Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bfb8945-6bfb-3c43-8fe2-ced54c1fba8b.roa
File: 5bfb8945-6bfb-3c43-8fe2-ced54c1fba8b.roa (raw, json)
Hash identifier: /G766lBxVbnT8WKo4NdzvYYOAHZi0RLJ9d0lY5qYdT0=
Subject key identifier: 1B:F1:3A:32:A0:62:C9:7D:B0:8E:6C:19:9D:25:D1:31:50:44:49:1B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583F9CC832072B4F5D388C8ACD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bfb8945-6bfb-3c43-8fe2-ced54c1fba8b.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Mon 20 Jan 2025 05:00:00 +0000
asID: 207459
IP address blocks: 166.0.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9c:c8:32:07:2b:4f:5d:38:8c:8a:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jan 20 05:00:00 2025 GMT
Subject: CN=c34e2909-e6ba-4ae9-84c6-94e63db00a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:16:9e:a5:32:d1:17:32:1f:4b:7e:4d:f2:6a:
e6:a2:be:cd:33:94:b1:36:df:46:ad:b2:dc:c2:61:
30:a7:92:d9:8e:3e:45:ec:eb:fd:8d:21:e9:4d:87:
63:b5:5c:38:a7:94:f0:42:ee:b5:9f:cf:c7:3e:53:
ee:ea:f4:b9:0e:24:5c:3a:fe:30:be:3b:7d:31:47:
5a:31:12:ef:e1:fa:ab:47:a3:13:7a:ce:96:6e:5c:
63:d3:d2:b8:09:96:a1:80:b7:3a:ed:4d:31:a9:eb:
65:47:8a:83:36:8e:15:c8:43:2d:37:74:5f:f4:8d:
c8:60:aa:63:98:0e:05:4b:ad:82:2b:81:f1:ca:a8:
76:e4:f1:89:3f:4f:b7:d5:c2:94:8c:1c:36:0c:af:
fb:82:74:81:58:54:4a:de:02:94:b0:46:bf:da:8c:
a3:28:d7:f7:02:09:29:a5:ae:e7:04:b3:bc:fe:1e:
79:8f:dd:ca:85:f6:c8:c9:be:55:85:bf:a5:91:88:
d8:3a:b6:bc:97:e3:25:39:af:49:1b:30:53:18:aa:
81:f2:9f:50:25:06:26:3c:a9:92:b8:11:58:bc:fa:
25:26:03:3e:e8:5c:f2:76:90:00:3d:8f:61:3f:ad:
d0:c0:cb:5d:1e:59:b2:01:36:e7:0f:2c:97:6f:f5:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F1:3A:32:A0:62:C9:7D:B0:8E:6C:19:9D:25:D1:31:50:44:49:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bfb8945-6bfb-3c43-8fe2-ced54c1fba8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:b0:d8:97:2b:24:ed:d3:97:43:b2:6a:b7:b2:6e:ba:cb:ac:
c8:d3:a7:6a:0e:d2:b1:51:19:39:3c:f6:fb:23:55:b5:90:c2:
26:06:7c:6e:d5:9f:f5:bd:5a:07:e8:84:26:3a:43:cb:41:21:
c1:49:2b:a8:65:99:13:f3:13:b5:80:a0:90:f7:52:35:c4:a2:
64:41:e1:b2:1a:30:9a:d4:c5:63:97:cd:e8:60:69:04:5d:21:
df:7a:1a:df:99:de:9e:12:38:2d:b3:c2:ed:d0:24:f0:71:91:
69:c8:87:b8:1f:bb:90:e8:03:70:b7:1a:8f:87:c8:05:41:f6:
ab:3f:85:95:7b:56:11:59:af:84:4f:84:07:92:d3:1d:24:f3:
61:4c:37:26:f7:0c:48:41:71:95:cf:a0:44:5c:9d:c2:9d:e0:
f7:3e:f0:ff:f2:69:8b:5f:2a:1c:15:3e:54:7b:c7:76:93:6d:
19:c6:b0:4b:f3:0e:91:2a:97:51:76:89:4b:a0:13:3d:69:89:
bf:be:dd:6c:55:e6:e0:d8:e1:78:a6:66:f5:eb:bc:c4:0f:da:
24:26:e3:fd:58:9b:4d:b2:76:0b:14:dd:39:98:8a:67:be:58:
ae:c2:6b:01:f3:c2:68:0e:d7:2e:ed:90:a5:88:7c:a5:4e:de:
52:6e:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 15:48:57 2025 by rpki-client