Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/461d09b7-d1d5-31ed-95a9-a677d3330e2f.roa
File: 461d09b7-d1d5-31ed-95a9-a677d3330e2f.roa (raw, json)
Hash identifier: XeUvtCCHw3794Cpx+4+tqCc4HlI6m5n1SekVMW+Q8xU=
Subject key identifier: 56:E8:E8:D0:BB:AD:A7:36:79:16:DA:0D:C6:24:5D:67:0A:1D:E4:03
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843E92712BDCD9A10A2A7980D20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/461d09b7-d1d5-31ed-95a9-a677d3330e2f.roa
Signing time: Thu 16 Nov 2023 20:34:16 +0000
ROA not before: Thu 16 Nov 2023 20:34:16 +0000
ROA not after: Wed 14 Feb 2024 20:34:16 +0000
asID: 40676
IP address blocks: 166.1.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e9:27:12:bd:cd:9a:10:a2:a7:98:0d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 16 20:34:16 2023 GMT
Not After : Feb 14 20:34:16 2024 GMT
Subject: CN=b8d94561-5fd9-4f5f-b3d1-e3c5b0115f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:e7:fc:58:b4:5b:6e:14:15:ed:75:57:3e:
fc:8e:8f:50:9a:e0:ed:2b:7e:fd:18:46:ca:7e:e2:
f8:e0:12:2c:dc:6c:71:e8:23:7c:ce:3e:42:f7:fb:
cf:ac:5b:51:61:99:d4:19:09:79:30:b8:4b:61:a4:
78:46:8c:0a:d7:22:7f:ef:4e:c7:30:49:38:ac:b1:
5a:d0:e3:e4:24:9e:54:50:f0:29:1b:cb:c7:31:b7:
09:8a:fc:38:4e:f1:3a:d0:56:60:cb:b6:57:0e:7e:
33:01:fc:09:92:6d:37:3b:2b:c8:68:da:48:83:19:
67:45:f1:73:11:38:bc:bd:27:ce:3f:46:62:36:ca:
ee:a1:f5:5e:1d:2b:1a:07:dd:34:48:7e:74:07:6b:
da:a8:62:f3:d7:89:fd:1f:39:ff:93:ed:17:d9:f7:
d9:7d:31:f6:0c:4d:bf:f9:d9:a2:d5:d7:8d:da:02:
8b:b8:ed:07:41:d6:f0:b8:b4:93:fb:b8:79:be:3b:
69:71:26:d8:24:6a:a8:0c:c1:a2:10:c6:b9:82:26:
b7:92:a7:41:44:b7:0d:ef:3a:d4:65:3d:8c:bc:4f:
1a:0e:1d:84:a2:82:63:3c:3b:e1:58:d3:fe:f1:39:
29:e9:ea:f1:03:3d:b6:24:fe:2b:f8:b5:2d:a7:92:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:E8:D0:BB:AD:A7:36:79:16:DA:0D:C6:24:5D:67:0A:1D:E4:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/461d09b7-d1d5-31ed-95a9-a677d3330e2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:8c:08:d6:40:ac:b0:38:a0:e6:4f:a2:5f:4a:9c:e7:ff:f3:
68:6e:5c:a8:9a:a0:dd:cc:a5:b9:52:ec:85:1d:63:1c:ca:9f:
20:41:fd:86:db:6c:58:31:50:26:c6:9e:67:91:88:12:58:9d:
cc:97:a2:47:a1:12:ff:0e:4f:4f:6a:e5:35:de:a9:24:b5:27:
52:5e:4d:a9:a0:64:67:e4:cf:41:12:34:8c:f3:a9:36:b6:b2:
d1:0a:fe:b2:46:de:60:29:47:7d:87:77:24:d4:3c:72:17:99:
56:ed:47:84:c1:37:aa:07:30:8a:3a:d0:49:90:38:34:eb:81:
3b:28:9e:12:d3:a9:69:b0:14:d1:da:8d:85:ec:bf:23:e5:84:
87:c0:ce:df:ca:c3:e4:94:62:27:7a:fd:80:e3:f2:58:37:1a:
21:12:28:73:f5:71:81:d8:0e:ae:26:8d:be:83:5b:5c:5a:53:
f0:23:8d:67:bc:9a:0d:b8:14:8a:2d:34:4b:d2:83:98:5c:28:
fb:f0:68:84:d0:22:9b:cd:d1:5a:72:5f:63:c4:6c:04:45:75:
ce:b4:a9:dd:28:95:00:f0:78:13:f2:51:d6:d8:53:39:76:25:
c7:76:1d:2b:e6:7c:35:7a:65:a4:d9:91:4e:7e:77:eb:32:3c:
0f:6d:be:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:59:45 2025 by rpki-client