Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8da7e29f-7074-384e-aa87-3df5dbf96cce.roa
File: 8da7e29f-7074-384e-aa87-3df5dbf96cce.roa (raw, json)
Hash identifier: /pAj8d2Q2FcoQmhbq1DkNR1bNREgnG/PT8Tbx3WxChk=
Subject key identifier: 0E:E0:88:DF:0D:F7:1E:C2:CC:9E:06:3E:03:34:3D:91:E6:48:D4:9B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858441D6E9CDC27FDD34BCF0FCE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8da7e29f-7074-384e-aa87-3df5dbf96cce.roa
Signing time: Tue 05 Dec 2023 14:00:21 +0000
ROA not before: Tue 05 Dec 2023 14:00:21 +0000
ROA not after: Mon 04 Mar 2024 14:00:21 +0000
asID: 834
IP address blocks: 166.0.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:6e:9c:dc:27:fd:d3:4b:cf:0f:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 5 14:00:21 2023 GMT
Not After : Mar 4 14:00:21 2024 GMT
Subject: CN=0160412d-40b4-4832-a7a5-e61a02a24ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:5f:f9:c8:b7:2b:22:4b:d5:59:cc:bb:a1:
52:91:00:80:e9:b9:1f:8d:5b:39:fc:53:cc:5c:0e:
ff:02:9e:f5:18:a1:1d:8e:c6:a4:73:54:3f:52:6a:
91:12:2c:b0:0e:bb:78:1f:34:b9:98:28:cf:95:f6:
38:d7:17:aa:45:ee:a3:0e:50:94:6f:b2:09:c5:17:
dc:ac:21:96:64:ab:4e:e7:cf:0c:36:dd:d8:2c:64:
4d:e2:d4:92:77:1a:f2:88:31:06:14:9f:69:35:29:
2a:0a:3e:eb:74:52:03:c6:27:67:90:fc:d8:47:87:
cb:51:32:d6:ed:40:98:e8:4e:6c:ad:95:d2:ac:c1:
a4:68:f7:45:dc:8e:b4:49:28:67:83:33:47:07:f6:
b2:46:ad:f5:a7:6e:78:9c:5f:d3:bb:19:8f:c4:48:
67:9a:26:88:1b:e3:43:10:9b:67:ce:d6:54:b1:05:
1d:1d:da:02:45:e2:2a:74:c5:39:29:e7:c0:a8:db:
7c:4c:91:e3:11:ea:18:99:9a:29:90:93:d9:ac:ad:
7e:c5:f1:8f:69:a9:cc:23:f8:b1:05:67:fe:0d:5f:
48:f4:a4:b6:92:9b:f9:f2:4b:2f:99:de:54:ca:a4:
f2:18:65:c9:47:da:12:2f:cd:b0:92:d4:75:da:3a:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E0:88:DF:0D:F7:1E:C2:CC:9E:06:3E:03:34:3D:91:E6:48:D4:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8da7e29f-7074-384e-aa87-3df5dbf96cce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:59:a4:9d:b6:2b:3a:bb:8f:3a:48:33:64:6a:e0:73:26:0a:
01:d4:3b:bd:ea:07:22:53:93:c9:8d:31:41:ab:44:17:b0:ab:
c1:47:72:8f:a9:c3:dd:cd:a7:8b:67:b9:26:32:1b:9d:b7:23:
33:7d:1a:8f:13:49:eb:b1:96:61:95:ef:b2:7d:5e:d1:81:f3:
a5:41:3b:fe:55:0b:3a:a7:92:28:f6:0b:90:f9:21:8d:4a:b4:
a4:5e:25:9a:43:6d:c0:e4:cb:79:82:8f:3b:71:3a:81:85:e3:
97:7a:f4:db:2c:6b:d4:15:e4:f5:d0:f5:34:fd:1f:91:64:56:
39:d6:7d:b1:ee:95:0a:f1:40:0c:0d:81:11:4d:a1:f9:68:53:
b4:53:e8:c4:9b:4c:43:3d:41:8d:b8:fd:b3:85:06:ba:b1:d6:
ad:b9:af:3a:52:cf:fb:dc:6e:17:a4:73:86:f4:ad:cf:ec:94:
1d:03:b6:e6:79:7e:c6:b2:16:32:96:77:e7:e6:20:37:d2:ef:
d8:ae:1f:7b:89:54:5c:ec:01:ea:df:58:4a:9e:32:01:ea:6f:
73:f2:9f:48:1d:48:f9:85:18:9d:e0:49:37:bc:c1:3c:0e:ed:
fa:ed:3a:f4:8c:2d:12:75:46:a7:12:78:46:19:16:6c:34:92:
f3:9d:c9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:11:07 2025 by rpki-client