Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/861d9a43-bedb-30a4-ab6a-691c4f1fff53.roa
File: 861d9a43-bedb-30a4-ab6a-691c4f1fff53.roa (raw, json)
Hash identifier: qMKIFzlW5Oz+6k7jHqE0x4A5w5T0JcJH8aryQd2JUQE=
Subject key identifier: 45:E1:E6:1E:57:46:8C:59:2C:85:F2:DE:96:EC:6D:1A:39:2C:50:6E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845280AF2E74CB7A6543D1BB700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/861d9a43-bedb-30a4-ab6a-691c4f1fff53.roa
Signing time: Sun 10 Mar 2024 02:00:25 +0000
ROA not before: Sun 10 Mar 2024 02:00:25 +0000
ROA not after: Sat 08 Jun 2024 01:00:25 +0000
asID: 11798
IP address blocks: 166.1.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:28:0a:f2:e7:4c:b7:a6:54:3d:1b:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 10 02:00:25 2024 GMT
Not After : Jun 8 01:00:25 2024 GMT
Subject: CN=ad8dcaf1-7fa1-4b02-a442-69a91b0336e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:75:6b:93:f5:31:a8:62:1a:05:0e:ed:23:
ec:86:db:c3:3c:0b:4c:47:23:94:e7:1c:a6:c5:64:
b4:66:be:57:75:4b:cf:74:d3:42:6f:31:7a:ad:7f:
cd:87:a7:04:74:98:c3:eb:9e:90:40:d1:ce:36:b5:
b1:85:ba:f4:05:f8:2d:49:a8:02:22:54:1f:bb:20:
44:6a:91:00:74:23:8a:1c:2b:35:1c:f9:55:5d:ed:
2f:63:ec:d5:a2:e6:f7:90:1c:76:c5:7b:29:01:57:
e3:79:21:d0:84:7f:8c:f2:c9:77:cb:ff:0b:a0:43:
10:18:e4:5c:1c:e1:ce:dc:6e:23:ef:65:5b:3c:ce:
05:7d:0e:98:2e:05:2e:c2:14:ea:c7:e4:0b:27:42:
4d:12:1f:7f:b1:28:85:c4:a4:22:34:30:7d:c8:30:
8e:53:1e:81:bd:c6:09:bf:50:4c:d2:42:cc:ba:9e:
a5:61:71:39:3b:f8:21:2c:82:52:0f:cc:6b:79:f3:
ee:c4:f2:9e:f0:69:e6:69:f1:23:57:44:6f:76:30:
27:0b:5f:c4:f4:eb:fa:8c:2f:1b:fd:b7:fc:6b:25:
09:3d:41:9b:ee:21:69:75:e2:aa:bc:c6:bd:5d:b3:
5c:b3:3f:c6:cb:81:56:d6:9d:95:f5:77:9b:9e:26:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E1:E6:1E:57:46:8C:59:2C:85:F2:DE:96:EC:6D:1A:39:2C:50:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/861d9a43-bedb-30a4-ab6a-691c4f1fff53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:39:68:65:81:9d:2f:78:d3:26:d4:07:ce:08:00:ec:0a:20:
6e:51:75:dc:11:ab:34:3c:ea:e0:f2:f6:0f:27:c2:4c:69:14:
47:d6:a1:4c:ca:aa:33:97:ec:c4:21:32:07:4b:68:6a:45:94:
99:79:14:01:2c:d6:84:c7:bb:2a:98:54:db:1d:e5:18:c3:56:
b4:24:c8:34:65:23:ab:12:d9:58:93:2e:aa:b2:e1:d0:0a:d7:
f4:e6:2a:67:ee:47:2d:c6:dc:08:53:7f:e4:1f:7a:ec:62:53:
04:39:65:ba:19:d9:cd:b6:a7:32:5f:f3:c8:7a:2a:b4:c3:91:
6d:e4:3e:1d:6a:d7:85:35:5c:bf:46:99:5b:4e:53:e4:dd:2e:
18:d1:a1:46:06:e0:16:67:70:37:ef:df:b1:e6:b9:a0:d6:60:
d6:92:aa:80:2a:5c:80:2a:0a:52:ab:e6:40:30:15:59:ac:46:
03:e8:36:12:ff:b4:65:8f:41:8b:18:8f:fa:c1:2c:5e:8b:d5:
b7:9f:59:21:37:97:66:41:bf:f1:e3:b5:b8:cb:fb:8e:cb:9f:
e8:01:dc:83:8d:c5:24:c3:8a:c0:17:10:08:ad:96:16:0f:11:
70:c7:95:7f:20:2e:86:e9:ce:8e:24:87:e7:eb:06:d8:a5:8b:
5d:3a:dc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 16:38:15 2025 by rpki-client