Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d094b71-b9a3-3003-98f6-206ac14a6f19.roa
File: 3d094b71-b9a3-3003-98f6-206ac14a6f19.roa (raw, json)
Hash identifier: WJC8aHxQt6D7b0d6lyA2/qZGVnfF66VY46/0Y67FLSo=
Subject key identifier: 25:02:9B:8D:3A:6B:9F:21:91:14:CB:7D:D5:A3:16:D6:07:AA:FB:2D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843F403951DF8C9E37BB3FEB3C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d094b71-b9a3-3003-98f6-206ac14a6f19.roa
Signing time: Mon 20 Nov 2023 17:56:39 +0000
ROA not before: Mon 20 Nov 2023 17:56:39 +0000
ROA not after: Sun 18 Feb 2024 17:56:39 +0000
asID: 834
IP address blocks: 166.0.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f4:03:95:1d:f8:c9:e3:7b:b3:fe:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 20 17:56:39 2023 GMT
Not After : Feb 18 17:56:39 2024 GMT
Subject: CN=633c1b41-577d-45be-a61b-da2179733241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:aa:90:80:42:36:ea:c7:4f:8e:55:9c:84:
57:4a:fe:77:40:15:3d:16:6c:f0:a4:9b:65:43:c7:
e4:7c:60:ba:eb:6d:1e:14:4e:38:e6:7a:b5:d3:1e:
a1:b6:14:bc:8e:f5:07:fc:46:77:df:e3:9e:af:0f:
6c:56:94:a0:85:00:24:fd:8a:fb:16:84:04:2a:c9:
a9:c5:d7:b3:96:c8:76:b7:81:77:34:f2:f2:7c:dd:
bc:86:91:25:a4:a3:b6:52:f3:f7:fb:36:f2:e2:98:
30:bc:e7:f8:f2:8c:49:8c:a3:52:3a:5f:98:f8:f7:
a5:ee:70:32:57:4e:d6:d5:65:2b:bd:41:33:48:6b:
69:2e:8f:fc:c3:c5:a9:be:f0:a2:b7:18:d2:65:e1:
74:28:01:28:d3:52:c0:55:d3:d1:0a:70:0a:c9:a1:
82:ae:86:d6:3f:55:8b:2e:8f:cf:80:d8:a6:50:75:
d7:c4:5c:46:52:fd:d5:27:75:b9:c7:44:cb:f0:c7:
fb:6f:51:40:13:8d:b8:18:ac:7a:67:9e:6b:77:44:
e9:67:79:34:a2:c7:c2:69:a8:51:6a:a0:50:86:9a:
76:82:ea:0c:02:95:e6:22:09:e0:62:f0:e7:da:b3:
c8:f2:93:2d:00:a2:5d:34:29:a5:fb:2f:bf:bd:44:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:9B:8D:3A:6B:9F:21:91:14:CB:7D:D5:A3:16:D6:07:AA:FB:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d094b71-b9a3-3003-98f6-206ac14a6f19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:f2:c0:bd:0e:48:50:83:bc:ec:48:00:c2:b6:96:0d:65:80:
69:44:cd:2c:7c:16:4e:b7:e3:a9:de:c2:f2:d1:1e:f2:ad:f8:
b0:6d:77:fa:8e:f3:13:37:3e:5a:ec:76:8f:9b:af:26:bd:ba:
79:35:63:8a:80:f1:c0:fd:c9:34:c3:f8:c9:20:bf:cc:fa:22:
bc:35:28:9f:fa:b0:95:6b:3a:70:b0:2b:0e:52:0a:0a:58:a9:
af:8d:4c:08:fb:12:7a:ae:ff:54:66:66:a5:51:3b:91:6b:7a:
f2:cd:92:a7:76:0f:8d:c6:8f:3e:6e:ac:e6:d0:e3:a0:20:35:
94:70:17:c8:ba:07:78:37:1e:49:35:dd:b1:b8:d1:93:43:35:
4a:c4:03:18:46:c1:33:c1:1f:c3:b1:44:fd:8e:81:0d:99:64:
2a:4a:4e:bc:ed:d5:c3:89:1d:e2:25:9a:42:43:99:7c:cc:e4:
9d:be:82:af:65:45:4a:e8:42:77:05:3b:65:ba:54:95:3a:91:
7a:c3:f7:38:e1:78:0c:54:05:8d:10:e7:3d:46:35:ae:97:36:
7c:ef:ec:0d:8a:c7:03:07:c1:62:be:42:68:59:fc:0b:9d:0e:
61:a0:3e:ae:43:80:cd:f4:20:ce:cd:ce:db:3b:e2:78:86:df:
01:6a:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:28:26 2025 by rpki-client