Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e7e426e-5411-3b22-a8e6-1d6e9d886094.roa
File: 9e7e426e-5411-3b22-a8e6-1d6e9d886094.roa (raw, json)
Hash identifier: pqTTfEPMS2PYP+jlHPRcXP43irqN8JraG+RTdckxc7U=
Subject key identifier: 3B:B3:39:58:13:3A:05:22:5E:72:20:71:56:FD:C6:B3:4D:6D:D0:28
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584829C8A2C53EEBF74105007900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e7e426e-5411-3b22-a8e6-1d6e9d886094.roa
Signing time: Tue 10 Dec 2024 19:19:17 +0000
ROA not before: Tue 10 Dec 2024 19:19:17 +0000
ROA not after: Mon 10 Mar 2025 18:19:17 +0000
asID: 11798
IP address blocks: 166.0.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:c8:a2:c5:3e:eb:f7:41:05:00:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 10 19:19:17 2024 GMT
Not After : Mar 10 18:19:17 2025 GMT
Subject: CN=211cba79-d15e-4b81-be3e-72ecb7580253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:bc:6a:6e:d5:1f:ca:37:03:49:81:ca:7f:
9e:d5:30:68:99:19:c8:db:a3:0c:de:48:f0:8b:0c:
53:c0:43:8b:f9:22:2f:38:95:94:40:8a:e9:cf:87:
80:2b:39:d5:48:7f:6d:38:68:59:4f:f8:c1:1e:5b:
c3:6a:40:ca:79:a7:55:28:1b:67:fd:8b:72:5c:68:
1c:51:4e:12:d1:70:5e:8c:83:57:4d:55:66:40:13:
df:5c:b1:3e:2f:6f:18:a3:ff:b4:12:2f:3c:fb:a6:
5a:1c:99:d7:b7:53:61:52:7a:c0:c7:81:d6:9d:25:
dc:81:f9:17:10:c1:ef:3c:c8:13:17:4f:c4:78:92:
98:0f:30:7e:1c:9f:43:7a:93:02:54:ef:08:e5:2a:
f5:71:2e:50:c2:bd:9b:5b:fa:02:e5:05:9d:ea:2c:
be:45:e6:e7:f3:0a:eb:1d:31:39:0b:ff:0c:bd:2c:
19:b5:9f:6c:38:3c:da:c4:0f:98:ab:fc:3c:76:a1:
f1:1f:bf:42:c2:e8:74:a0:3f:1d:04:3f:37:3b:a8:
82:46:09:e7:42:bb:38:ce:73:e1:d2:02:86:56:27:
7a:7d:43:15:6d:32:14:0c:4a:ab:94:47:a2:f8:59:
da:c4:c5:e8:13:eb:26:68:33:74:b5:3e:37:0d:d0:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:39:58:13:3A:05:22:5E:72:20:71:56:FD:C6:B3:4D:6D:D0:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e7e426e-5411-3b22-a8e6-1d6e9d886094.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:46:32:4e:13:8f:d2:99:fb:68:fd:85:86:9b:78:71:a3:84:
62:9b:5d:3a:85:bf:b7:50:bb:32:f2:c5:70:35:7b:10:4c:69:
fe:34:e9:88:48:eb:d0:b4:60:68:fb:af:94:42:80:ff:9f:3f:
01:33:24:07:a4:83:b8:c7:91:1f:bd:34:e6:f0:15:69:51:bf:
26:89:41:d4:7f:9e:56:26:40:ff:a0:56:ec:26:4a:69:ad:d6:
3e:26:74:de:06:23:e6:b4:78:18:7e:a5:31:58:43:03:18:6f:
e4:28:1a:b5:15:b2:a9:4b:09:25:aa:6c:73:ce:62:de:07:5f:
55:a1:56:2c:e9:d6:bf:6d:d8:31:96:7c:15:f4:cd:b9:fa:1e:
fb:9b:95:9b:80:92:92:28:54:85:e9:85:38:cd:7c:fc:cd:bb:
37:0c:0c:66:52:ee:01:46:d2:13:72:3a:d3:ed:b1:4d:55:57:
99:af:fe:d9:8e:a5:20:55:29:cf:73:7f:d3:00:d2:cc:a3:7d:
dc:ba:58:f4:77:a0:98:7d:3d:6a:96:a7:4c:0f:cc:ec:93:83:
41:48:61:a5:19:e1:5c:cf:b0:85:da:86:a2:b5:f6:bd:8a:ef:
df:b5:b8:27:58:66:02:95:1c:45:e9:51:90:dd:cb:e4:7b:d8:
f6:e8:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 23 21:32:50 2025 by rpki-client