba:7d:e9:
1a:7b:a2:db:86:26:28:eb:6f:24:bd:7f:8f:21:8d:13:fe:66:
94:2e:71:e8:9c:d0:f8:0d:c6:11:51:73:f9:83:55:3b:f5:8c:
8f:01:b3:14:fb:66:cb:e6:26:53:e9:f8:65:1e:43:f0:bd:73:
24:60:39:55:e0:06:06:69:9a:0a:b4:7c:48:97:55:e5:b0:a8:
a4:30:8d:8b:53:dd:d7:da:5c:a4:5c:0d:85:cb:6a:53:05:b9:
99:29:64:73:e5:f4:37:20:40:3c:b4:59:64:29:15:91:d1:5d:
61:97:c3:16:93:db:fc:0e:bb:8b:e5:37:f4:6b:4f:c8:d1:86:
90:b0:a0:a1:a4:7c:a6:f9:2e:42:d1:47:58:44:35:ee:52:23:
a3:0b:a7:6d:d0:0d:6a:74:51:89:fc:55:c8:c1:8b:84:f1:47:
1f:56:13:e2:3e:f0:db:8a:e2:98:90:99:98:d7:cc:ea:a5:78:
d1:2f:b0:a8:40:52:b5:cd:15:ef:51:d0:ff:b9:4a:45:bb:13:
3b:75:43:ff:09:43:7a:45:96:ef:37:bc:5e:41:14:8b:d0:bc:
71:24:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:24:27 2025 by rpki-client