Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/631b9e24-3112-340d-997f-7fab91e5c018.roa
File: 631b9e24-3112-340d-997f-7fab91e5c018.roa (raw, json)
Hash identifier: qQOZNyOULbkYx2AakE11HmlYw53mDlr2rSrNzhO83BA=
Subject key identifier: 56:71:F5:2F:5C:BA:D1:9E:D8:95:8C:AC:23:1C:64:2C:52:D1:91:B5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858471BA5A79E5C337931E83AE30E
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/631b9e24-3112-340d-997f-7fab91e5c018.roa
Signing time: Thu 05 Sep 2024 01:00:30 +0000
ROA not before: Thu 05 Sep 2024 01:00:30 +0000
ROA not after: Wed 04 Dec 2024 02:00:30 +0000
asID: 19437
IP address blocks: 166.0.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1b:a5:a7:9e:5c:33:79:31:e8:3a:e3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 5 01:00:30 2024 GMT
Not After : Dec 4 02:00:30 2024 GMT
Subject: CN=6610c7a4-94aa-4f79-b3fe-6fa68311562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:9b:3d:c9:7b:f0:bf:8f:c7:53:f1:9d:74:
98:d8:51:34:d7:f8:57:8c:28:ad:e9:63:1b:87:c5:
f0:92:50:ce:a2:5a:29:0c:db:bd:3e:c7:60:70:43:
ec:34:b4:f0:9d:20:de:7a:9e:9d:07:57:4c:19:11:
dd:27:11:92:16:9f:27:95:87:49:bf:03:f1:b1:d8:
22:cf:4e:2e:8b:fb:aa:a5:1b:2d:3f:8e:16:10:20:
33:7b:09:c7:10:af:66:40:b6:b4:5c:5e:8e:a1:36:
fb:27:f3:06:d8:b4:ae:ca:de:1d:b1:2e:e1:61:1b:
46:a8:38:0c:2e:d5:47:d8:90:8a:8b:cc:3d:e3:18:
ad:13:e9:fd:53:a8:68:3d:04:d8:2c:ba:a4:13:b7:
5c:ac:8f:26:ee:91:7a:15:b3:a7:81:0f:eb:81:49:
ac:40:7f:37:2f:dd:dd:4d:9d:da:4e:3b:5f:71:ad:
51:0e:bb:db:b9:dd:f7:be:c3:54:b8:1c:ad:74:68:
b7:2c:45:70:0f:3f:bc:b5:76:16:b2:4e:84:b3:b4:
6f:41:72:0e:36:35:a7:d8:55:a0:0c:25:e5:42:ad:
1e:76:89:13:68:4b:c2:79:18:9b:e9:f2:29:b0:11:
71:bf:9e:16:54:b5:c6:e6:f3:de:ff:9b:7b:1a:06:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:F5:2F:5C:BA:D1:9E:D8:95:8C:AC:23:1C:64:2C:52:D1:91:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/631b9e24-3112-340d-997f-7fab91e5c018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:98:80:0f:56:83:25:b6:86:39:84:e2:ff:f2:5b:de:6b:09:
a0:47:63:29:63:b9:9b:0c:3a:8a:ac:14:46:cd:b7:48:5e:09:
ac:a2:a2:73:cb:24:2c:00:5f:e7:b6:57:f0:56:2a:b5:94:bd:
2c:3a:88:9d:92:ce:5c:1f:79:34:72:1e:41:b6:2d:a4:dc:55:
33:49:45:8d:2d:f1:ff:b4:3f:7a:79:4d:c4:13:1f:08:b9:a0:
2d:d4:2a:04:b3:70:2d:4c:9a:48:05:26:f4:48:9d:60:c7:63:
aa:0d:13:97:6a:80:fb:94:1a:b7:76:10:e3:92:a1:2c:ff:0d:
0f:21:49:19:67:22:1b:10:1b:15:9a:bd:1e:c0:76:b2:78:53:
f4:81:cb:0c:03:73:a6:f0:86:08:36:d9:d8:07:68:8e:7b:5e:
fb:e2:c8:ce:cc:75:fc:65:ab:fc:10:5e:6a:49:e4:e1:b3:4d:
7d:cc:f6:0e:4b:a7:78:a0:3d:55:98:f2:9c:e9:33:8a:4d:31:
11:ce:da:d9:20:84:c0:ea:ee:3e:b6:bb:c7:86:17:aa:85:e6:
27:9e:0a:28:c1:29:a5:6e:1e:2f:bd:0e:96:c4:77:2e:4d:31:
34:7b:97:84:ed:83:82:c7:89:f2:74:e3:c3:d5:5b:7f:72:7b:
c4:c0:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:23:19 2025 by rpki-client