Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b638d31-b1cd-328c-9f9a-6b30c5842449.roa
File: 5b638d31-b1cd-328c-9f9a-6b30c5842449.roa (raw, json)
Hash identifier: jrmRZvEwSqKiJfyt2nOq3uRw9uayctVfMyKYa/f36+4=
Subject key identifier: 7B:8B:3A:8B:36:E8:47:FF:D5:01:94:1C:35:DC:C7:08:46:82:C9:16
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858440A53B17FAFB4238468AD1580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b638d31-b1cd-328c-9f9a-6b30c5842449.roa
Signing time: Tue 28 Nov 2023 17:45:51 +0000
ROA not before: Tue 28 Nov 2023 17:45:51 +0000
ROA not after: Mon 26 Feb 2024 17:45:51 +0000
asID: 834
IP address blocks: 166.0.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:0a:53:b1:7f:af:b4:23:84:68:ad:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 28 17:45:51 2023 GMT
Not After : Feb 26 17:45:51 2024 GMT
Subject: CN=4e594bff-b423-4adf-bc48-266d859d283e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:cf:6e:e7:24:24:ae:3a:50:9e:c1:a1:99:
85:d4:98:03:bf:72:0c:50:6b:42:cb:46:1a:c2:52:
6c:4f:37:bc:30:19:92:a0:2e:26:f7:48:cc:1d:ca:
03:98:9f:67:88:4a:9d:57:27:dc:94:cc:2e:48:47:
45:bf:86:08:71:14:10:1d:6f:86:65:da:2c:83:56:
87:98:ad:fc:70:8f:1b:b1:80:a9:2b:22:ca:5d:6b:
07:9d:b3:19:1b:2b:cd:e4:37:cf:0d:46:d3:e5:15:
cb:4d:77:45:8c:5f:87:17:51:48:88:82:ce:20:51:
9f:e1:2c:40:73:6b:de:57:12:97:6d:3e:51:8a:ae:
e4:0a:24:3f:ec:70:a6:db:58:02:30:c1:6c:84:e8:
c0:37:5d:96:66:07:a1:5d:ef:a3:c8:86:ef:82:ee:
42:17:8d:e0:32:1d:87:04:13:50:6b:21:25:e2:26:
6a:e8:9c:fd:09:25:be:f1:f2:44:da:7e:25:56:10:
05:36:89:fc:59:51:06:80:a5:af:56:a2:8e:13:ef:
6c:42:e3:9a:c7:a1:34:80:4f:4a:eb:c5:95:25:5e:
36:36:ec:fc:f0:9f:20:3a:56:4d:ad:4d:af:23:d6:
8a:e1:33:ea:2f:38:06:05:1f:25:06:b4:26:7a:cc:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8B:3A:8B:36:E8:47:FF:D5:01:94:1C:35:DC:C7:08:46:82:C9:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b638d31-b1cd-328c-9f9a-6b30c5842449.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:2b:35:12:9e:c2:52:ca:1e:c9:71:c6:fd:06:7b:41:e2:30:
51:14:73:eb:02:17:5f:22:84:a7:6c:40:91:de:cf:86:a3:fc:
88:08:ee:bc:d5:ff:55:b4:b4:01:01:ee:fa:7b:42:8e:46:01:
a3:cc:c9:d5:72:db:f6:96:b0:92:dc:38:0f:81:d2:92:10:4a:
45:f7:ac:51:ef:a6:c6:9c:95:12:41:cd:5e:a9:4b:48:86:1b:
50:ce:35:5f:52:e4:e3:85:39:1a:b1:1d:34:37:f0:b2:d2:ee:
78:d9:34:59:cc:13:c7:b7:3f:e4:69:e0:5b:45:c7:18:68:7b:
80:73:70:59:c9:bb:d9:df:03:aa:71:ce:82:3e:df:33:a9:0e:
64:ab:32:63:e7:1f:0c:ef:c5:a2:b2:3c:cb:19:37:7c:7a:b6:
b4:87:c7:6a:53:ba:ee:db:cb:52:08:ec:b2:1b:cc:04:cd:b3:
e3:2c:23:48:e7:66:c4:df:a0:62:65:8f:44:d3:93:71:0c:ef:
90:48:d6:70:43:eb:80:5e:da:db:d0:27:de:dc:72:76:c8:7c:
e8:ad:d6:ac:2f:9c:2e:63:7a:38:79:2a:a5:11:66:57:c0:59:
08:5c:e4:2b:3b:a6:89:1d:cd:9c:05:73:0e:d2:f5:c3:00:cf:
1f:ce:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:06:15 2025 by rpki-client