Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/588692b9-4e2a-3d9e-afd6-e5d8b9a1da69.roa
File: 588692b9-4e2a-3d9e-afd6-e5d8b9a1da69.roa (raw, json)
Hash identifier: Ew2fx4KdJLv1SNkMbNJcRii9a9H2Ai0ch2woPwfbrbk=
Subject key identifier: 92:A7:09:4A:36:15:57:4D:25:34:A6:CA:E0:68:E6:CD:37:D3:C3:9D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E50FB5F4F639A2378800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/588692b9-4e2a-3d9e-afd6-e5d8b9a1da69.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Tue 08 Aug 2023 02:46:03 +0000
asID: 834
IP address blocks: 166.0.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e5:0f:b5:f4:f6:39:a2:37:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 8 02:46:03 2023 GMT
Subject: CN=46cec555-8ae7-4f80-83e6-5454641681a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:44:f9:7d:33:fb:9e:e8:76:d7:80:10:59:
6c:26:80:eb:a6:8a:e2:8e:56:4a:d2:2b:8f:6c:39:
ad:84:28:83:a9:95:30:27:64:d3:ea:03:cc:75:ec:
5b:3d:ef:23:5a:90:a7:66:3f:94:88:0e:d7:8c:b3:
05:6b:e5:3e:51:a0:fb:db:f0:d3:4d:4d:01:53:29:
a6:8d:34:01:45:18:17:a0:f2:62:42:65:c6:d9:22:
d5:07:85:78:08:1f:01:c2:4e:66:81:55:ed:83:1f:
62:ae:a0:e0:6d:ea:49:72:e3:46:63:c1:77:c3:e6:
28:96:78:ee:7f:25:25:71:95:a8:97:b9:bd:08:62:
91:7b:b5:d3:d0:61:0d:a2:86:55:9b:f5:6f:41:2e:
f3:0a:f7:10:74:6d:9e:84:72:9a:97:2b:d7:4b:3f:
ce:e7:2d:95:d9:08:b3:5c:50:80:f7:cf:fd:7b:d2:
7f:94:0a:e6:e9:5b:f1:c5:42:2c:d3:45:fb:08:28:
eb:82:2c:65:bb:51:34:35:44:9d:36:99:58:2a:68:
3a:fc:de:b9:2e:40:d6:62:76:31:af:d9:ad:82:57:
cb:a4:d6:cf:a8:f0:98:07:f0:0c:92:e0:bc:fa:66:
72:f9:30:09:d9:e3:51:92:1e:2a:47:11:b3:b0:f2:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:09:4A:36:15:57:4D:25:34:A6:CA:E0:68:E6:CD:37:D3:C3:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/588692b9-4e2a-3d9e-afd6-e5d8b9a1da69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:70:f2:57:fe:d5:91:f9:12:0c:7e:4e:a6:59:3f:9a:70:45:
d7:9a:37:36:34:c0:b5:f8:11:23:9d:d1:ee:ba:68:86:ab:e3:
00:7e:46:61:ef:d8:83:b8:4d:af:46:b1:30:ca:93:07:35:f0:
c3:fd:c9:92:c8:58:8e:f8:00:e8:8a:c6:30:41:39:47:82:7e:
85:8d:74:78:0b:72:b7:19:36:fb:d8:4f:93:cb:01:eb:e9:2b:
26:a8:d1:fa:bf:72:fe:b7:60:6f:da:bf:59:f6:14:02:41:71:
64:09:0b:4b:fe:ca:d5:74:4a:12:c6:99:cb:3c:b5:e6:8f:cb:
8b:c5:3d:18:8d:c6:53:9c:e6:bf:8a:1e:c6:04:4b:16:4e:81:
31:fb:55:9c:c0:63:e1:8b:22:74:70:74:26:ae:19:1e:e6:45:
a1:86:f2:ae:f3:22:ff:19:f3:97:1f:48:8c:83:5a:18:b1:bb:
82:12:5d:b7:8a:c9:b4:9d:d4:94:87:d1:b9:30:e0:b3:14:95:
35:25:ad:b8:88:fd:05:ab:88:f3:78:ba:29:3e:6a:53:81:1b:
19:b5:f9:e7:a0:0d:cb:3d:f0:5f:8f:e5:be:4e:f1:aa:08:a4:
cb:65:3e:76:ca:ca:a3:69:46:7a:6d:46:86:ef:aa:4d:69:56:
22:61:59:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 17:00:13 2025 by rpki-client