Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/213ac6a2-2b69-3459-8de7-b8d407da3e82.roa
File: 213ac6a2-2b69-3459-8de7-b8d407da3e82.roa (raw, json)
Hash identifier: GodDBKk6KGzT2hUFf1BmjXf6Anlbscmd0rxB0nWfSWM=
Subject key identifier: 80:D2:0A:7C:69:D8:2F:D9:19:AE:06:A6:96:24:BC:36:D5:0E:A8:9F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584425CEAC733C1A9AD24BB65900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/213ac6a2-2b69-3459-8de7-b8d407da3e82.roa
Signing time: Fri 08 Dec 2023 14:00:20 +0000
ROA not before: Fri 08 Dec 2023 14:00:20 +0000
ROA not after: Thu 07 Mar 2024 14:00:20 +0000
asID: 834
IP address blocks: 166.0.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:25:ce:ac:73:3c:1a:9a:d2:4b:b6:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 8 14:00:20 2023 GMT
Not After : Mar 7 14:00:20 2024 GMT
Subject: CN=e01a60a7-4adb-4734-a4db-ab6f0ae0a9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:4c:b4:20:94:68:42:f1:a5:05:86:f5:cc:
b8:9c:1c:0a:de:0d:a0:42:2b:d7:56:1c:bf:d9:1c:
0b:8a:58:dd:fe:c4:46:fb:47:60:20:b6:57:36:d3:
68:29:ad:f2:cd:5c:e9:84:65:63:72:6c:93:10:c2:
38:c0:46:11:f0:ee:d7:6d:8f:54:6f:c9:88:26:ac:
21:26:eb:ce:46:24:11:77:7d:8a:aa:89:d5:22:e9:
46:73:b6:54:7d:17:9e:b1:af:46:9a:4b:f1:1d:4a:
ba:40:b7:dd:4d:8d:d1:a0:18:54:94:b5:70:09:43:
7b:fc:95:dd:b4:c5:65:fd:bb:80:03:0d:90:18:ba:
be:fb:b8:73:fa:7f:e0:76:a9:f1:a1:7c:3c:ce:1c:
ba:51:18:6d:78:ff:53:7e:e0:d9:69:dd:0b:97:ae:
93:4c:1a:06:bf:03:76:6d:b8:53:a0:45:1e:1b:3d:
16:f2:da:e8:d1:12:0f:fb:9b:08:40:68:92:f7:04:
af:0f:97:78:9e:5b:46:7f:89:38:90:b8:9b:12:b9:
c5:9d:03:3e:c7:5e:a5:99:69:f5:8b:bf:1b:9e:b8:
b1:76:c9:78:2d:3a:d3:5f:2d:37:64:f1:74:ee:90:
a2:e4:9c:0c:fc:0d:de:e8:7b:99:86:3c:c2:26:63:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D2:0A:7C:69:D8:2F:D9:19:AE:06:A6:96:24:BC:36:D5:0E:A8:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/213ac6a2-2b69-3459-8de7-b8d407da3e82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:66:7b:55:3c:8c:b6:bd:59:35:70:4e:0f:68:d0:1d:ce:c5:
d1:6a:23:ba:1e:a1:5c:cf:f1:c1:3f:68:15:a0:c1:e0:7c:20:
b5:c1:b5:d0:c3:de:2a:b1:ff:e1:89:5a:85:7c:27:48:ce:02:
46:1b:1d:11:84:7e:0c:f2:31:07:e4:5c:e8:8f:2e:a6:5f:27:
2e:23:10:5f:cf:68:98:fd:d9:97:2a:0c:37:7f:1f:61:0b:f9:
2a:47:1f:4b:cd:63:66:82:db:9c:3c:cf:db:6c:66:f2:2f:ae:
76:5c:91:0f:f8:32:cc:54:1c:3d:0f:5b:17:f4:05:8a:d9:24:
8c:63:c1:b1:06:1f:ca:39:a1:31:a7:83:6e:15:04:64:28:cc:
d6:2a:33:79:67:f6:dd:b6:ec:a1:64:aa:da:0d:aa:20:ed:de:
69:43:26:58:65:1a:9c:b3:69:13:56:a5:9d:cb:5f:8b:a7:fa:
a3:24:31:07:ac:36:67:c8:0d:21:40:72:b2:4d:04:09:d8:19:
23:1a:a2:cd:e6:46:0f:17:8f:b4:1c:03:1b:5c:66:a2:5a:e7:
fa:b6:06:17:fd:02:09:71:11:b9:35:26:55:c1:37:5b:2f:34:
ed:b3:35:99:de:f4:54:03:6d:10:a4:b1:e5:a7:5b:f4:c8:56:
b4:77:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:07:39 2025 by rpki-client