Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fb4e335-2b8b-39af-b87e-b45bdc583ded.roa
File: 4fb4e335-2b8b-39af-b87e-b45bdc583ded.roa (raw, json)
Hash identifier: bOOrVCP+5giIOOyQGaRGi5Q8GaszqejKxWt39k7p+m8=
Subject key identifier: 5F:01:99:31:9B:50:9A:E0:DC:15:3D:51:19:0B:CD:15:EC:AA:6E:79
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A5F4793DD06CF2881E240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fb4e335-2b8b-39af-b87e-b45bdc583ded.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 9009
IP address blocks: 166.0.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:5f:47:93:dd:06:cf:28:81:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=79504d06-fd06-4559-af30-03f2701c43ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:ab:b8:b7:a6:b3:2f:de:dc:69:1c:5f:42:
ff:d6:70:9d:d9:89:8f:fc:a9:0a:40:af:40:ed:17:
b1:ee:89:c3:74:0b:74:f4:9f:6a:f3:36:e3:7f:3a:
e4:e7:b4:ff:3d:06:03:2e:9c:2c:79:b4:6b:d4:b0:
54:53:49:ea:d5:eb:7d:65:e9:ba:20:bf:22:37:60:
4c:d8:50:f0:09:85:a3:3f:46:ae:90:e2:1b:da:37:
4a:9e:e8:99:69:f1:2c:42:8e:8a:e4:5d:e7:c8:e8:
2e:d3:0b:05:62:c9:f0:8b:7d:b0:27:46:15:41:77:
54:1a:9f:7f:39:4d:23:1a:30:6f:ad:98:92:de:4e:
7c:f2:f2:6b:39:89:a8:f1:21:7c:b6:6a:55:80:7a:
96:53:a8:03:38:60:5b:17:ae:80:42:f7:23:92:40:
ad:af:55:e1:11:16:b7:d5:d0:35:23:d9:d1:66:4a:
c6:e2:77:fb:82:4c:58:37:41:b1:13:e6:55:f9:a5:
21:c2:72:c9:e3:c2:fe:d4:0a:20:30:e1:b5:9f:3d:
2f:39:7f:e5:8a:86:78:c8:37:3b:fe:43:bf:23:f9:
20:c7:96:b2:2e:6d:ac:c9:53:5f:93:71:2b:95:72:
03:da:69:70:31:23:67:7c:5b:fb:5f:bf:66:a1:93:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:99:31:9B:50:9A:E0:DC:15:3D:51:19:0B:CD:15:EC:AA:6E:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fb4e335-2b8b-39af-b87e-b45bdc583ded.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:7e:97:d7:b8:30:80:35:7c:97:0f:70:dc:bd:3c:81:1c:fe:
41:2e:63:b7:97:2d:26:6e:fe:c5:d3:df:c1:2d:a1:63:e3:b2:
18:2e:56:47:44:58:25:44:0c:c0:ce:eb:10:16:dd:ef:fc:9e:
a1:49:a2:26:e1:4a:58:02:50:c7:95:3c:be:2f:53:c4:e6:4a:
24:f4:c2:d9:27:6d:8c:20:1b:bf:5c:11:28:64:dc:cd:f4:d4:
84:d3:0d:fe:11:ab:fb:c9:fd:2f:a8:2d:9b:d0:c8:45:1f:81:
f2:59:ef:ae:e0:48:60:5e:3c:da:5b:62:85:28:de:b0:ab:4e:
fd:1b:6c:5d:28:f2:c4:9c:e7:db:72:76:26:d8:5f:ae:c4:31:
e8:b7:13:c5:c1:eb:eb:31:9d:5d:a1:c4:c7:ef:25:42:62:a1:
d7:39:45:20:12:c9:75:32:57:5d:b8:69:54:10:d5:4d:e6:41:
bd:81:c3:9b:da:af:bc:90:f5:1f:a3:5c:a9:91:0e:37:be:12:
af:ab:3c:c6:ad:53:43:15:19:be:6d:2a:3f:c8:27:2e:81:bf:
a1:c2:2d:f2:2d:23:3d:06:c0:a4:31:7f:7f:3f:b9:98:4a:bd:
d6:17:f5:e5:66:76:f8:6d:74:7d:f3:ac:0d:0d:65:e2:3e:60:
76:fe:f1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 02:59:22 2025 by rpki-client