Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45db6304-3a37-3cc7-bb62-8d08e5447f35.roa
File: 45db6304-3a37-3cc7-bb62-8d08e5447f35.roa (raw, json)
Hash identifier: FFn1ISbqiv+Zg/QXMsdOEKL4rL3+EgohAkAmv4ZMrvQ=
Subject key identifier: 15:F5:1D:CC:71:D1:47:A9:E6:BD:25:FE:40:F3:C6:D0:0C:9D:D1:E8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848811B0EE3BB3A82C00CD22CC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45db6304-3a37-3cc7-bb62-8d08e5447f35.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 11798
IP address blocks: 166.0.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:0e:e3:bb:3a:82:c0:0c:d2:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=d91a1f92-baa8-4c51-a48b-c8040f7c3fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:34:b8:c9:19:ab:d0:42:cf:8c:7c:c9:4f:92:
b7:30:3f:45:a0:57:9b:a4:e1:c7:ea:18:90:8c:72:
8d:73:b9:21:e8:32:5e:66:c9:ee:6c:d5:ff:f0:39:
85:3f:ce:04:d2:64:fa:70:7c:63:42:34:95:a1:81:
f3:88:f4:b4:c8:47:1e:13:53:8a:75:9c:b8:87:48:
ed:a4:7b:b5:d5:f4:50:b4:97:96:da:9d:27:ed:c8:
60:fe:6b:9b:b7:df:2e:1f:fa:12:87:0f:8b:c4:d0:
dd:f1:4d:4d:de:12:6a:bd:c6:fb:87:3c:33:5b:71:
db:21:4f:d3:0b:c2:43:78:98:ab:e1:5e:79:3f:95:
2f:4c:09:b6:06:32:fc:68:45:de:b5:d5:5c:9b:88:
9d:34:78:3d:22:9e:32:e0:cb:13:20:8f:09:04:9a:
95:e5:60:c9:c5:41:98:11:fe:f7:84:d9:1e:d2:2c:
be:71:7f:32:18:16:2c:81:af:ad:6b:c2:5e:a9:3e:
83:dc:a3:6b:ad:f2:88:bb:58:da:46:d0:a0:6c:37:
b1:ab:50:98:ee:29:aa:4a:eb:ad:35:7d:aa:ae:ea:
b8:f4:e7:f8:f3:d7:75:86:1b:fc:20:79:4d:c8:fb:
21:4d:b6:93:78:73:9e:05:b6:2d:16:4a:85:3a:d2:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:1D:CC:71:D1:47:A9:E6:BD:25:FE:40:F3:C6:D0:0C:9D:D1:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45db6304-3a37-3cc7-bb62-8d08e5447f35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:96:69:9f:72:ff:cc:f7:66:12:49:a0:32:46:c4:f7:6d:6b:
76:2d:c4:f1:c8:b1:0e:8c:01:ce:cb:79:bb:06:19:2a:d5:41:
1d:ae:69:a7:92:95:04:f7:24:cb:4f:05:cd:d8:8e:17:2d:c4:
30:29:7e:e9:11:c2:f6:63:a4:a8:18:a9:4b:d1:99:0d:53:74:
ac:d1:5c:6a:c0:8f:96:32:69:c8:cc:7b:76:0a:b5:ff:52:1a:
bd:10:48:ad:2d:5e:b1:55:15:ca:1f:37:eb:7b:5b:90:21:26:
a5:55:4d:0d:0e:88:f1:59:c3:9c:d8:ed:47:82:e6:b2:bf:ce:
d7:b0:46:56:83:3b:b9:58:63:ca:5a:98:d5:00:45:7b:7d:db:
e9:4d:5c:47:49:7d:04:67:93:6a:66:f3:81:82:c3:d1:04:f6:
59:e7:41:23:8a:0c:47:95:7d:e1:fc:d8:11:4d:db:3e:6c:1e:
3d:49:fb:22:ee:74:11:54:e3:ab:7d:2a:49:61:87:a6:0e:c0:
54:f2:96:53:45:48:a9:b5:41:6c:5b:fd:7b:60:c5:39:d3:c7:
f7:ad:1b:02:ca:d5:14:7c:41:9f:7d:56:49:bd:d4:ca:91:a9:
61:3d:7b:1f:10:59:9e:3d:ae:61:41:af:be:4f:c8:b1:30:fa:
50:9f:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:26 2025 by rpki-client