Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7432a164-19e1-3e04-aa1a-8044c4ca22ff.roa
File: 7432a164-19e1-3e04-aa1a-8044c4ca22ff.roa (raw, json)
Hash identifier: TH39RKwRXbG+rHMfWlfB5Jt4N+mcQpVul8yVAVRyBbY=
Subject key identifier: 41:57:E4:96:DD:CB:94:D4:C7:CA:30:01:65:89:E9:00:8C:D8:21:90
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858425979F8CEFE0D5CE278D636C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7432a164-19e1-3e04-aa1a-8044c4ca22ff.roa
Signing time: Mon 26 Jun 2023 16:37:58 +0000
ROA not before: Mon 26 Jun 2023 16:37:58 +0000
ROA not after: Sun 24 Sep 2023 16:37:58 +0000
asID: 11798
IP address blocks: 166.1.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:59:79:f8:ce:fe:0d:5c:e2:78:d6:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 26 16:37:58 2023 GMT
Not After : Sep 24 16:37:58 2023 GMT
Subject: CN=d2740757-7b8e-4121-a2e4-f63c5766503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:1c:dd:34:7e:0e:ec:d8:a1:1c:c5:20:30:
62:a5:de:ac:63:97:ef:46:e6:f7:f9:45:d4:5a:16:
0a:a1:7e:fc:05:31:b9:3e:d0:fa:95:d4:ad:32:a6:
b3:f0:96:f3:3b:fb:76:b3:6d:37:88:fb:b1:5b:d2:
36:9a:7a:3a:aa:2d:6c:f0:1d:05:7e:07:af:34:a3:
36:c1:3a:7b:32:e6:97:ba:46:b5:96:f8:01:82:29:
b1:3c:cf:ab:df:37:3a:92:66:b3:f1:8f:9f:7e:82:
62:fb:70:76:6e:0e:2e:97:9e:42:5e:32:c1:94:fd:
dd:e3:f1:81:f1:1c:46:32:fa:76:9f:5c:89:59:14:
00:ea:74:34:6a:6a:68:5e:7d:9c:ff:40:6e:49:02:
69:17:b0:a0:9b:b1:35:a0:4d:bb:0d:45:e5:aa:75:
1f:7b:95:90:79:37:66:74:27:54:b4:eb:5c:ce:f8:
68:e1:89:40:44:83:e1:22:00:fb:0e:85:ca:bc:c7:
5e:fa:93:f1:5a:ec:f6:04:39:96:94:84:9d:cc:74:
ec:3b:98:b0:46:70:e1:82:e5:7d:b1:b6:69:26:6b:
fa:22:4a:e9:d8:e6:16:85:e3:11:24:e6:84:d1:b6:
5e:da:94:28:d8:b1:1e:e9:b0:15:81:34:66:92:42:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:E4:96:DD:CB:94:D4:C7:CA:30:01:65:89:E9:00:8C:D8:21:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7432a164-19e1-3e04-aa1a-8044c4ca22ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:c8:8c:6a:e9:b5:5c:66:d1:0e:54:02:23:6f:7f:01:be:f0:
ab:5a:91:68:f4:8a:c6:bf:f7:af:6d:b2:fd:d8:e1:9d:ba:39:
78:ec:6b:df:86:06:91:84:96:c2:34:d8:94:4f:56:48:6b:ea:
18:69:4a:89:aa:b4:09:88:35:20:6a:05:64:e3:c1:e3:2c:6c:
5d:80:82:d7:21:cb:8e:ce:f1:71:09:cc:4e:8c:3e:d5:7a:b6:
7c:e4:21:c1:d6:c9:33:13:b9:97:26:36:8b:fd:bd:fa:29:92:
c2:8e:fa:cd:99:8b:54:de:8c:23:13:68:fd:93:52:df:c5:1f:
25:43:17:0f:92:16:49:72:89:43:8a:f6:4e:dc:78:98:7e:a9:
68:49:a6:83:1f:f3:3a:cb:bf:26:57:7f:c3:24:e1:b1:eb:ed:
17:44:27:8c:30:a6:69:09:3e:76:7f:df:ae:4b:52:99:73:2e:
9f:9c:0d:8b:3a:b2:a3:1f:05:69:84:04:41:d7:93:0d:74:3f:
9a:3c:7d:a1:32:91:0a:56:60:9d:09:9b:48:75:1b:2f:f4:4b:
25:3e:2e:03:0d:0b:5f:a5:28:cf:a7:2c:56:db:37:51:39:cb:
01:81:4f:a7:8c:2b:21:4c:66:96:79:1f:17:eb:6c:2a:a6:ef:
86:ae:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 20 12:04:28 2025 by rpki-client