Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e0901ec-d8db-3ed1-8e07-9cc5ebd7e758.roa
File: 8e0901ec-d8db-3ed1-8e07-9cc5ebd7e758.roa (raw, json)
Hash identifier: L350fzqketb13YklodQTlKZ40CI3K6SOkDpzmoSz97Q=
Subject key identifier: B0:79:4D:43:C6:C1:F0:81:4F:42:F9:31:36:18:A7:B1:F1:FE:EB:7A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446EDE43E52D686186628C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e0901ec-d8db-3ed1-8e07-9cc5ebd7e758.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Fri 30 Jun 2023 22:26:31 +0000
asID: 211728
IP address blocks: 166.0.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:ed:e4:3e:52:d6:86:18:66:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Jun 30 22:26:31 2023 GMT
Subject: CN=32d44aa0-d097-4c20-a44c-92f0d48632ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:5a:0e:fd:1d:d5:06:8b:27:72:94:3b:bc:
a6:8a:2d:d0:00:8f:62:82:4d:d0:b7:eb:99:1a:8c:
83:ae:ca:99:dd:69:ab:0a:42:86:09:65:d1:e5:4a:
6a:3f:24:e1:18:05:a6:2a:7b:3c:76:31:5a:a7:d2:
1d:bb:e2:1e:3f:8e:83:4a:19:cf:0c:b2:3e:02:e4:
e0:c9:dd:13:ed:88:2a:ce:ba:a8:2d:c1:6c:52:05:
5c:5a:a6:81:85:08:ac:3b:3d:76:12:94:bb:6a:f6:
9f:cb:33:3b:5c:40:82:17:07:ca:ff:ac:8e:f1:21:
55:ec:36:b6:bc:99:06:14:68:fc:79:16:5b:10:25:
f7:af:1d:e1:71:b3:d4:db:ad:f6:74:48:32:41:f2:
e8:df:b0:e0:f6:58:52:68:58:04:6e:e0:8d:27:61:
76:d3:79:90:04:95:c3:4b:99:6e:b4:e1:29:e1:7a:
fb:5b:55:83:fa:b8:16:50:47:43:47:03:dd:d0:a3:
e2:87:63:7c:a0:61:47:12:77:f4:e3:27:36:3b:3e:
57:64:af:cc:d1:4d:de:9d:1d:c8:79:6b:06:1f:65:
74:31:85:cf:6b:06:22:bb:78:60:dd:7a:14:fc:d2:
93:b5:08:26:90:37:c4:2d:d8:fe:9f:26:04:e1:91:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:79:4D:43:C6:C1:F0:81:4F:42:F9:31:36:18:A7:B1:F1:FE:EB:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e0901ec-d8db-3ed1-8e07-9cc5ebd7e758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:d4:4e:58:eb:9f:ed:a1:ea:54:1f:0c:5e:71:1f:56:b4:dc:
9f:2f:1d:60:f5:a8:4e:d9:cb:37:59:2d:5c:5d:0d:8f:90:5c:
f7:a8:76:3a:c8:f3:8c:8a:58:2a:a2:75:df:05:58:1c:dc:80:
d7:3c:89:18:61:e5:ae:1c:e7:73:4e:29:fa:97:19:73:68:ce:
75:05:6d:f6:fa:f6:c9:45:ec:2e:16:2c:c5:e4:f0:6f:00:eb:
fc:09:16:91:3b:26:bd:bb:bb:68:a7:4f:bb:be:59:3e:bc:2b:
be:92:8a:e7:96:e0:dd:9a:c9:8b:26:cf:d7:1a:8e:3d:14:41:
c8:a4:3e:2c:b8:53:e7:6e:d3:94:e2:2d:f4:3c:67:fd:14:2b:
1b:62:e2:ed:11:3e:3b:8f:ae:a4:b9:de:7f:e9:fc:56:0a:e2:
2a:76:7e:44:4d:60:7d:f6:11:75:65:6a:17:33:cb:fe:5b:07:
a8:b7:8f:33:0a:f4:0a:d4:6d:43:a4:cd:6f:95:67:05:56:c2:
b0:dc:b4:21:6f:6e:be:72:73:05:f3:0b:b1:10:f9:90:f6:49:
4d:84:b6:d7:e2:45:05:28:49:99:67:62:6e:7c:fb:3d:a3:e3:
33:a5:2b:33:a1:9c:bb:84:3b:e6:1b:80:07:3a:1c:bd:5d:13:
06:db:96:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 13:15:57 2025 by rpki-client