Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a7a185e-bd72-3434-a7a3-6c7800078fe6.roa
File: 9a7a185e-bd72-3434-a7a3-6c7800078fe6.roa (raw, json)
Hash identifier: 3FqPglaiIfOv3vy2V8hcajsaCFEnt5sJef6sc+VfDXo=
Subject key identifier: 29:28:FD:AC:8F:46:55:4A:4D:08:38:14:5D:4D:43:17:4E:10:39:06
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F802FADA5990AF35AF5C0C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a7a185e-bd72-3434-a7a3-6c7800078fe6.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2f:ad:a5:99:0a:f3:5a:f5:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=f2524cd8-68e3-4ea2-8457-9723ca12f3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:67:d0:b7:4a:f4:51:3c:21:6f:cd:15:bd:
79:ab:2e:c0:cb:0b:96:c2:bf:b7:c4:f5:c8:2d:95:
a4:5d:8c:da:3c:4d:18:aa:b9:ca:27:4d:56:83:52:
7b:f6:c3:7c:21:b3:a7:08:a6:81:4a:af:5e:30:8f:
bb:c1:a8:2b:04:38:2d:f0:25:2c:e6:50:db:97:d0:
5f:09:62:e1:05:55:a7:f6:48:c1:47:16:de:a4:16:
17:d5:cb:1b:de:ba:3c:58:48:7e:8f:a9:c5:36:bb:
4a:63:33:bb:d1:9d:de:35:f4:dd:72:8e:93:7b:95:
4b:e7:5c:a9:b8:84:5a:22:32:3f:7b:b0:a2:2a:ef:
87:88:2f:6b:82:f5:6d:17:a6:4e:3e:ab:7c:ee:ae:
26:91:e0:19:4e:59:7b:c6:36:68:9b:b3:61:84:5b:
57:c1:84:a9:be:a0:fe:62:b1:18:50:49:48:11:08:
15:3b:8a:07:f0:71:45:78:66:d8:a9:83:2f:be:50:
0f:8f:44:06:df:a4:51:65:8c:da:85:d7:a8:68:49:
0b:7d:bd:27:1f:48:d8:ea:40:2b:b2:2a:af:cf:93:
a6:3f:ba:8e:92:2d:22:17:91:bf:cd:69:27:0e:74:
4e:8f:0e:17:fb:f3:da:2c:d9:38:49:29:4c:40:de:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:FD:AC:8F:46:55:4A:4D:08:38:14:5D:4D:43:17:4E:10:39:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a7a185e-bd72-3434-a7a3-6c7800078fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:18:07:82:ca:da:e9:21:44:cf:88:79:cc:17:2f:fa:9e:12:
97:38:b6:87:3a:71:3c:57:b3:76:37:04:65:68:1d:53:bc:5c:
ab:36:b9:00:b4:70:1d:8b:b3:2e:b0:ae:84:bc:bb:89:4e:4b:
f4:3b:d9:70:70:a3:5e:0a:3e:aa:c7:51:fc:60:98:b9:e0:a6:
23:4c:9e:ae:f9:d9:9d:41:e3:e8:e5:36:1e:be:0c:4c:69:36:
8d:81:62:de:fe:56:11:16:50:58:35:27:28:15:2d:95:7a:a1:
8c:0b:07:eb:dc:11:65:4a:a5:a0:d6:64:e9:64:dd:57:8a:e0:
e7:bd:a4:ab:19:c8:f7:f1:ae:39:20:b0:92:bf:fd:6d:7b:90:
fe:46:57:b8:ac:71:a0:63:08:0a:68:71:66:16:6c:4b:42:17:
9e:e7:2b:5b:62:19:50:50:ce:cf:ce:00:a6:5c:ac:35:e4:37:
73:19:58:b7:b8:35:68:d3:7a:f3:16:33:96:28:c9:98:65:14:
39:ed:f8:9e:66:f1:83:a7:8d:db:fe:c8:04:0b:87:e7:e0:95:
00:8a:0c:49:80:42:ee:7c:14:bb:1a:26:a5:95:2b:de:40:cd:
76:86:ec:ac:7a:54:83:fa:10:d6:f0:b3:01:e1:26:ef:12:d3:
28:e3:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:48 2025 by rpki-client