Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87c74b75-aea8-3bcf-b9fe-9ef0bc2a5b69.roa
File: 87c74b75-aea8-3bcf-b9fe-9ef0bc2a5b69.roa (raw, json)
Hash identifier: txdgBWKbyTp/dxA2diH9cfLfLcCskJ8oArCOFUsRSYM=
Subject key identifier: 68:02:E3:63:85:3F:53:56:B1:F9:F0:D1:F9:EE:CE:11:77:62:A1:41
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843A3E134C5A0916ED31A25B278
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87c74b75-aea8-3bcf-b9fe-9ef0bc2a5b69.roa
Signing time: Mon 23 Oct 2023 01:00:16 +0000
ROA not before: Mon 23 Oct 2023 01:00:16 +0000
ROA not after: Sun 21 Jan 2024 02:00:16 +0000
asID: 834
IP address blocks: 166.0.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a3:e1:34:c5:a0:91:6e:d3:1a:25:b2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 23 01:00:16 2023 GMT
Not After : Jan 21 02:00:16 2024 GMT
Subject: CN=0e442d7c-e58e-4f47-90ee-0060276d5c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:73:d3:2c:63:49:ac:be:5f:75:0d:62:62:14:
dc:43:e3:f2:d4:44:ba:e1:ad:df:ce:a2:0a:d8:56:
65:a6:6a:da:8c:9a:80:f1:3b:82:8a:2c:b7:9a:b8:
fe:9e:6b:d8:87:28:32:7d:65:47:7f:20:6a:b1:3f:
30:5f:4c:ae:29:3b:e6:b2:6d:99:f2:c8:ef:6b:61:
6d:e5:c9:28:9f:aa:6d:e9:d1:ae:55:5a:3c:df:b6:
53:be:39:cb:d0:e8:2d:55:2c:f7:51:c7:c6:a1:5f:
3a:46:9e:8b:28:99:ba:a8:9f:9a:47:d0:32:12:d7:
42:68:f1:d8:1f:e1:a2:fb:20:81:d7:35:d3:cb:4d:
6c:84:92:08:19:9b:81:bf:8a:56:fb:31:16:8f:2c:
6d:1a:38:18:24:69:ba:91:b0:d8:59:7b:20:29:e4:
3c:a8:4e:b9:1c:60:ea:26:40:21:71:84:a8:a5:9f:
40:6b:39:0f:79:7b:ac:59:15:37:41:5a:45:93:9c:
33:19:a3:40:5e:c0:20:c9:69:52:65:cd:ca:57:d3:
75:8b:d2:ec:e4:f7:b1:ca:3b:b9:0c:f1:27:a3:17:
9b:f7:3e:75:f9:cc:a1:ad:be:d5:20:e3:4f:21:84:
b2:6a:b1:7c:1b:38:e2:94:5a:98:ca:d0:ef:e0:e0:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:E3:63:85:3F:53:56:B1:F9:F0:D1:F9:EE:CE:11:77:62:A1:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87c74b75-aea8-3bcf-b9fe-9ef0bc2a5b69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:ca:66:60:11:3b:91:3f:95:74:9b:8b:70:ad:20:5e:50:74:
55:19:8a:21:fa:96:db:16:7a:7f:e5:3f:24:ca:17:cc:d0:99:
7f:9a:86:24:5b:d4:15:fe:22:03:fd:de:19:bd:ab:01:5c:dd:
98:ed:d2:82:0c:68:da:8b:d1:a4:87:a2:ae:f4:f6:f0:eb:56:
b0:85:a9:22:76:35:4c:6d:44:22:95:b6:f4:05:05:04:44:3a:
7a:f4:d2:7c:a2:89:f4:43:45:c1:1c:31:fa:43:8b:08:e0:c5:
cd:28:bf:f2:ea:ce:71:00:8e:0a:15:cf:f3:7d:5c:4c:77:08:
5c:c0:92:a6:65:87:2a:e1:a7:71:e2:33:21:4a:09:f5:3d:a4:
ec:6a:d1:fb:fe:a6:c4:90:2c:a5:6b:1b:b6:e5:fb:ab:f0:67:
9d:bf:0e:b4:17:b2:26:80:de:49:e9:b7:b7:22:5f:1d:d7:fa:
a2:db:7b:44:be:ae:ad:0f:ff:00:d6:f2:75:d2:1d:ec:bb:47:
06:8c:7b:49:53:e7:0a:6a:92:75:83:e0:6e:d4:0e:e6:b0:74:
66:1b:3b:24:39:5f:4b:86:f3:6f:ba:8f:d9:6a:03:d3:a7:fb:
9f:0d:ee:0b:65:8f:8b:e5:c1:72:17:fa:a6:f4:f7:2e:7d:c3:
f5:cc:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:51:19 2025 by rpki-client