Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cb7c439-5fa7-3dc0-9cd1-ae82e6204c3b.roa
File: 9cb7c439-5fa7-3dc0-9cd1-ae82e6204c3b.roa (raw, json)
Hash identifier: GhJsGu436JETvav4fnOCsuHGwhCbPmtqyoyIZ4jtf8k=
Subject key identifier: CF:3D:90:F3:77:96:77:D5:5A:B0:19:1D:59:82:5D:6A:B8:7A:A9:22
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858425378A0938887EB5619971780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cb7c439-5fa7-3dc0-9cd1-ae82e6204c3b.roa
Signing time: Sat 24 Jun 2023 13:00:19 +0000
ROA not before: Sat 24 Jun 2023 13:00:19 +0000
ROA not after: Fri 22 Sep 2023 13:00:19 +0000
asID: 46664
IP address blocks: 166.0.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:53:78:a0:93:88:87:eb:56:19:97:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 24 13:00:19 2023 GMT
Not After : Sep 22 13:00:19 2023 GMT
Subject: CN=c7bc8426-1d29-4f6f-9c30-5e453ab92f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:91:26:ac:a3:4a:33:d9:c6:af:c3:cd:bd:
71:21:85:a7:ef:9e:9c:d8:1b:63:bc:87:d8:60:8e:
fc:a3:0a:f8:48:61:db:5d:b5:54:76:f1:fa:cc:28:
b5:b6:99:01:c1:71:1f:eb:e5:13:32:dc:66:4a:42:
80:f5:e0:44:26:f8:92:76:2d:c6:61:2e:03:69:fd:
0e:29:8a:8f:07:7a:25:7a:b1:3d:f4:70:e1:0c:a2:
7a:e6:d8:45:d9:91:1a:bb:1e:84:85:94:eb:15:15:
33:7a:31:1b:c8:78:cb:82:69:0f:46:f7:c0:8b:ff:
fb:07:16:b4:d0:b7:9b:0b:a3:a9:9d:cb:da:f0:be:
97:60:84:44:b9:10:82:8d:4c:0b:f9:28:2b:69:90:
2b:98:e0:70:65:70:8b:c5:53:6b:3f:5d:46:8f:72:
13:01:91:22:b5:a9:8d:04:73:86:65:f1:6f:3a:a3:
de:d4:04:34:ea:25:94:7b:57:d8:63:40:52:d6:b0:
de:23:71:44:88:ac:5b:af:6b:7c:3b:80:09:3e:db:
5f:91:2e:d7:23:f5:76:aa:bf:eb:9c:3d:0f:fb:6d:
a3:3c:46:83:6f:12:91:34:1a:a3:9c:0a:0e:27:8d:
6f:fc:70:66:89:7e:66:60:95:f0:10:4f:1b:f4:ec:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:90:F3:77:96:77:D5:5A:B0:19:1D:59:82:5D:6A:B8:7A:A9:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cb7c439-5fa7-3dc0-9cd1-ae82e6204c3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:65:7c:87:83:18:ed:16:72:b3:a2:b0:49:a4:07:56:01:cb:
2c:d5:e3:84:00:f5:75:93:60:f5:b1:46:10:af:01:af:2d:52:
d6:20:c0:da:d2:42:99:1f:d0:ca:fd:29:ef:3c:23:fd:96:d1:
d7:78:82:4d:ff:54:e7:0f:59:15:44:34:08:ab:4e:de:b7:d5:
cd:89:ec:a8:b0:00:97:d0:02:98:19:90:cc:db:6b:3a:7d:65:
0d:ab:24:a3:25:32:cf:f1:75:57:bd:3a:0b:53:ae:4d:26:03:
d7:fd:b0:e0:e0:95:ac:e0:08:aa:21:db:13:35:2a:b0:82:ac:
4f:d8:f0:c3:b0:b4:3d:69:a1:97:e3:39:45:48:f4:ae:b1:56:
97:74:43:0b:00:6a:3a:61:d1:ff:3b:9e:b2:19:5d:d9:2d:4e:
22:50:69:67:d3:50:30:4b:85:40:f7:11:56:be:28:6e:05:17:
9f:14:af:44:26:dd:d8:66:e9:95:51:e9:4d:43:0d:d1:7c:7c:
3e:19:83:55:ef:42:1d:17:f0:32:55:b9:ac:3f:48:b9:90:2c:
08:f4:52:b2:f0:6c:f3:f9:fc:be:6a:8f:c2:39:1e:a0:c8:47:
09:f2:af:20:4f:33:aa:ae:f3:67:ba:22:b4:a3:2b:b5:af:9f:
35:77:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:53:18 2025 by rpki-client