Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6141ce7c-524d-3336-88cd-4c023b7512cb.roa
File: 6141ce7c-524d-3336-88cd-4c023b7512cb.roa (raw, json)
Hash identifier: qAPY6r4KK158JXcu9kXuaKN9D5LAhuLO8TiF+ptAvFE=
Subject key identifier: 12:7D:BF:B2:01:D2:60:98:FD:1D:05:F7:8F:57:BD:12:DC:96:74:5D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858440D43890FE90861DD4BE90800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6141ce7c-524d-3336-88cd-4c023b7512cb.roa
Signing time: Wed 29 Nov 2023 19:00:43 +0000
ROA not before: Wed 29 Nov 2023 19:00:43 +0000
ROA not after: Tue 27 Feb 2024 19:00:43 +0000
asID: 834
IP address blocks: 166.0.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:0d:43:89:0f:e9:08:61:dd:4b:e9:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 29 19:00:43 2023 GMT
Not After : Feb 27 19:00:43 2024 GMT
Subject: CN=ad62ae04-09ea-41f9-ba3d-99447b14e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:34:d8:9f:a4:a8:08:e9:57:cb:8f:c3:43:
9a:98:7e:12:c6:ad:dd:d6:01:1e:65:2d:74:17:53:
36:4d:14:da:1f:15:a5:38:02:48:f4:99:ff:bd:9d:
f4:e4:7a:a0:06:05:d6:02:85:1c:03:2a:66:b1:44:
c3:a4:3d:95:4f:13:f0:77:6f:3c:4a:52:98:73:77:
99:88:43:37:ef:8b:d2:95:e4:c0:ad:1c:c2:73:bc:
88:29:4f:db:22:2d:c0:2e:d2:d8:40:32:70:e3:51:
ce:81:13:e7:29:5e:11:a3:37:4b:60:50:45:6a:09:
c0:8d:5f:25:95:81:2a:72:bf:48:9e:d5:06:99:11:
8c:c7:cb:2b:32:e3:38:86:96:a6:7c:8f:ed:8e:a9:
2c:a8:94:d9:86:7b:e4:d2:bc:6c:35:bd:71:13:43:
54:33:5f:1f:f4:4e:61:93:d3:27:63:93:8b:eb:b3:
6d:35:7a:56:aa:50:08:ef:49:f0:2d:00:53:c8:ee:
8f:ae:0c:57:7c:c0:35:28:1b:57:42:bc:6c:ed:ae:
bd:51:aa:e9:12:83:fe:31:00:3a:a3:b0:1a:ae:da:
85:98:72:5a:b7:17:77:1a:13:ec:46:e8:a9:7d:24:
be:ec:17:10:65:11:6d:c5:ef:75:a8:9b:98:21:bb:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:BF:B2:01:D2:60:98:FD:1D:05:F7:8F:57:BD:12:DC:96:74:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6141ce7c-524d-3336-88cd-4c023b7512cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:ea:99:ff:6f:28:e5:18:fe:6d:7a:7e:5d:44:ec:cf:6e:0a:
21:f6:fd:d5:b9:18:71:ba:f0:8a:9a:ca:ba:b1:30:89:9b:dd:
d0:2e:c6:77:37:0c:b7:cb:66:aa:d8:ae:e1:88:71:f4:fa:50:
4f:3b:df:db:b4:ad:e2:34:ce:c4:20:34:93:ce:db:38:c2:7a:
63:9b:71:27:b8:bd:fe:f6:54:94:13:11:af:f8:e3:26:b4:cd:
af:26:96:87:60:92:a8:9d:bb:25:c0:c8:01:fe:de:ae:a7:82:
6e:07:b7:ad:83:b7:4f:d6:c5:ce:6f:a9:c8:46:67:44:18:8f:
8f:02:69:32:b1:37:a9:2a:7e:79:03:e3:74:1a:4b:bb:9a:5b:
82:bb:f1:07:63:b9:ef:18:1f:40:03:56:b5:63:8b:9f:23:27:
be:d1:14:e3:38:36:b0:12:59:94:8f:5a:b2:dc:af:2e:19:06:
44:b3:b6:e8:60:a4:63:72:c8:d5:cc:bb:cb:ff:6c:15:c9:bd:
c2:9f:bf:46:d6:78:fd:b4:1c:29:c1:e3:75:58:45:2a:eb:a7:
92:6b:f5:b1:42:1e:cd:cd:8d:74:01:82:f6:98:b1:b9:dc:27:
bf:ed:67:f9:8d:e0:94:09:ab:a8:1c:80:4e:53:84:79:93:60:
15:c5:13:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:09:28 2025 by rpki-client